Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: tf0MY46icC1p5Kjd1HcrdBgo0VThT4dhKdnC/e45LlQ=
Subject key identifier: 5C:92:83:2F:D4:E8:CC:23:5E:E1:53:8D:57:88:4F:D6:2C:87:BE:5C
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 01A0D727AB2870406A54D42AC9B7E807DEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 1AC8
Signing time: Fri 25 Sep 2026 06:01:36 +0000
Manifest this update: Fri 25 Sep 2026 06:01:36 +0000
Manifest next update: Sat 26 Sep 2026 06:01:36 +0000
Files and hashes: 1: 1-gD4Hq6k3_IBwrhpxMMG_5-Bhrc.roa (hash: D/5u0x0tc9amqj7LxNMrUHo2Ohz0yRVArWNlJ2DKIqA=)
2: 3Ntb8637r4izsCpVwd5gcAHqdG4.roa (hash: v8fDaBY/Qsb7VQFSR88lHqJauVxk7NICenthut3N3XE=)
3: CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa (hash: rA9XhkKgyB7cXpzG2udSGKxNb3vtZoJSLVB744tVVnU=)
4: LKLutE-uCKR41ay5iaoVFawv-Gs.roa (hash: oOu8i7EWf5PBDu9YcMHQbEXmrmW+EZz9feEFexijuIs=)
5: OUSNJic16YHsFdydiuaFE2ZdqEU.roa (hash: Te9uOokwyk9iyAdeUIheCIvhMu20V8m5YnWWnhDRCII=)
6: QYcFCUvrty_eEw95bsUeyFFjK-c.roa (hash: jbyRPBMO6AQ8+x+sL1BfcSXlfYOvQy8bP202dnbtn6o=)
7: SaQLJTN3Tu68cjM5ZHbz4FW_mpg.roa (hash: WsziI7VNkNBzfhBKLzBNR8KU16oQ4434je9QUJEHNAU=)
8: UGEJJcZYX8ZqmsD8dq4DTSZFnYc.roa (hash: 6bDdvrBRvK8z6fMbmEov7BImiOdq7uQJNPOcRdfO/mo=)
9: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: OPg3NgLuiIzJaYrOkGhEnfQFI8PRo8huzPGaglOUwWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:ab:28:70:40:6a:54:d4:2a:c9:b7:e8:07:de:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Sep 25 06:01:36 2026 GMT
Not After : Sep 26 06:01:36 2026 GMT
Subject: CN=5c92832fd4e8cc235ee1538d57884fd62c87be5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:94:91:ba:8a:16:1a:0b:f2:32:d8:77:0e:
78:77:4a:46:71:19:bc:d1:35:53:07:70:80:d2:cf:
36:a8:d6:de:5b:5c:7a:f2:7b:9b:fd:91:c3:2a:a6:
92:ab:9c:df:13:c5:8f:d2:a2:03:24:49:62:ff:75:
dc:ff:26:51:63:da:01:81:8f:b7:ef:32:65:1a:76:
61:a3:61:06:52:8a:68:58:92:00:e7:e6:75:90:27:
82:b0:1e:5d:55:43:21:21:5e:28:6c:07:40:46:3c:
25:30:aa:e1:21:b6:f7:7d:64:aa:03:09:cd:c3:f9:
72:56:ee:31:c1:e6:40:0f:21:9a:09:8c:a6:a9:f0:
da:05:85:b8:ec:fe:f8:b3:65:c5:8a:2d:e5:67:29:
1c:41:a9:a5:52:db:52:9b:37:59:30:e6:39:42:9c:
2e:8a:a1:63:1c:a8:66:06:22:1f:5b:ff:98:f6:e9:
ae:21:dc:a8:6a:85:7c:78:fd:fc:88:01:a5:f7:a1:
61:46:82:19:d7:91:eb:2a:48:5f:89:61:ac:04:60:
6b:9e:b4:38:0b:6b:b5:30:b2:97:b8:5b:9e:a4:b7:
a4:04:60:f8:c4:79:56:30:a4:78:33:bd:d4:50:29:
e7:f5:af:f7:73:69:77:1d:0b:85:e0:da:02:a6:cf:
08:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:92:83:2F:D4:E8:CC:23:5E:E1:53:8D:57:88:4F:D6:2C:87:BE:5C
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:85:50:52:3b:a0:68:69:90:6f:49:01:8f:8b:25:e7:db:d3:
e1:c5:3b:45:c1:cc:ae:bf:37:d2:4d:6c:e3:0c:9c:fb:d1:73:
c3:68:78:36:04:16:48:1d:7b:73:e0:1c:db:70:c8:24:d4:f4:
35:2f:0e:ab:e7:46:8d:b6:fa:07:a7:3c:18:61:f9:4a:55:c7:
1c:72:e9:e2:21:ae:f4:da:2b:3c:74:3c:d5:3f:dc:06:9a:6c:
5c:d6:34:b9:d0:e6:05:05:a2:5c:57:b7:03:7d:92:f8:45:ef:
99:7f:af:6c:bb:9d:95:4d:62:e7:8d:3b:fa:b8:d8:79:71:c4:
c7:b4:d8:59:c7:7b:b8:9c:90:1b:fb:27:2b:d2:6a:c6:e8:ca:
1a:6f:91:57:84:14:b6:76:e1:4b:f6:8f:55:40:9a:b0:81:1e:
12:19:32:0f:e3:39:75:c1:26:5c:8e:ae:05:fe:79:09:2c:97:
68:83:69:78:13:a5:e5:06:a0:08:23:8c:0a:1a:17:25:17:b7:
e9:54:0b:62:99:ba:69:1a:bd:6d:9f:3c:75:2b:80:78:79:75:
c7:f8:b1:bb:b0:72:83:1b:7d:95:3d:d5:5b:b4:d6:d8:42:5e:
97:11:99:c1:8d:6f:d6:c9:a8:d7:ca:45:f7:77:4e:82:2e:64:
92:78:89:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:20:33 2026 by rpki-client