Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File: fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier: ZQO0WjIzBNeuunNTtEKys7aMtcWSVAlSY3Yoa/jRKe0=
Subject key identifier: DF:58:89:42:DB:92:4D:57:9D:8E:DE:AD:89:AF:C0:ED:DD:2E:4C:0C
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer: /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial: 01A0CE5A3ADA3F44FF2F909EB97E06FB24C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 13:00:14 +0000
Manifest this update: Wed 23 Sep 2026 13:00:14 +0000
Manifest next update: Thu 24 Sep 2026 13:00:14 +0000
Files and hashes: 1: Gr2HNFebnqweKA8qaD2IyszWQgI.roa (hash: RegbgViGMcDrxCenuREVm4TdvOmQvNdOjtPl4uk6fVU=)
2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: kNE5O0oYCIsA5Jvj7VT3BEspH4LDKh49+KmvFho2O/o=)
3: wCh-pphXrFlnVedivymKoSdB-PQ.roa (hash: RWZ4wkHC1VRgI9WF5HxhbBtNjKgc6U0S8oWX6yGUEvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:3a:da:3f:44:ff:2f:90:9e:b9:7e:06:fb:24:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Validity
Not Before: Sep 23 13:00:14 2026 GMT
Not After : Sep 24 13:00:14 2026 GMT
Subject: CN=df588942db924d579d8edead89afc0eddd2e4c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:ed:a7:5c:c0:d4:c2:6a:07:f8:de:5f:f5:
88:4d:43:07:1a:db:f9:5d:cc:da:de:70:e5:f1:96:
7d:b8:6d:8d:e0:35:45:7a:64:9f:4b:85:6d:0e:a5:
bb:92:dd:24:b6:e2:92:11:49:8f:24:c5:8f:f2:56:
08:a9:88:16:36:0f:d6:2a:39:af:ac:0a:f9:12:c6:
9c:df:5e:3b:b9:8d:1a:b9:da:23:d4:13:cc:ed:f8:
1e:5b:aa:47:c8:a8:c6:b7:d4:4a:b1:1b:fe:07:6b:
ec:a2:ff:ad:56:f5:f5:bb:ac:a4:aa:4f:90:f0:cd:
a0:46:ea:c1:5a:e2:78:4a:e6:10:04:e5:c7:cc:3c:
95:06:08:1e:00:a0:f4:26:0a:9d:c8:7d:1f:85:4d:
46:b2:28:a9:24:07:3b:c2:7d:2b:d1:57:1d:56:a4:
f5:34:1c:e8:e2:32:64:21:fa:37:0c:ea:7d:b5:78:
47:16:6e:0c:19:ed:7e:2d:cf:6d:e6:83:1f:d3:45:
92:f8:45:63:2c:3b:9c:a8:8e:75:ab:e0:af:44:db:
2b:b4:cc:06:13:a1:63:cc:b0:b0:73:78:84:ac:af:
f2:33:95:ba:3f:aa:53:b6:a2:d2:f1:c2:fb:60:24:
82:c3:40:c8:f9:19:2e:a4:5f:12:42:06:62:3c:cc:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:58:89:42:DB:92:4D:57:9D:8E:DE:AD:89:AF:C0:ED:DD:2E:4C:0C
X509v3 Authority Key Identifier:
keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:89:e3:24:a3:77:a6:58:d1:cf:68:9d:fd:1c:cf:32:e5:de:
d3:68:23:5f:12:c7:b8:9b:88:17:e8:ff:fc:8c:20:cb:56:11:
8f:76:bb:b4:4c:f3:d9:b5:5f:c5:21:b2:4f:b4:4d:b8:fb:ae:
bd:d3:98:9c:9b:14:46:93:02:f6:8b:0d:55:c4:20:20:c7:5d:
54:34:24:e0:35:c2:73:46:3d:de:df:b7:cc:da:e7:8a:21:8f:
c3:0b:7d:52:9b:ba:b9:b2:64:02:55:df:00:72:42:85:24:5e:
05:d9:8d:db:03:bb:de:cb:a7:66:fc:eb:af:f2:f8:0e:02:00:
84:7d:35:4c:92:f5:66:e0:ca:25:7a:bd:59:02:8a:cf:4c:5c:
34:99:0f:e8:f9:68:65:7c:97:83:7e:b7:99:21:e5:c0:ff:2d:
93:b6:ab:90:14:39:86:93:ed:01:5f:26:c1:2e:c0:85:3d:77:
7b:1e:eb:c3:a7:13:fc:50:44:35:e4:45:2f:71:c4:d4:ba:12:
85:36:89:f4:0e:d0:9d:49:ec:52:65:26:62:19:2c:2c:d1:d8:
e9:75:09:ea:9a:15:dd:24:05:47:08:21:d8:7c:e5:72:53:35:
f6:5a:23:92:7b:be:ca:e1:ea:9b:84:0b:73:2f:77:6d:c8:f9:
b2:ff:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:51:54 2026 by rpki-client