Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
File: FQe7zTFN1RPt1WowSBK-vj4Qniw.mft (raw, json)
Hash identifier: G8G/6dTwCIJotJOhKMBbEs24etJV+N/NBITwqu1BTps=
Subject key identifier: 8A:45:14:F9:4A:4C:05:82:12:7C:BF:D1:B9:46:08:46:36:21:E0:35
Authority key identifier: 15:07:BB:CD:31:4D:D5:13:ED:D5:6A:30:48:12:BE:BE:3E:10:9E:2C
Certificate issuer: /CN=1507bbcd314dd513edd56a304812bebe3e109e2c
Certificate serial: 01A0E1E2997E20473A946B3D36006048AE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
Manifest number: B4
Signing time: Sun 27 Sep 2026 08:01:58 +0000
Manifest this update: Sun 27 Sep 2026 08:01:58 +0000
Manifest next update: Mon 28 Sep 2026 08:01:58 +0000
Files and hashes: 1: Dbe17-TY0Aj65PbKINIpMBV9ZEs.roa (hash: 4cS0yJGa1qGXptqnTWuUTKBWN0RvY+fjOJv3AFlspyE=)
2: FQe7zTFN1RPt1WowSBK-vj4Qniw.crl (hash: kI0/uu1TTcud1Yk7WFhctAqLQH0I4F/0OiruY6/72zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:99:7e:20:47:3a:94:6b:3d:36:00:60:48:ae:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1507bbcd314dd513edd56a304812bebe3e109e2c
Validity
Not Before: Sep 27 08:01:58 2026 GMT
Not After : Sep 28 08:01:58 2026 GMT
Subject: CN=8a4514f94a4c0582127cbfd1b94608463621e035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c0:d2:74:6e:dc:16:fd:f6:40:d3:09:29:3a:
a6:44:dc:5f:f6:56:0c:ea:6c:c7:c5:82:7b:5e:0b:
bd:5e:18:f6:23:27:fc:7a:bf:67:17:dc:64:19:23:
43:a2:5d:39:af:fd:a8:51:2a:2b:11:5c:cb:37:e5:
69:c0:7e:48:53:57:14:a2:25:51:3a:06:bd:ab:b4:
69:0f:b4:9d:40:7e:cd:21:25:49:65:a2:7d:d7:49:
2c:20:81:55:2b:b9:5f:23:6c:a9:63:0c:85:94:85:
cc:13:90:54:ab:fe:6a:a3:e3:52:03:cd:d7:72:b0:
5d:78:42:96:0e:7c:95:ca:28:36:86:03:cf:47:ac:
c5:f6:f6:3b:ed:8f:8c:32:62:12:6c:83:01:22:10:
12:d4:43:57:b5:bd:12:5f:1d:a7:64:7e:d3:43:1f:
96:1e:3e:e9:3e:c5:3e:c9:4e:fd:92:9d:29:6a:e6:
a1:b5:66:57:48:53:5d:74:a6:38:12:ef:3b:93:57:
6c:56:e5:cf:d6:d9:e1:13:58:72:e2:a7:64:e4:dc:
5c:d0:cc:8b:ca:70:b5:f5:e8:e0:17:b9:ac:e2:9d:
66:0d:60:77:a8:67:74:5b:95:22:43:77:8c:ef:73:
aa:4c:1c:f4:2c:8d:60:ec:21:37:2e:92:53:c5:64:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:45:14:F9:4A:4C:05:82:12:7C:BF:D1:B9:46:08:46:36:21:E0:35
X509v3 Authority Key Identifier:
keyid:15:07:BB:CD:31:4D:D5:13:ED:D5:6A:30:48:12:BE:BE:3E:10:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:95:2f:a4:ea:86:98:65:c1:52:08:e9:6b:45:a1:b6:76:43:
c4:be:dd:21:f9:6f:38:7a:72:8c:3d:dc:0b:6e:a0:d2:cc:94:
bb:f0:8c:a2:4e:9d:d6:cf:a9:27:e4:ce:be:02:ba:d9:64:ec:
2d:16:fe:62:70:31:76:46:bf:c3:ff:8b:8b:8a:89:8b:d4:59:
59:a6:e7:1c:a2:34:75:19:3d:32:35:33:f8:64:db:c3:af:22:
dc:d7:00:b6:b4:3d:f7:19:14:8c:57:36:07:8f:ba:36:4e:e0:
9d:44:18:8a:d1:7e:88:f8:e0:23:20:c0:04:36:bb:ca:fe:9f:
b6:37:84:15:2b:57:06:8f:2f:de:4b:7c:79:8b:29:6d:b6:19:
06:2b:ad:7a:f3:ce:bc:48:61:cb:54:ff:0d:34:8a:4f:6e:29:
81:c6:26:d3:fb:9a:d0:74:a1:d1:f5:b6:11:1a:0c:68:1d:c4:
8d:e3:4e:b0:db:29:46:a3:bc:e8:06:4c:65:66:f2:d8:1f:87:
74:b1:0c:ef:b9:55:25:30:7a:b5:e0:fe:2b:ad:02:d9:fc:57:
be:65:29:7e:d3:5c:00:b1:00:76:7c:30:b1:92:cf:dd:e8:4c:
c9:81:c0:a7:9e:da:79:2b:27:db:fb:ba:54:11:6b:a0:d3:2f:
d4:a3:5f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:40:00 2026 by rpki-client