
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
File: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft (raw, json)
Hash identifier: T3Jcs+VhHo94KMVYrEIIya0u5Gon8N31TbmXAFERxQM=
Subject key identifier: B7:D0:40:B4:3C:65:DA:96:CC:B8:94:47:D0:F4:37:92:43:59:93:BC
Authority key identifier: 7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
Certificate issuer: /CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Certificate serial: 01A11861997EFDC8D47C58641B718C5F7FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
Manifest number: 1320
Signing time: Wed 07 Oct 2026 22:00:11 +0000
Manifest this update: Wed 07 Oct 2026 22:00:11 +0000
Manifest next update: Thu 08 Oct 2026 22:00:11 +0000
Files and hashes: 1: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl (hash: NgrokLueCPNWvE1hcGGyDDuZtRNC4w3TyeOYpMQRlBs=)
2: yk4NlmsnyBCHJU5rRWtCYUNukhY.roa (hash: RTQQ5QrcW0bLs5QDvpSA/0ZM/8To3uVOT0sFVQ3EI/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:61:99:7e:fd:c8:d4:7c:58:64:1b:71:8c:5f:7f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Validity
Not Before: Oct 7 22:00:11 2026 GMT
Not After : Oct 8 22:00:11 2026 GMT
Subject: CN=b7d040b43c65da96ccb89447d0f43792435993bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:5e:02:6e:41:99:58:68:e1:ae:bc:f1:d1:
cb:00:87:56:8a:86:15:54:67:99:31:3c:77:6f:6d:
69:7d:4b:6d:3c:5d:43:4c:a1:cc:44:63:52:84:67:
69:58:83:a2:cb:5b:99:7f:84:87:bc:cd:f7:c9:01:
c2:01:92:20:ad:72:35:be:bf:c7:d7:0a:9e:31:be:
a2:5e:7c:83:44:09:20:37:15:7f:c2:d9:c7:74:6b:
04:30:00:48:1b:e0:87:6c:08:45:2a:b8:8d:77:4f:
58:45:f4:83:27:c9:bb:9b:c4:31:62:fc:e1:22:07:
c3:a4:ea:eb:6c:f3:87:b0:81:62:b2:6b:c3:15:67:
16:28:cd:11:a7:58:81:d4:66:af:e0:e2:e9:40:bc:
6c:ed:88:27:fb:1f:d0:77:26:a1:76:d9:56:fd:e7:
4f:d9:63:8e:6a:4c:6b:7a:cf:54:33:ee:3a:af:f7:
fc:34:c3:59:7c:90:db:70:ff:26:41:58:28:1b:ae:
63:aa:a7:cf:fc:d8:d5:30:f6:04:3b:e3:f2:a8:16:
8b:47:ea:a9:2b:9c:69:b7:ab:4f:9f:ed:1d:3b:84:
17:b7:56:7d:0b:f2:3d:92:e6:fb:49:a2:61:3e:78:
4d:11:54:ec:8f:ef:c4:3d:53:da:9e:87:2e:59:34:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D0:40:B4:3C:65:DA:96:CC:B8:94:47:D0:F4:37:92:43:59:93:BC
X509v3 Authority Key Identifier:
keyid:7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:93:30:78:9f:fa:16:66:c1:d9:01:57:ff:86:a0:ec:ff:65:
fd:3f:ad:51:c3:fd:5d:46:7e:5c:80:13:2b:20:95:21:e7:f4:
cc:24:26:5a:e2:8f:b9:90:8d:c8:36:59:b8:7f:59:99:46:1b:
9a:8f:fe:d8:2e:8b:d3:b3:57:05:fa:d1:54:ae:f4:e2:69:c3:
ac:66:d0:24:e9:79:a4:e5:a6:ab:ae:95:4f:05:58:6f:d4:6c:
d3:45:ee:0d:cb:55:95:e5:e1:a8:e5:b6:64:09:a3:47:34:95:
90:a7:f3:66:7f:c3:e8:90:30:ed:16:46:c5:03:d4:d9:18:fb:
a4:4b:c0:c3:83:cf:a9:0f:13:4f:a8:2b:b8:78:25:87:cd:c3:
f5:80:63:72:83:04:55:38:bd:55:9a:ac:e0:b0:14:6f:7e:b0:
74:09:65:a7:17:8a:14:66:dd:ff:c6:93:cc:5c:dd:24:f6:a2:
64:95:c9:aa:00:41:cb:66:a5:2e:8a:39:d5:cf:c4:d9:7f:e4:
48:66:f6:d2:8c:11:57:6d:77:67:f4:91:fb:85:41:cb:4c:7d:
16:bb:6d:39:a8:24:4e:c0:23:eb:70:ea:83:8e:61:30:cf:47:
92:b3:a6:2b:60:ac:66:83:29:f7:14:22:c3:93:c9:3c:27:8d:
a3:ae:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:03:11 2026 by rpki-client