
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
File: fruIjyuZ3ply4kRuugWKuOLNez8.mft (raw, json)
Hash identifier: ECOe1R8on2X5WpVIyk+XMMwzwccbjIgt9ndcRiehXqc=
Subject key identifier: E4:E3:FC:CF:78:20:63:9B:E7:63:70:0F:E3:F7:A6:E5:1D:5B:35:C4
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial: 01A0E13D741AEF0A13D28A0C18B2098996FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
Manifest number: 1A7C
Signing time: Sun 27 Sep 2026 05:01:36 +0000
Manifest this update: Sun 27 Sep 2026 05:01:36 +0000
Manifest next update: Mon 28 Sep 2026 05:01:36 +0000
Files and hashes: 1: 1-aCnSCh2k6EoO6v8K8YGH6-ZFag.roa (hash: TXqm016RQPYqrirzt4ClgfgwS79aUK1qbegI6yBDVqc=)
2: fruIjyuZ3ply4kRuugWKuOLNez8.crl (hash: innViktWnog/Oae+hPhkGPZU4FxS/K33p+Y0Z7554dg=)
3: uhXgdMnU2sK7rATt-_JTycGnweE.roa (hash: oOHRvsricrI0IDhV5HO6fjuBbrjUqImOQ3QUZQn7MEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:74:1a:ef:0a:13:d2:8a:0c:18:b2:09:89:96:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Validity
Not Before: Sep 27 05:01:36 2026 GMT
Not After : Sep 28 05:01:36 2026 GMT
Subject: CN=e4e3fccf7820639be763700fe3f7a6e51d5b35c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:d2:3b:7c:16:8c:38:8f:ac:e4:70:fc:ba:
dd:08:bc:2e:7c:ce:ab:32:74:ed:cb:cb:6e:8f:f0:
c9:08:e4:0a:39:37:80:f5:27:48:4b:9d:9d:a6:50:
5c:0e:81:76:ed:f3:37:fe:54:ef:71:4b:08:82:70:
2a:2a:a0:49:72:25:3e:b5:c5:8c:47:05:a0:bf:8f:
10:bc:09:16:eb:3f:a5:1b:48:b1:17:f4:c9:6f:4d:
99:09:49:d0:17:45:d5:0f:8b:c4:8e:88:ef:6f:ea:
ef:e6:08:c4:22:5e:91:62:92:79:e3:b9:20:82:43:
4a:15:49:18:e9:d7:27:43:bb:f8:75:4b:8c:66:0b:
12:c3:20:64:1a:c9:e7:29:4d:ef:b8:3e:b7:ce:f7:
1b:e7:af:49:6d:8e:3f:7e:f9:43:86:7b:ab:2a:89:
88:7f:37:c2:53:60:87:bc:16:0d:69:79:b7:c8:61:
1a:5b:87:1e:be:cb:66:f6:b1:e4:0b:a3:a0:bd:26:
eb:d6:b3:81:10:4f:1e:56:8a:8e:c5:cd:f6:68:1e:
1c:57:3b:71:ae:9d:1c:71:e7:e3:b8:73:8b:72:40:
70:48:62:7c:27:55:9c:09:18:3e:a1:68:69:f5:dc:
f2:3a:23:12:5c:a4:bf:10:02:3d:95:cd:89:6d:e8:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E3:FC:CF:78:20:63:9B:E7:63:70:0F:E3:F7:A6:E5:1D:5B:35:C4
X509v3 Authority Key Identifier:
keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:90:56:cd:fb:b2:af:ae:de:3a:8a:db:db:e7:24:63:b8:90:
aa:2b:75:5e:c2:ba:6b:b3:d6:3c:2f:56:54:d2:66:71:e8:52:
12:7e:77:1c:bb:07:d3:c6:73:e3:4a:35:33:59:cb:67:66:d0:
fc:56:d4:ee:88:13:d8:be:7f:fb:ea:80:1a:b3:c9:25:aa:f0:
43:55:80:ab:88:57:d8:6a:b0:de:c5:cc:43:16:b2:c1:f3:02:
8e:11:39:37:b1:c8:d8:2b:2f:a1:ab:09:c7:98:ee:d9:70:ce:
42:02:36:fd:48:37:3d:98:05:e2:28:3d:2e:f3:34:6c:37:e5:
0a:f4:65:74:06:13:02:28:57:89:b6:ce:6f:ac:c9:91:d9:72:
35:fd:90:a5:4c:9a:27:71:cd:a9:0f:da:16:d9:c9:3b:83:44:
f9:02:01:cd:dd:20:d5:65:f2:1f:f1:c9:48:a7:1b:d1:2a:79:
68:1d:7a:6b:47:98:15:4e:9d:8d:4c:91:c0:7b:01:a8:68:27:
f6:eb:89:96:1d:7f:7c:4d:71:0a:59:83:a0:09:28:dc:43:6f:
5f:22:56:87:17:f6:c9:68:d2:88:91:43:bd:9e:87:57:f5:b6:
98:5d:42:11:85:8b:ca:ea:5f:2f:ed:4d:bd:e8:11:8f:8d:38:
72:b1:6a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:14 2026 by rpki-client