Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: rn54nAwKdb1nlJ4Z41y5LgOgdyHSpkfiXQh2kG9kRGA=
Subject key identifier: 92:90:38:8D:66:09:5B:98:38:E7:75:B6:58:CE:A0:3D:25:E0:FD:B3
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 01A0F11E41D34D17A8007970FF9DF1072C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 03E8
Signing time: Wed 30 Sep 2026 07:01:26 +0000
Manifest this update: Wed 30 Sep 2026 07:01:26 +0000
Manifest next update: Thu 01 Oct 2026 07:01:26 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: ZF+s4WxFalTsUbquozAnD3VpouEnSQRo6WeL9NdQ4BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:41:d3:4d:17:a8:00:79:70:ff:9d:f1:07:2c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Sep 30 07:01:26 2026 GMT
Not After : Oct 1 07:01:26 2026 GMT
Subject: CN=9290388d66095b9838e775b658cea03d25e0fdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:ed:3a:15:3c:16:0b:1b:a5:25:c3:e5:5a:
07:0e:bf:87:23:85:e5:6c:b0:f6:09:0b:17:b2:b5:
c9:bd:aa:1d:86:ee:e3:ca:02:a6:42:7d:67:bb:a4:
d5:84:06:9b:5f:a4:75:4f:de:b6:52:da:53:43:d5:
4e:c6:0b:2a:ae:6f:0d:87:2e:20:94:50:d3:bd:eb:
34:c8:9b:bf:65:ef:9a:28:65:df:a6:bc:1b:62:90:
df:2b:ac:e0:5f:61:73:83:0d:4a:38:a7:33:7a:c8:
41:f8:43:58:2a:4a:1d:fa:ca:43:be:dc:98:b2:91:
c2:53:3b:7b:d9:af:c3:55:67:7d:78:47:9e:b5:b0:
c9:c7:09:89:ed:cc:1a:6d:bd:d6:af:be:81:ff:5e:
6e:93:4b:b1:cb:4e:d5:4d:8b:49:3d:b1:f3:ed:8e:
a2:76:f1:7e:43:4f:de:9c:9f:ec:8d:e8:e2:cb:cf:
d6:61:da:82:e9:cc:1a:63:ce:af:cd:22:a9:32:ed:
e8:fe:7e:57:09:c7:26:ed:dc:3b:16:07:6b:bf:ee:
0b:2f:6d:27:cf:04:04:34:eb:b6:f0:37:da:ef:cb:
d5:85:1b:57:be:f2:55:fa:e5:ce:5b:c2:12:e0:97:
b2:7c:b8:34:4d:f8:ba:4a:e0:35:50:4c:dc:0f:58:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:90:38:8D:66:09:5B:98:38:E7:75:B6:58:CE:A0:3D:25:E0:FD:B3
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:7e:ef:3f:3d:47:2b:ab:35:9d:e9:80:16:f4:78:00:39:e8:
f6:6b:46:ba:5c:2a:ab:a7:37:36:d1:cb:d8:14:b8:5c:d4:71:
b9:f2:0b:cd:62:3f:7a:b1:17:4c:b3:40:ed:ae:da:c7:65:5f:
ab:c3:cd:10:3c:70:68:6e:e7:1b:45:98:06:da:51:c8:72:6c:
41:47:03:ba:fd:96:8b:3d:c4:9d:26:97:f1:df:09:ed:e6:21:
c5:cb:2c:e4:52:79:e6:52:8f:1e:88:64:16:c1:27:c1:1d:78:
86:e1:67:9c:f4:6e:fb:68:e3:6c:42:24:69:09:5a:95:8b:68:
55:ac:2b:9c:40:f1:28:33:a7:e1:c8:d0:02:e6:80:4b:59:2d:
fc:a6:af:f8:8f:bd:eb:72:a7:e5:33:db:93:c6:88:d8:69:77:
9f:bd:b6:e1:88:67:18:6f:c4:fe:72:b5:d9:94:d1:08:f5:35:
90:13:73:c2:1f:91:37:8b:39:57:5b:21:86:33:00:0f:f4:da:
9a:62:fd:5e:e9:b3:5b:43:c7:f6:d5:65:01:d7:e2:7f:fb:4b:
60:f7:67:fd:70:25:26:72:ce:a3:8a:d3:58:f6:a9:a7:92:d5:
1e:87:21:11:0a:18:fe:08:7c:f3:48:ca:3d:8a:a3:d3:50:39:
02:ef:ed:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:06:04 2026 by rpki-client