Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: r8AOqNW2itp1JK++SMIJSX1xKAXZsJvJgw+vxjGH6VA=
Subject key identifier: DA:DB:6E:AC:0A:FE:74:EB:3A:60:7E:89:D0:6C:D3:C1:8E:B2:5B:A4
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 01A0DD97B0FB891FF212A0E7380FA50F187C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: 0536
Signing time: Sat 26 Sep 2026 12:01:40 +0000
Manifest this update: Sat 26 Sep 2026 12:01:40 +0000
Manifest next update: Sun 27 Sep 2026 12:01:40 +0000
Files and hashes: 1: 2QUxpcZo42MO8NPw3ViO527hXWk.roa (hash: jXv9njLEXA5SkLC2GOthlPZiLCWl9vdzZCcofBzcG18=)
2: JNor73gXz2ec5FVJvGqRzBpyxSI.roa (hash: k/2ZGjtnrbIQP29sZmOjF46Dom6I0jn9nqS/95MSEu4=)
3: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: ZpbecPH7b4IbVFEl1pWd/2qB5GmWVPYCUiuBIyYlw3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:b0:fb:89:1f:f2:12:a0:e7:38:0f:a5:0f:18:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: Sep 26 12:01:40 2026 GMT
Not After : Sep 27 12:01:40 2026 GMT
Subject: CN=dadb6eac0afe74eb3a607e89d06cd3c18eb25ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:2c:09:45:9c:42:0e:e7:10:e9:b1:c9:66:
3a:ed:ad:7a:50:c5:17:f3:60:33:d0:92:5e:92:51:
eb:bf:95:cd:f7:54:8f:26:b0:ad:82:15:76:ff:65:
3b:a8:d8:a2:30:46:f6:e5:dc:86:81:d0:49:bb:f9:
c8:08:34:2d:d4:bf:1c:59:71:24:a9:0a:3f:97:82:
ec:87:8f:6b:a4:0e:9a:07:ab:dc:0b:d1:e8:b0:e8:
2d:10:58:21:17:5a:29:c3:30:ac:26:a3:17:33:94:
a0:08:29:05:37:94:01:56:f6:ac:5a:fb:7d:81:c0:
54:56:73:fe:24:f6:0f:ad:26:39:0f:dd:21:2a:c8:
94:5c:b8:f7:0e:38:b8:4c:09:3a:19:cd:88:35:20:
a5:5f:32:c5:1e:71:64:98:1e:54:cd:44:76:0a:55:
a3:8c:76:a7:4b:16:1c:56:cb:20:75:e0:3d:68:e4:
bc:2f:87:01:df:6c:19:0d:71:cd:e6:50:cc:66:28:
ef:fc:f4:d9:ce:9f:26:96:9a:59:70:75:d5:08:fc:
e7:5e:51:43:6a:c6:c3:3d:a7:35:7a:94:37:24:99:
64:1d:b1:63:82:bf:6e:aa:50:4e:50:4a:07:56:b4:
96:6e:04:a9:19:1b:fc:5b:7b:cd:48:a7:24:20:41:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:6E:AC:0A:FE:74:EB:3A:60:7E:89:D0:6C:D3:C1:8E:B2:5B:A4
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:3c:ce:a2:af:54:fe:f8:1e:18:9f:ac:cb:d5:fc:31:85:38:
7a:3f:d5:3d:b3:65:05:2d:01:27:47:3f:76:bc:ac:78:87:36:
e2:f7:df:8c:33:56:57:1b:af:58:8d:b0:62:52:0a:e1:8a:6c:
5b:21:7c:82:11:5a:c3:e9:95:a9:05:3c:c2:f8:2a:fe:09:ea:
0c:11:40:41:b0:33:90:36:37:4c:f9:87:52:c5:91:79:37:4b:
e9:b0:44:20:4c:ac:cf:19:78:24:dd:a3:f9:e6:21:a2:07:33:
73:b7:d9:de:af:04:42:42:d3:1f:cf:a2:b0:e7:25:0b:ff:41:
be:4b:ba:7c:fa:4c:30:03:57:a7:e6:fd:43:71:07:dc:91:f2:
3b:fb:70:27:e8:09:91:57:a2:c9:af:58:db:bd:4c:84:72:8e:
af:42:72:82:14:e7:cf:26:eb:ea:50:f4:da:4b:8e:c5:ff:1c:
af:de:ae:68:dc:64:65:ad:a8:d8:61:9f:84:7a:f6:52:41:34:
d6:bf:fa:f1:5f:fe:8a:97:f9:58:e5:fa:7e:4a:d5:f1:85:f4:
45:45:6f:46:6a:93:54:92:91:f9:b6:bc:d5:86:7e:84:18:e9:
17:84:42:7d:8d:7c:98:03:b5:29:d7:59:f6:af:6e:9c:be:48:
26:74:0a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:29:13 2026 by rpki-client