Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File: fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier: dGtgVKlNEiXCR6OCb2BG3tYSzj0sQrNOZpakhzOxEzQ=
Subject key identifier: 10:69:D2:E2:97:BF:42:4B:07:27:47:E5:FC:25:E4:43:4F:EC:36:20
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer: /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial: 01A1DCB8E20E4DFE635DE08DD3B7D05E8AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number: 1B29
Signing time: Sun 15 Nov 2026 01:01:06 +0000
Manifest this update: Sun 15 Nov 2026 01:01:06 +0000
Manifest next update: Mon 16 Nov 2026 01:01:06 +0000
Files and hashes: 1: cA7qo8b7Nox5Eg3ETDI0GHB8bQo.roa (hash: hqs/XnPjGsbh3NQlfcv5MT/Lsf4omMXxdpDxcmlIJnY=)
2: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: rYmP58zFotJ0ty8Id/s0Y1ZUVCqfBT1H9pfbgE1mlFI=)
3: gPVJ3frT2a_JfPP9EGZIsKgy1a0.roa (hash: QLrbnotwwaeckUxd194yTQbnltlzcloRQasYTwXYSI4=)
4: t_TL8Xp3MaTx6fbwYpHNR3gUIng.roa (hash: MvUH7wsYk8eER9W0Uril7mv59fdi26s3Y3jNbCQBCsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:e2:0e:4d:fe:63:5d:e0:8d:d3:b7:d0:5e:8a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Validity
Not Before: Nov 15 01:01:06 2026 GMT
Not After : Nov 16 01:01:06 2026 GMT
Subject: CN=1069d2e297bf424b072747e5fc25e4434fec3620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:b4:9c:e0:74:db:3b:f2:87:a5:5a:f0:19:
29:9e:e5:50:04:a4:c1:4e:e8:a0:6a:ac:09:ff:1b:
b3:ea:7e:5d:04:c7:3a:25:07:a4:b6:62:bc:fc:63:
22:7d:3e:13:c0:27:d4:78:09:b2:b4:39:86:06:cc:
16:a0:60:58:81:a3:cb:9d:92:c7:b7:35:b5:dc:53:
20:31:20:f4:be:64:55:9b:d2:ac:ff:7f:9d:a0:64:
6f:df:29:8a:48:5a:a5:27:03:ea:c6:bb:71:6b:a8:
cc:07:a1:46:a9:60:a6:31:0a:49:a2:d3:c2:7a:8c:
ab:0b:bc:47:a2:91:92:8b:5b:7d:57:bb:c0:24:51:
42:71:34:12:93:8a:5a:e2:4c:12:28:6a:4e:1c:e8:
2a:73:c0:d2:fb:f2:4c:d6:d7:59:1a:93:86:ad:7a:
ae:71:11:0d:5d:d2:d1:8e:54:03:26:f1:86:a8:06:
d3:90:4d:08:1d:bc:76:6b:59:f4:37:90:79:97:30:
6d:39:47:24:f5:4f:98:30:9f:8a:01:7a:1f:5f:45:
f9:d4:93:c5:2c:2c:0e:bf:dc:86:df:e4:c4:e2:de:
83:fb:dc:d3:fe:d7:f7:e4:ca:a1:33:64:b1:14:2d:
05:e0:b2:04:9f:74:63:4c:50:72:19:d3:bd:65:42:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:69:D2:E2:97:BF:42:4B:07:27:47:E5:FC:25:E4:43:4F:EC:36:20
X509v3 Authority Key Identifier:
keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:86:ca:3e:b2:f9:db:07:00:24:bc:02:20:9b:cb:bd:8a:b9:
6d:71:9c:ed:5a:e5:e0:e7:1c:76:05:ad:ec:00:68:4b:fc:8a:
58:62:8a:48:52:a9:73:c5:b1:88:5e:fb:5c:df:45:6c:49:3c:
ae:bb:23:5d:c9:0b:19:a0:1f:0e:b8:df:f8:7d:e1:71:b1:6e:
ae:e6:6d:37:11:bb:79:20:89:81:bc:87:83:fb:e3:57:d1:01:
a3:ab:ea:d2:d9:6c:c0:88:d1:74:c4:12:69:aa:68:8c:7a:56:
2b:e0:01:6c:cd:5a:d9:c3:cf:cc:a9:2b:3b:37:d2:8f:6f:5c:
8e:95:45:86:9b:ec:79:ba:cd:88:bd:4d:04:34:1f:a8:03:5b:
b3:ba:1f:43:29:c0:55:b8:2e:08:34:66:d6:b4:aa:1b:27:f1:
9c:60:16:6a:ca:a1:a3:68:f6:1d:ae:1d:c2:72:0d:5c:31:f7:
cb:3b:e1:07:b8:9d:6c:4f:c6:ff:d1:87:99:fc:41:4a:b7:0d:
f3:2a:16:c4:18:52:a3:15:13:80:2f:84:c0:8c:29:bd:ae:9d:
2a:de:87:5e:4f:0e:6c:c1:1a:72:fe:f8:c4:52:f5:57:6d:13:
ed:aa:ae:52:38:44:c2:aa:4b:e0:af:82:e0:0b:51:45:02:93:
d0:a7:b2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:10:16 2026 by rpki-client