
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
File: fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft (raw, json)
Hash identifier: XFXpBGD5wUorePXcyuuC24h9AEqQutW1OJu83COM2T4=
Subject key identifier: 41:F8:CB:AD:04:46:4A:AA:CA:3F:D7:18:03:56:8A:26:C8:B1:F0:DA
Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
Certificate issuer: /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Certificate serial: 01A0CFA3DC15D3DBEF7218B0366E5FC02C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
Manifest number: 0293
Signing time: Wed 23 Sep 2026 19:00:17 +0000
Manifest this update: Wed 23 Sep 2026 19:00:17 +0000
Manifest next update: Thu 24 Sep 2026 19:00:17 +0000
Files and hashes: 1: F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa (hash: O9ss77MomSSt907FsLWzdFo2wbDsc9Vaw/c7NY0bUPI=)
2: Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa (hash: kAeb16gDeMymOsy5vSRtUWw4R89UmFmfcQyy8hoRkQs=)
3: a6ILxs7AfRiz-iaAF-l64QD3g3c.asa (hash: 7o07rC7UvT5It+u+RtYxdmApc9D4ts/fYHhAKB3o4vs=)
4: fl-aO37XXQmTdf9bFQvR4sML3I8.asa (hash: 095zE2TxY8ZX1/zGISHc5yzKNCHD1HSK1z5BPh0SZNU=)
5: fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl (hash: RuxTuMXJ8ZYtQkybsrzyaa7CBQMuWFkuxbu4LDUrWHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:dc:15:d3:db:ef:72:18:b0:36:6e:5f:c0:2c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Validity
Not Before: Sep 23 19:00:17 2026 GMT
Not After : Sep 24 19:00:17 2026 GMT
Subject: CN=41f8cbad04464aaaca3fd71803568a26c8b1f0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:07:4e:72:23:4c:f7:a2:19:63:6e:3c:67:
26:df:d1:3e:6e:70:1e:c8:ab:ad:24:6b:74:8f:ab:
7c:87:c4:8d:18:cb:fa:94:30:11:c7:d4:21:f0:60:
05:f2:eb:3f:ee:f6:9a:60:15:52:bf:b6:2b:9c:a5:
34:70:69:bc:05:ad:fd:85:1e:3a:fa:79:13:d8:b4:
16:07:c4:b5:a5:e7:54:00:d5:84:7d:0b:6b:ec:3f:
28:fa:0c:f9:3f:9b:6b:29:ea:1b:5d:6a:07:e0:e7:
7d:4b:4c:23:bd:df:ba:5d:76:2a:43:10:01:c4:15:
f2:d2:af:c2:1c:2c:b0:ce:eb:fe:9f:20:1e:60:4f:
8c:55:e6:c3:57:77:22:c5:cd:29:66:70:84:5b:bc:
0b:c3:45:af:54:24:c9:d3:c6:08:14:e1:e2:77:8c:
56:e9:28:b8:ee:6d:24:c3:ee:20:41:d1:82:15:59:
89:53:42:48:ca:13:21:14:56:b6:dd:f0:62:51:5c:
59:6b:3b:af:9f:8a:73:e2:8d:18:00:a6:b8:7c:ba:
7d:68:1e:a2:18:72:64:c2:97:b0:66:06:db:ea:21:
3c:4b:31:1e:3b:d2:ff:de:53:b2:67:63:c1:71:64:
5b:43:85:22:77:39:05:14:0e:df:c4:7a:7d:ce:94:
ca:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:CB:AD:04:46:4A:AA:CA:3F:D7:18:03:56:8A:26:C8:B1:F0:DA
X509v3 Authority Key Identifier:
keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b8:05:42:70:12:7b:4e:35:a0:a1:fc:42:12:a3:45:41:76:
05:96:7e:6f:0c:9c:53:41:db:39:b1:2d:a7:e2:c3:dc:30:d6:
11:af:5c:7b:54:8e:eb:c4:0a:fb:95:57:99:52:b4:5a:c5:cc:
c7:c9:c8:29:c0:d9:04:96:37:6f:01:cd:7b:d9:e8:83:6a:28:
eb:a7:de:32:ad:b2:42:b3:b4:2f:a5:48:89:4a:ca:8f:fd:d8:
6e:0d:89:27:f1:33:d4:69:96:84:f7:50:26:f3:3e:86:59:91:
87:22:1f:b1:cb:4c:5b:1d:a3:73:85:8f:56:32:d3:0c:fe:00:
71:d6:03:a2:ff:ca:d9:05:07:7c:79:38:ee:47:3f:a8:2d:87:
1a:13:78:61:3e:01:6f:7d:43:a0:d1:0e:d9:33:cf:9f:a7:08:
2f:ef:e4:78:24:a3:b8:da:8a:22:a4:0b:44:03:04:c5:34:41:
23:2d:a3:44:a2:e0:f6:5f:fc:6f:a3:53:0b:fb:22:66:36:cc:
be:d7:58:b6:34:a7:96:45:24:6c:84:2d:d7:12:35:4b:96:8b:
b5:df:8e:b9:21:41:2e:ed:5f:d4:ff:a7:12:d0:0b:1f:3f:52:
e6:4b:8b:32:a6:bf:38:bc:f1:df:57:c6:f4:25:36:f7:45:68:
56:e0:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:05:55 2026 by rpki-client