Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: VGz8a/oDG23hc0Jl30U0fE637neywZoOsaAOxtp+0yk=
Subject key identifier: E7:92:14:59:2A:53:26:68:B0:3C:A6:90:CF:E8:44:67:B2:CD:E8:31
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 01A1DFBA7CE31539C2278AC6747CCBCD74C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 1AFF
Signing time: Sun 15 Nov 2026 15:01:43 +0000
Manifest this update: Sun 15 Nov 2026 15:01:43 +0000
Manifest next update: Mon 16 Nov 2026 15:01:43 +0000
Files and hashes: 1: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: xBJ1HKl3U+b3ONx3GdWRh4ZFSTUbeyRjnaK/cNUVH08=)
2: SZG8XeixTaqiVxW5rJUPZ8oUaFs.roa (hash: 1YSVd0Zexb+YYuPe7vCuTagdfSqZISFbptqFWf/HX9o=)
3: wpxxQF5AabypL-KTlSZ22CF0FgQ.roa (hash: LcmjGoMQfmQ0l8r/PAIze2pDnlI+sA44Nszwtlprn+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:7c:e3:15:39:c2:27:8a:c6:74:7c:cb:cd:74:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Nov 15 15:01:43 2026 GMT
Not After : Nov 16 15:01:43 2026 GMT
Subject: CN=e79214592a532668b03ca690cfe84467b2cde831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:91:69:32:17:7f:78:33:3f:ba:f0:dc:58:32:
4c:bc:bb:9d:f3:c0:a5:f6:d7:bf:4f:d0:b1:b8:3d:
20:20:e8:86:75:c6:f3:11:d9:0b:52:fa:25:5e:ab:
df:5a:38:91:24:82:4d:8b:ee:98:cc:2f:3b:0d:d2:
fe:d3:43:77:30:00:20:95:42:07:8f:a5:4d:4a:ca:
64:01:2f:11:ee:6d:83:98:95:d5:8b:84:13:31:a1:
cd:62:1c:a7:ee:49:d2:26:29:fa:47:58:80:b6:29:
eb:83:70:70:32:85:41:45:7d:40:3e:81:ba:70:a2:
7e:b4:01:ae:52:99:a4:8f:cd:d4:c2:72:d9:0d:ec:
2a:a7:f7:86:e6:fd:1c:48:ad:18:a7:d1:97:33:80:
8f:ad:95:30:8e:c0:3e:14:67:77:f8:ea:8d:53:b4:
d5:fa:4d:bc:8a:81:a2:8e:56:72:6d:fc:f8:7e:45:
51:66:b7:d3:67:6e:e8:6a:72:7e:f7:28:86:25:74:
09:da:a7:a7:c8:e1:38:b9:51:e8:60:8d:e3:b6:c1:
4c:e4:d6:3a:63:11:42:00:be:91:eb:68:d1:fc:9a:
21:56:c6:b1:d5:a7:d3:af:12:55:9a:17:ec:97:db:
a8:51:11:f3:f1:10:15:4f:7d:17:1f:91:5a:c2:ea:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:92:14:59:2A:53:26:68:B0:3C:A6:90:CF:E8:44:67:B2:CD:E8:31
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e4:1d:28:86:99:e6:c6:22:f9:07:f8:a3:21:97:f2:4f:f0:
2c:2d:f1:a8:ec:0f:d9:cf:30:61:b9:ea:42:01:f2:25:36:c3:
10:15:ec:64:aa:f5:b6:11:54:c2:9a:b8:70:a3:2a:10:4a:69:
c1:a5:bb:b3:13:f3:0a:d0:41:b5:85:04:17:ae:d6:4b:94:24:
d2:b3:ef:b7:ad:c5:a6:a2:5f:ad:d9:21:0a:d8:12:10:bd:9f:
d6:2d:16:ba:ca:3b:00:55:b1:0e:d2:51:ec:82:2e:10:1c:e4:
76:d2:cf:a6:a0:a1:79:d3:6d:f9:94:70:e8:32:83:d8:aa:08:
49:78:bf:24:00:f7:1f:de:91:9a:15:25:df:7a:82:d1:d3:fd:
1c:53:c0:8c:62:dc:48:d3:32:a1:6d:cd:06:e9:dc:3a:76:e2:
93:25:4c:07:7e:47:05:96:85:c1:9a:2d:f4:cb:fb:c8:e5:f0:
e2:da:cf:f8:a4:6c:70:d2:c7:09:d3:79:9a:da:8d:43:a4:dd:
04:64:df:ae:cf:d6:89:7f:4b:a9:19:63:17:da:f1:9d:be:c2:
7e:ff:a9:7a:d6:ea:a0:1d:f7:07:5f:7e:cb:46:97:96:04:e6:
7f:f7:9d:6a:cc:68:fc:08:55:39:27:93:91:9c:0f:a0:73:44:
90:a4:74:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:49:11 2026 by rpki-client