Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: d04w1gScMTG2aihCiYFA/qoPq1crHx5lDqNoiR/KsQg=
Subject key identifier: 4C:67:3C:AB:1D:41:9B:F1:92:0B:F4:9E:E1:72:D4:F8:A1:DA:F0:C8
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 01A0DEE177DCCE59820F5428325DD5B0106E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 18:01:53 +0000
Manifest this update: Sat 26 Sep 2026 18:01:53 +0000
Manifest next update: Sun 27 Sep 2026 18:01:53 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: ciExxhgMjBIaFdqHh/ORcOp7K7gdWO8uo9l4SZhkNE4=)
2: eN72_JOrglIivcRIrkUpJBSTrpQ.roa (hash: AlV36PTHBMVTau6gOr573zu4YRN7qhKbu3yDLrxxjYM=)
3: jgptn0oWvPfILsGhYu7AQtAVGQI.roa (hash: esf6xdXJXvTREZt/uQo773kjs6wVF4kHKSB6ECh3KeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e1:77:dc:ce:59:82:0f:54:28:32:5d:d5:b0:10:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Sep 26 18:01:53 2026 GMT
Not After : Sep 27 18:01:53 2026 GMT
Subject: CN=4c673cab1d419bf1920bf49ee172d4f8a1daf0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:d1:06:f6:24:72:84:cc:4f:a0:4a:53:b2:
bf:67:fc:d6:60:97:de:95:c2:9a:e1:06:a8:21:4a:
b6:d7:ee:da:01:e8:68:ab:82:bc:0d:1e:e0:6c:23:
0d:ea:b1:19:00:6b:a4:7a:c3:33:66:92:62:de:ee:
5e:77:0c:8d:ce:27:6d:5d:2b:f5:3a:2d:3c:9d:ac:
32:40:31:9f:f7:1e:c4:5f:8c:c9:25:d0:31:7c:9d:
fd:8f:3e:04:05:bd:4e:15:63:88:dd:bf:53:89:d1:
4a:ad:17:eb:4c:5d:00:6c:05:2e:72:02:d1:ad:dc:
a5:19:a3:76:3a:8b:b9:f8:36:5a:bc:e3:f5:d4:88:
2c:47:45:92:79:ec:60:e9:7b:d2:25:3f:c5:e2:97:
1a:3f:40:68:46:ea:40:5b:e8:bf:92:5e:59:52:96:
85:4e:ac:38:f6:88:64:6a:95:56:34:13:89:04:99:
1d:cf:78:ef:08:05:ca:32:34:56:23:4b:ca:fd:dc:
16:96:c5:40:7b:42:21:c0:50:ab:fe:8c:e1:18:73:
38:30:8f:37:a9:13:51:84:38:e8:fd:be:78:cc:4b:
7e:30:db:af:06:72:ce:13:9e:a9:ac:af:05:9d:50:
63:0f:04:99:30:e6:d8:d3:60:c4:13:06:f4:de:ca:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:67:3C:AB:1D:41:9B:F1:92:0B:F4:9E:E1:72:D4:F8:A1:DA:F0:C8
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a5:4d:1f:0f:21:b1:9c:84:19:9a:e5:ec:46:a1:cf:6a:3a:
51:3f:5e:81:50:0e:42:85:38:a5:43:48:bd:26:4a:37:31:56:
3e:77:8f:e3:8d:3c:97:2a:f2:fb:bf:0e:ff:01:df:15:63:48:
91:6a:0b:ee:30:b4:90:b2:b5:f8:17:7d:9e:40:97:01:5c:b0:
89:8f:9e:c8:76:c2:f2:a3:be:c9:4c:d1:16:85:d2:76:17:cc:
5e:fe:9f:0e:97:97:2f:e0:0d:1c:d1:a2:31:d7:b9:3e:69:04:
ad:0f:00:d4:94:37:b4:cc:bf:f0:20:8a:71:07:f2:df:bd:17:
41:30:60:56:52:7f:ce:99:02:2b:2d:b7:75:d0:cb:22:b2:6e:
21:d8:83:5d:6f:e7:99:5f:41:93:5a:54:fb:1a:ff:31:e4:39:
aa:5a:21:70:78:66:a5:8d:fd:b4:3d:d0:20:c8:1a:2e:17:b9:
37:50:36:c0:b7:8c:52:b0:8e:e6:c3:a5:b2:df:96:e3:0a:46:
cf:39:b8:cf:77:76:a9:ca:99:f5:a4:06:fd:ec:25:8e:4d:d6:
76:30:2e:67:03:20:5b:7b:7b:78:39:41:00:5f:db:3a:3e:99:
08:5b:98:ae:a8:25:ea:d1:d7:95:68:72:7e:89:61:b2:fc:e0:
f6:85:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:43:03 2026 by rpki-client