Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File: fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier: P3zcSyrlIKrj79lHiza5U68/CmZSWIKSrdrL4DSrahk=
Subject key identifier: A3:DE:F5:9F:AC:37:2B:62:7B:5D:8B:A7:BE:E2:70:F8:EB:54:B1:75
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer: /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial: 01A10F27C8067EAA7BB6F08DA66D7D8331D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number: 1A8E
Signing time: Tue 06 Oct 2026 03:00:27 +0000
Manifest this update: Tue 06 Oct 2026 03:00:27 +0000
Manifest next update: Wed 07 Oct 2026 03:00:27 +0000
Files and hashes: 1: 5LuGzHTGNXh7ooCOYMthjUDSS6E.roa (hash: ueacTOAGFcsAA9jabTl3i8ESOHojLkJGvrFKPoo+SiA=)
2: Up6FPG2EmlxGGm-IJpPlY2eyxIw.roa (hash: vllY3zX6/fq+SiGXdC5fpCJcuaKw1ngd9//Sa26iQZc=)
3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: FjvJ32VucsfAflV0zo4EHY3XNVDC1hbk1NG7ijm46us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:27:c8:06:7e:aa:7b:b6:f0:8d:a6:6d:7d:83:31:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Validity
Not Before: Oct 6 03:00:27 2026 GMT
Not After : Oct 7 03:00:27 2026 GMT
Subject: CN=a3def59fac372b627b5d8ba7bee270f8eb54b175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:4b:20:70:0d:55:90:1c:81:46:6b:26:f0:
1a:f4:9a:14:54:59:df:63:3d:d2:db:c1:4b:7a:32:
ae:85:7e:03:e2:8e:fd:a4:f9:9e:0a:d6:1f:ef:b9:
30:1c:53:b5:0d:b0:6e:5a:9e:de:fc:a4:d7:9c:96:
39:46:97:68:51:07:89:33:7c:a0:f8:e4:19:d7:c3:
9f:b0:ce:dd:a7:78:9c:56:68:fa:14:88:86:f4:09:
d9:c2:c3:39:e9:55:b4:a4:ee:04:bc:0f:1f:05:0f:
11:d2:78:75:a9:db:0c:8b:f1:86:5c:05:0d:40:82:
52:bd:81:b8:31:d7:8e:40:a7:08:f6:78:e8:a3:f3:
87:a1:6f:dc:e3:83:98:d8:69:dd:fc:3c:35:41:44:
d8:e0:80:50:56:6d:10:d4:90:74:72:02:31:41:33:
53:91:b7:0c:58:4e:34:b4:0b:97:63:76:47:52:16:
dd:3e:59:9b:27:84:41:91:c7:10:6b:08:ed:79:2c:
76:19:49:ce:8e:5e:5f:73:9f:4e:15:b3:f5:69:09:
31:b7:5f:08:6f:1b:78:3c:05:70:c1:2e:aa:c2:3f:
e7:b3:11:a1:58:73:67:15:f2:38:f8:02:2a:ac:c9:
6d:85:71:9f:62:94:07:b2:48:6a:4c:d1:c4:84:52:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DE:F5:9F:AC:37:2B:62:7B:5D:8B:A7:BE:E2:70:F8:EB:54:B1:75
X509v3 Authority Key Identifier:
keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:39:61:c6:71:f0:a4:68:db:17:bb:e0:f1:aa:e3:25:fc:af:
49:21:d6:f3:6a:8c:0f:c9:30:42:0e:e1:c7:b7:f5:11:19:66:
fc:fe:e5:2f:14:22:c7:ef:5f:07:61:55:b0:27:f8:4c:d5:c1:
67:f4:16:3b:7b:31:6a:fd:c5:f0:fc:aa:46:c8:74:ad:44:b1:
c4:44:4c:f3:1f:20:4f:fa:10:1c:78:06:7a:8e:61:33:b5:ef:
30:de:61:b4:89:0f:f1:71:5f:74:94:02:b0:ba:89:c2:d9:28:
d8:38:87:9a:ef:10:85:5e:b8:86:9a:88:16:cf:1c:6f:0c:65:
00:b6:1d:06:75:87:37:fc:ec:f4:4a:c3:89:fa:3f:6b:15:3d:
c6:d4:43:b2:ff:bc:48:16:7f:5e:2a:a2:5b:ea:96:dd:30:a4:
b0:20:98:da:3f:2b:82:a9:4e:df:93:14:8b:df:df:ac:9d:aa:
27:7b:49:7b:0a:de:f6:35:db:be:b1:44:5b:04:f2:d3:6b:6d:
50:65:99:e4:ad:af:b0:26:1b:10:72:4c:20:3d:5d:15:99:ab:
57:9c:e3:ee:d3:5c:7a:c8:53:01:c1:94:31:8c:da:08:14:ab:
30:65:4e:64:82:73:e6:b0:64:c8:fa:eb:56:5a:9b:59:cd:32:
35:a5:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:02:06 2026 by rpki-client