
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
File: fsGdR6J46MXxy7L88r0LJnajZew.mft (raw, json)
Hash identifier: TCFh4OLQ79p7IGNx43nIr3G7JIBNuHCLM+FQT1+IeB0=
Subject key identifier: 8D:9B:24:C8:AA:BF:E8:65:09:C3:21:B7:A3:B1:55:95:0B:35:0F:39
Authority key identifier: 7E:C1:9D:47:A2:78:E8:C5:F1:CB:B2:FC:F2:BD:0B:26:76:A3:65:EC
Certificate issuer: /CN=7ec19d47a278e8c5f1cbb2fcf2bd0b2676a365ec
Certificate serial: 01A0E36345628E268756DD6EC93C1F55650B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:02:08 +0000
Manifest this update: Sun 27 Sep 2026 15:02:08 +0000
Manifest next update: Mon 28 Sep 2026 15:02:08 +0000
Files and hashes: 1: fsGdR6J46MXxy7L88r0LJnajZew.crl (hash: W4bMQANNM4p+WtjHPR/96jjtjT6UN1YDnWv5n0qAYag=)
2: lJwPx_YfXagzrWfCaDbeHMh9VSU.roa (hash: lpKb9Ke9ORsiJSWDSA7lflKj6VXsYAISsmKT3+p+SJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:45:62:8e:26:87:56:dd:6e:c9:3c:1f:55:65:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec19d47a278e8c5f1cbb2fcf2bd0b2676a365ec
Validity
Not Before: Sep 27 15:02:08 2026 GMT
Not After : Sep 28 15:02:08 2026 GMT
Subject: CN=8d9b24c8aabfe86509c321b7a3b155950b350f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:82:a1:35:27:a9:84:0c:eb:c1:82:f4:61:03:
f2:84:c3:81:cf:3d:ca:43:e7:7b:72:97:ec:de:41:
68:67:6c:0d:51:73:7c:8e:a2:e0:01:2d:c0:73:be:
91:4b:0d:49:14:d2:70:17:b5:3e:90:7d:43:3f:ed:
aa:fe:a0:28:af:78:12:b0:9e:77:48:42:67:03:5a:
af:95:e3:73:27:db:ee:7b:e4:20:df:73:2e:84:cb:
96:d4:bf:7b:e7:a6:7e:74:79:ee:8e:aa:a5:97:c0:
0d:ac:a0:9e:66:10:e6:a0:3c:07:8f:2e:f1:0e:10:
13:77:36:49:98:ed:10:01:71:bf:4f:06:70:93:96:
d9:bd:d9:8e:69:09:c4:79:76:99:21:74:55:08:b2:
d4:66:9d:f6:3e:bb:3d:4e:68:e8:a5:b5:01:56:5a:
dc:a2:ff:49:9f:95:f8:da:58:4e:57:01:0a:0d:e1:
3c:7e:2d:13:ff:f9:5e:54:80:99:83:6d:f0:77:fb:
2f:ed:4f:d7:4b:be:5c:6f:8a:8c:4e:42:90:a9:76:
42:f6:c2:f0:be:1c:63:6e:f8:22:dc:4e:b0:c7:e3:
f0:ea:3e:f5:74:3b:58:e3:b6:30:96:01:ea:35:09:
30:9a:0f:39:90:19:25:85:23:bc:91:72:d8:26:83:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9B:24:C8:AA:BF:E8:65:09:C3:21:B7:A3:B1:55:95:0B:35:0F:39
X509v3 Authority Key Identifier:
keyid:7E:C1:9D:47:A2:78:E8:C5:F1:CB:B2:FC:F2:BD:0B:26:76:A3:65:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsGdR6J46MXxy7L88r0LJnajZew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/fsGdR6J46MXxy7L88r0LJnajZew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:33:e9:fc:24:1f:4a:45:ac:d7:a8:e6:37:31:6a:53:a4:be:
d5:e0:6a:9b:dc:18:51:2d:ed:2d:51:c5:c3:57:ec:5a:8c:e5:
8e:34:35:ee:61:f0:05:f4:a4:f5:fc:3c:4b:fe:f8:18:d3:e4:
ab:f5:ac:79:66:37:b3:50:55:d9:43:9e:cc:9a:17:ed:18:3c:
2b:c9:f9:ed:db:c4:29:e5:6c:ec:3e:57:47:31:1d:a8:cf:e8:
d5:be:ad:35:ee:8a:c3:c0:67:5b:8d:ce:17:77:18:0d:8b:53:
f2:dc:7a:f0:f8:7c:7e:62:33:ff:58:9e:99:91:04:9c:fa:28:
c2:ce:ef:4a:af:3e:64:88:72:ad:4a:89:bf:64:ef:53:5a:40:
f9:c4:77:0b:b1:ad:3e:28:ef:52:18:f5:3e:5e:eb:2c:4a:a4:
74:5f:d2:23:82:24:d7:44:84:16:d4:1d:02:d4:73:df:47:80:
e3:47:8a:58:62:62:55:33:00:5c:ff:00:a2:f2:96:a5:ad:3f:
9b:2a:36:c7:59:a0:06:ef:09:28:e8:f0:dc:58:7e:10:9b:37:
e9:2e:f5:6f:1e:0f:7b:65:ef:39:40:7d:fb:9a:01:6d:8d:ed:
4d:53:0f:09:f7:23:c0:3f:8c:03:7f:98:2e:14:29:13:1b:b9:
27:b7:b6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:59:41 2026 by rpki-client