Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/d9a3de-0df1-4108-9d7e-2a1870a88b9b/1/fFHshySGzRFnhUufTmU1Qxoa-T4.mft
File: fFHshySGzRFnhUufTmU1Qxoa-T4.mft (raw, json)
Hash identifier: cBB2UgfABvJU4oS2IVKW7s/p5e+F026vZfyiFrF4mUk=
Subject key identifier: 82:B2:42:03:0E:84:1C:CA:80:C2:0C:98:C3:4F:16:52:61:84:06:96
Authority key identifier: 7C:51:EC:87:24:86:CD:11:67:85:4B:9F:4E:65:35:43:1A:1A:F9:3E
Certificate issuer: /CN=7c51ec872486cd1167854b9f4e6535431a1af93e
Certificate serial: 01A1DE39C8C9AB730092BFA389B8DDC4F279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFHshySGzRFnhUufTmU1Qxoa-T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d9a3de-0df1-4108-9d7e-2a1870a88b9b/1/fFHshySGzRFnhUufTmU1Qxoa-T4.mft
Manifest number: 49
Signing time: Sun 15 Nov 2026 08:01:31 +0000
Manifest this update: Sun 15 Nov 2026 08:01:31 +0000
Manifest next update: Mon 16 Nov 2026 08:01:31 +0000
Files and hashes: 1: GedWB_Uil3va8GUyNwizKD56T1Q.asa (hash: mwof1jQYHBPRQ0wIav50LFv+eFSM7q3DXm2GNFD4CFs=)
2: fFHshySGzRFnhUufTmU1Qxoa-T4.crl (hash: QPgYPkfiYYr2OxrQm4dsHxet4UfXH+zc3aYfIXqxW0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d9a3de-0df1-4108-9d7e-2a1870a88b9b/1/fFHshySGzRFnhUufTmU1Qxoa-T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d9a3de-0df1-4108-9d7e-2a1870a88b9b/1/fFHshySGzRFnhUufTmU1Qxoa-T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fFHshySGzRFnhUufTmU1Qxoa-T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:c8:c9:ab:73:00:92:bf:a3:89:b8:dd:c4:f2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c51ec872486cd1167854b9f4e6535431a1af93e
Validity
Not Before: Nov 15 08:01:31 2026 GMT
Not After : Nov 16 08:01:31 2026 GMT
Subject: CN=82b242030e841cca80c20c98c34f165261840696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:f2:16:fe:8d:37:df:fb:a6:58:0b:66:35:
4f:66:74:06:3f:e7:9c:91:ed:68:79:79:bd:51:9d:
a1:54:11:c3:60:e8:a3:84:98:63:e7:26:32:31:b4:
a1:32:96:ea:99:7c:ce:bb:58:9e:2e:77:61:ac:6a:
bb:f9:6a:ce:62:e5:73:8a:43:60:e0:c0:ca:7c:69:
a1:3e:c1:9f:2c:b4:23:22:e3:cb:3f:c6:8b:16:73:
05:74:d6:3d:d9:f2:29:2f:91:c5:2c:7b:9b:68:45:
b8:f4:b4:a7:21:8b:ce:05:2c:f3:59:26:6a:31:1d:
89:93:74:e3:09:4b:bb:87:50:94:ad:f2:c1:3a:94:
af:3c:a5:97:a2:d7:5a:86:f6:90:3c:93:c4:46:ef:
d0:05:6a:28:32:34:96:2f:4a:25:9d:38:98:9e:d1:
d3:90:5e:ac:f6:d3:21:c7:8a:b9:74:f9:0b:ae:05:
73:63:1f:59:c9:6a:f6:4e:c7:15:e9:e8:3f:89:cb:
06:3a:75:f3:0d:72:68:f2:38:ef:d5:2d:e0:65:4e:
d4:35:a6:91:61:ce:65:0f:d8:0d:d2:d0:fa:0f:1f:
27:54:9c:83:2c:25:de:0d:9e:1a:9b:4c:5e:0d:81:
80:87:11:12:d4:41:0c:8e:42:87:e6:a4:ae:86:4d:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B2:42:03:0E:84:1C:CA:80:C2:0C:98:C3:4F:16:52:61:84:06:96
X509v3 Authority Key Identifier:
keyid:7C:51:EC:87:24:86:CD:11:67:85:4B:9F:4E:65:35:43:1A:1A:F9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFHshySGzRFnhUufTmU1Qxoa-T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d9a3de-0df1-4108-9d7e-2a1870a88b9b/1/fFHshySGzRFnhUufTmU1Qxoa-T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d9a3de-0df1-4108-9d7e-2a1870a88b9b/1/fFHshySGzRFnhUufTmU1Qxoa-T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:bf:3f:de:7c:ea:75:24:29:f4:eb:95:91:3f:57:4b:d4:a7:
56:96:b2:e1:7b:f1:3e:d5:0a:49:09:3c:41:69:73:ee:9f:82:
ef:80:bf:43:c3:ba:4c:db:c2:3c:d6:0e:16:e3:27:ce:57:8f:
e9:90:99:76:c0:74:d3:3c:58:c4:a6:5a:21:25:3e:aa:4d:ed:
36:9d:ae:8a:08:b6:94:6a:26:05:6e:75:3c:25:6a:f2:2b:7b:
c7:5a:e0:c5:2c:6b:e8:49:65:e7:31:cf:e7:19:bd:8a:29:3d:
69:eb:9a:34:e7:fe:5a:a8:86:2c:92:cb:2d:90:9c:f6:16:4e:
fd:1b:0d:bc:b5:13:1d:b4:ed:f6:dd:53:a5:f8:e2:6a:b9:f6:
ea:df:98:21:64:35:4c:f7:9c:cc:08:5b:37:59:a1:b6:02:4a:
b1:c8:86:ba:b2:cc:cd:80:41:14:ef:c8:26:70:3d:e8:bd:b8:
67:15:d7:b6:ed:44:5a:b7:78:d9:4e:78:a5:6d:99:d3:8c:44:
ee:8d:e7:ec:ef:62:24:b5:66:fb:ae:42:fa:7d:c0:72:3a:f6:
8c:e6:05:f2:3a:54:a9:a5:fb:4a:62:d5:70:45:62:2e:d9:f1:
16:20:8e:92:62:66:db:fb:c7:2e:f3:87:b4:37:dd:44:f5:84:
6e:74:a8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:18:47 2026 by rpki-client