Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: J9JhPUe2QopDoV13ku9LshF1cI+E7eUrUZYVFQwKsRc=
Subject key identifier: FA:C6:9E:2A:8A:39:B7:D3:0D:F0:FE:46:B7:7E:75:7F:45:6B:C6:5E
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 01A0F7C53DD7F8655367FA6A5810F92A0621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 1168
Signing time: Thu 01 Oct 2026 14:01:33 +0000
Manifest this update: Thu 01 Oct 2026 14:01:33 +0000
Manifest next update: Fri 02 Oct 2026 14:01:33 +0000
Files and hashes: 1: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (hash: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: tArm9UWMnR6WI/aCvbjBEwwN7lgDOvGIv1i1X6DWswc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:c5:3d:d7:f8:65:53:67:fa:6a:58:10:f9:2a:06:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Oct 1 14:01:33 2026 GMT
Not After : Oct 2 14:01:33 2026 GMT
Subject: CN=fac69e2a8a39b7d30df0fe46b77e757f456bc65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:09:fb:ac:5d:c2:d5:c5:d3:62:da:df:f8:a4:
3b:ff:ef:03:fd:fc:f1:d9:98:3f:48:3d:98:82:cb:
e4:dc:03:1e:15:83:b7:7e:1e:c3:bf:8c:cf:7a:be:
8f:19:2f:c5:1f:a0:06:b2:0e:94:d0:10:bf:39:94:
26:ea:da:84:31:31:05:49:d0:9f:94:76:91:38:7e:
1c:08:81:8b:f0:7a:7e:6b:40:da:d0:7d:f8:46:ef:
3b:5f:94:16:f6:8f:0f:2f:17:ec:ef:fd:3c:33:0d:
dc:2f:e2:46:4a:e8:97:48:69:52:d1:16:ba:f5:32:
b9:4f:c9:8b:a2:22:e0:9d:95:e5:f0:2d:58:c8:a2:
d8:09:00:6e:34:f3:01:88:d2:de:79:10:e9:82:8c:
1b:70:60:fc:44:88:44:12:51:10:e4:1b:ac:26:3c:
36:04:24:eb:95:1f:24:2f:19:b5:98:eb:de:12:2e:
47:f0:af:87:e1:67:74:ff:04:1b:66:d1:49:5e:65:
bd:40:f5:23:be:43:59:21:c2:f8:45:a2:0c:dc:0a:
f8:08:b9:ab:a2:9a:29:e3:a2:25:16:99:68:6e:b4:
d9:81:9f:00:7e:53:fd:be:f3:2b:8e:f6:a6:63:7c:
f9:d1:8a:f0:40:cb:65:e8:75:68:63:f1:b9:0b:43:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C6:9E:2A:8A:39:B7:D3:0D:F0:FE:46:B7:7E:75:7F:45:6B:C6:5E
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d8:5f:6f:a4:3a:06:a9:23:a9:d4:37:a0:02:a7:58:ae:80:
ef:12:e5:fe:f7:6e:77:e5:fa:e9:9c:34:0d:c7:ef:53:e2:d1:
35:df:bb:8c:da:c1:4e:b7:44:72:ac:90:1a:12:1c:2f:44:dd:
80:8c:00:fc:7d:ff:b4:51:59:50:42:3d:db:5b:6e:50:f0:7e:
42:3f:eb:12:13:f5:95:73:ad:1f:f6:a0:be:00:7a:f8:a8:79:
0e:0d:7f:98:89:34:1a:77:8f:81:c4:02:f8:92:52:32:41:9a:
05:72:e1:e2:d0:c4:aa:a0:64:0d:91:12:af:20:2f:95:87:48:
68:31:be:e1:12:c6:3c:c2:eb:08:7b:53:88:54:86:f5:32:f6:
08:a1:a0:bd:8b:b4:a0:b4:90:b6:a7:26:c9:33:16:b6:fd:ae:
17:87:2c:61:64:cf:f7:2c:1d:6f:3a:3c:50:d9:8a:9c:46:86:
8f:95:e5:ae:8e:82:94:db:ac:e3:2e:07:09:45:2c:9f:d4:5c:
48:be:da:aa:c1:5d:aa:40:90:f3:81:49:ee:d5:9d:8a:8f:8e:
ed:ef:ed:e1:69:f1:f0:2e:1f:09:6f:ff:0c:54:82:e4:5c:fa:
58:64:f1:0d:26:43:15:3a:a4:f7:17:82:32:f4:1f:61:9b:f1:
0a:e5:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 04:43:27 2026 by rpki-client