Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: 6MkV1Zspfa0UGmFUfgUMetngnHaiFs1NEsXZp23FVC0=
Subject key identifier: 27:8E:47:0A:9B:F0:96:BF:E9:18:A7:6C:74:4E:0B:28:A1:95:CF:B3
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 01A12B44BF1E0B1A67AD7E6612B42DEE366B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 1A2B
Signing time: Sun 11 Oct 2026 14:01:27 +0000
Manifest this update: Sun 11 Oct 2026 14:01:27 +0000
Manifest next update: Mon 12 Oct 2026 14:01:27 +0000
Files and hashes: 1: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (hash: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: XUazDe26P246Cb3ZGJyvjexEFXMrrcDe+4AUblkZoTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:bf:1e:0b:1a:67:ad:7e:66:12:b4:2d:ee:36:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Oct 11 14:01:27 2026 GMT
Not After : Oct 12 14:01:27 2026 GMT
Subject: CN=278e470a9bf096bfe918a76c744e0b28a195cfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:61:23:77:8b:e2:42:70:f8:06:f4:dd:22:ca:
eb:f8:db:13:4d:38:cd:dc:80:63:79:e0:fb:1c:d9:
5a:a9:05:fc:e6:53:64:f0:ff:48:a6:8d:bd:e9:52:
d8:e2:10:b4:98:c1:9e:44:9b:9c:5e:75:b4:cf:eb:
89:f6:84:cb:c3:31:49:c5:0e:6c:bb:b3:09:7e:18:
5a:d2:fe:5e:e3:99:58:0b:0b:49:a9:9b:f6:98:49:
97:f9:ea:dc:5c:e2:92:a1:6a:0c:bc:d6:d6:9f:02:
24:b2:e7:64:7f:62:10:0d:17:bd:59:5c:b7:d8:34:
06:f5:66:82:51:64:a7:b1:2f:60:5d:eb:ee:46:43:
5b:40:56:3d:a4:07:c0:de:af:7f:04:a4:3d:35:44:
2b:09:83:1d:49:ec:f0:27:f4:3c:a1:a9:fb:a9:43:
a7:b0:60:e4:09:36:00:97:19:15:ed:91:8f:99:27:
32:b9:c0:ba:5f:ad:b0:f2:5f:80:4a:4b:9b:a8:db:
44:5a:9e:76:2d:92:d4:56:10:ea:b4:9b:dd:79:b8:
a9:93:83:18:11:42:d9:26:ad:e8:79:e7:87:ad:92:
24:b2:08:51:ce:63:8d:f1:04:c1:76:30:03:bf:a9:
cd:8b:af:bf:d0:76:42:cb:ae:dd:52:ab:92:4e:a7:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:47:0A:9B:F0:96:BF:E9:18:A7:6C:74:4E:0B:28:A1:95:CF:B3
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:db:bd:82:c3:9a:de:dd:af:dd:f2:5b:07:8f:1b:df:10:82:
5f:71:d4:5b:6b:72:04:ee:83:2a:77:55:49:b8:da:55:0d:61:
2c:6f:23:6c:13:a7:4d:09:72:d8:36:75:92:13:46:b8:47:23:
95:75:48:97:e4:07:05:c6:83:85:1f:a2:ff:59:a4:c2:5a:69:
8e:c2:64:c1:93:77:c1:ab:22:be:11:c1:45:60:9c:4e:f2:65:
ad:22:95:20:d5:a8:a9:c7:08:44:7c:84:05:a6:3d:6a:2e:d0:
d3:06:4a:53:9f:53:10:b6:99:0d:a5:0a:39:86:af:7f:42:89:
d6:6c:bc:18:34:7b:c0:82:01:fc:92:7b:7d:fb:b3:af:25:e9:
37:b5:0b:48:a8:19:5d:14:b5:6d:85:43:b4:6a:ca:54:11:cc:
b1:06:05:5d:a6:cb:f6:90:7e:6b:83:22:c2:58:eb:23:e9:77:
77:99:54:53:14:87:11:0e:da:6f:bd:bb:62:79:f7:b8:d6:09:
f5:d1:25:a9:c9:0e:c1:ae:ad:35:3c:fa:9f:e8:3f:e7:20:96:
69:cc:6a:37:82:34:1b:4a:60:dc:56:8a:bc:23:e5:0c:59:4c:
f6:c9:47:7b:ef:d7:79:25:bc:08:81:36:fd:19:b5:50:6a:77:
97:bd:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:00:08 2026 by rpki-client