Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier: gNx/G9osLFK5SIHJYo8lusMQFXR7MLSomlTQV6RP/sk=
Subject key identifier: E8:94:F0:76:AE:3D:F8:9C:59:6C:69:B8:2B:B3:3B:67:E3:53:83:4B
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial: 01A0E9D21E345C6FBDB41E9A804015ADFC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number: 0858
Signing time: Mon 28 Sep 2026 21:00:56 +0000
Manifest this update: Mon 28 Sep 2026 21:00:56 +0000
Manifest next update: Tue 29 Sep 2026 21:00:56 +0000
Files and hashes: 1: DryZPdsnz8wKaTiw0pPMUAKMwos.asa (hash: DE1MBRda0AF506miFfOnjiVNIDiBBy3JyuXMEw9Jwn0=)
2: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: lJXV2qH7BEP0uOBaVX9Os2C/CD4tzUvtgYQuBaNZSME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:d2:1e:34:5c:6f:bd:b4:1e:9a:80:40:15:ad:fc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
Validity
Not Before: Sep 28 21:00:56 2026 GMT
Not After : Sep 29 21:00:56 2026 GMT
Subject: CN=e894f076ae3df89c596c69b82bb33b67e353834b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:e2:13:d7:4c:e7:2a:8c:7c:b5:5e:d2:54:
59:8a:49:92:e9:99:d6:23:1c:9d:84:a7:ec:59:7e:
b8:4f:90:e4:5a:62:3a:cb:5f:f1:69:b4:23:a4:a7:
bc:54:8b:aa:02:49:d2:a4:71:18:3a:92:6e:b2:26:
33:1d:dc:75:a6:52:4e:8a:bd:b1:94:fa:6c:2c:4a:
81:4b:e0:31:59:51:ac:47:cf:8b:76:60:1a:b1:7a:
0f:35:cb:a4:87:e7:2b:06:72:5e:3b:11:0f:b9:e8:
39:dd:ce:9b:84:6b:89:be:c8:a2:85:7b:62:b1:4d:
6a:3c:5b:de:97:5a:cf:6a:33:11:a9:33:da:ec:40:
28:78:0c:a6:e7:02:9c:70:a3:c9:28:20:a5:28:21:
d9:21:b5:ba:2b:ee:36:b1:1f:92:61:e1:29:94:a7:
b1:71:9c:42:be:eb:33:35:dc:85:05:c3:1c:cf:d1:
c4:30:fe:f0:60:0e:40:c4:3b:9b:79:55:4b:68:2f:
b8:ba:5e:d8:22:65:05:47:0c:6c:27:4b:70:f4:56:
d0:f5:3b:ef:bf:74:b7:9a:a5:12:05:5a:d4:ac:63:
46:6b:09:78:76:16:cb:ff:2c:ea:b7:86:d1:b3:5c:
d3:15:cd:ab:a5:c1:d5:96:c9:05:1b:94:29:73:32:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:94:F0:76:AE:3D:F8:9C:59:6C:69:B8:2B:B3:3B:67:E3:53:83:4B
X509v3 Authority Key Identifier:
keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5c:3f:67:a3:5a:01:a1:19:ae:af:f8:5f:98:85:3a:93:c4:
96:28:e4:de:98:0f:d8:6f:94:ff:05:e8:81:f9:8d:8d:9d:b6:
47:d1:82:bd:3d:63:4f:2a:f9:df:cd:1c:d7:af:4b:6b:eb:75:
f2:80:66:00:00:65:68:5d:18:10:b0:e1:ec:b2:d2:a9:82:a4:
de:8d:69:0d:02:30:c3:38:04:d1:29:1a:1b:6e:0b:23:42:21:
ee:03:6d:0a:26:6e:89:eb:64:d3:7e:5b:3f:30:73:cf:5f:59:
41:02:ac:86:5b:a8:81:07:e5:8f:e5:9f:59:99:cf:09:8d:27:
14:ac:04:86:3c:37:36:6f:fd:d1:ae:35:31:00:82:c2:66:13:
ab:67:49:3b:02:ed:75:d7:cf:4f:0c:9a:8a:12:46:94:e9:70:
f9:48:50:a7:0c:83:86:fe:6b:4c:78:1c:10:26:53:b9:ec:76:
48:31:fb:f8:0e:d7:55:4a:0f:2b:b3:9b:f5:e0:fd:a9:02:10:
6f:50:b0:66:d2:39:a5:7d:a9:1a:3a:41:17:2b:15:0b:5e:b5:
e7:71:84:ae:62:47:eb:ef:44:28:d4:64:4b:49:e8:35:86:b4:
e8:b5:6a:f7:5d:b0:87:d0:ce:f6:34:ec:7a:85:8d:8b:df:c9:
a3:16:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:44:21 2026 by rpki-client