
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File: fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier: TgJaQ/mUWsIXQSk/leOY8kspKDaSN73Fw3AAIsoeyvw=
Subject key identifier: 91:E2:BE:30:7D:C8:56:C2:43:C4:CA:4D:F8:84:6C:DD:77:9C:7D:DB
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial: 01A136A3EB2EBBD2549AD55450D238176A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number: 1AB5
Signing time: Tue 13 Oct 2026 19:01:14 +0000
Manifest this update: Tue 13 Oct 2026 19:01:14 +0000
Manifest next update: Wed 14 Oct 2026 19:01:14 +0000
Files and hashes: 1: cE-3JlgsaW1G6uxzWM25DW-c8rQ.roa (hash: M9oUYIkckIDsB1IKjs8KpGweqbN0nhGBpxFT1OmCdQY=)
2: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: RrzWu+PrZ0E6y7UpQf4BCHiFoGWPITy4iRu+7MXliOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a3:eb:2e:bb:d2:54:9a:d5:54:50:d2:38:17:6a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Validity
Not Before: Oct 13 19:01:14 2026 GMT
Not After : Oct 14 19:01:14 2026 GMT
Subject: CN=91e2be307dc856c243c4ca4df8846cdd779c7ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:60:1a:ae:ca:30:eb:71:a0:bc:a3:f2:5d:
77:0e:1f:25:39:8b:8c:14:7f:f5:a3:49:41:55:21:
dd:8b:4b:ed:08:cf:01:3c:12:71:1a:09:6d:c5:ba:
ea:00:55:94:3e:e7:6b:4d:f3:23:92:d7:96:bf:08:
ed:a7:81:2a:36:05:9f:3b:17:5a:27:03:ac:f7:19:
39:3a:e5:47:b4:4b:14:67:ec:0e:19:4e:4b:6b:26:
44:d1:93:15:c3:0b:3e:c0:b0:7b:db:b1:3b:18:16:
25:1b:98:5f:9a:13:cc:cc:49:f9:e7:f9:a7:db:3b:
8f:37:be:95:2c:b9:66:9d:2a:23:85:35:fe:8c:29:
8f:5a:8c:8c:13:83:2d:c4:66:b5:0d:40:70:fc:34:
da:88:1f:b4:7e:f2:6e:83:2f:1b:df:ef:51:3d:25:
78:60:80:d4:71:7e:db:bd:58:1e:8d:7f:86:08:e6:
e2:9b:2b:a6:55:43:0a:be:a3:c2:84:8a:90:e4:46:
e8:af:79:09:73:65:1a:62:e1:d3:7e:1e:56:41:75:
2c:50:dd:b6:41:a7:7e:ac:9a:a6:9c:46:07:ea:65:
45:3c:7f:c0:80:51:86:54:42:a0:a3:1c:b2:fb:62:
f5:f8:66:08:32:67:b7:fc:d4:5c:0d:17:6a:26:b8:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E2:BE:30:7D:C8:56:C2:43:C4:CA:4D:F8:84:6C:DD:77:9C:7D:DB
X509v3 Authority Key Identifier:
keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a9:31:85:e9:0b:25:9a:c4:c5:a0:33:c1:d2:8f:26:18:3d:
c3:56:d4:c7:5c:5d:e7:d5:00:33:cf:af:b3:32:1f:c3:cd:e7:
70:a5:87:d9:8f:7b:13:5d:38:1c:e0:f9:a5:09:ea:f5:f7:7b:
8e:e3:9e:fd:0f:70:d1:7d:d7:38:46:e6:92:46:94:b5:b4:e1:
08:a2:b1:b8:40:01:a8:9f:bf:9d:d2:0b:3d:db:75:d8:24:2c:
a2:a9:01:7b:0c:b6:87:91:9f:fd:86:7f:ea:92:e8:f0:65:76:
ef:fc:c0:31:9b:5b:08:0c:63:fd:b1:49:88:14:f1:49:f6:01:
a0:16:ba:52:8b:57:8c:ca:04:fa:93:4b:3d:55:ef:cf:68:1f:
4b:ca:a1:5f:5a:f6:84:e0:18:0f:3b:8a:ae:a7:3a:92:3b:6d:
94:0c:03:43:8f:43:d2:56:72:fa:a5:e2:8c:38:c9:a1:18:2a:
62:bd:7c:77:19:97:27:5d:a0:b9:a4:93:be:dd:ae:a0:0c:09:
62:02:b3:26:8c:99:86:b0:cb:36:03:0c:3a:ae:e5:0e:d6:c9:
36:35:77:66:05:3e:e7:ed:49:09:27:71:5f:a4:6d:cd:df:20:
ba:90:b1:e9:8e:20:6d:dc:bf:92:ec:99:81:0b:e7:fb:26:45:
68:7b:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:06:13 2026 by rpki-client