Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: nvZKmukaUWZvrjSQbiR91WgP6GOlwOlBzVLwiOrnlg8=
Subject key identifier: 0D:7F:99:61:6D:32:28:63:AA:B4:6F:5F:07:6F:EF:83:49:8F:4B:6C
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 01A0E32BF2440B1A96F6D2A2B7D04308FE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 0AA0
Signing time: Sun 27 Sep 2026 14:01:43 +0000
Manifest this update: Sun 27 Sep 2026 14:01:43 +0000
Manifest next update: Mon 28 Sep 2026 14:01:43 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: NQIsSbwrxAYu0cLF0EF91bEBLsw7YrCVTbqjLdfUhoQ=)
2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:f2:44:0b:1a:96:f6:d2:a2:b7:d0:43:08:fe:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Sep 27 14:01:43 2026 GMT
Not After : Sep 28 14:01:43 2026 GMT
Subject: CN=0d7f99616d322863aab46f5f076fef83498f4b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:56:38:c4:ca:97:71:30:bd:ad:ef:46:c9:
65:0d:a8:b1:fd:95:23:5d:ea:18:ab:0b:e2:2a:b3:
25:11:ad:d1:be:21:fd:9f:d1:0a:42:84:fa:74:fb:
9d:78:d3:b2:bb:58:b7:f6:27:3a:3b:94:bb:4d:84:
f0:e2:1e:75:f5:a5:02:ce:27:ad:88:88:c7:2b:9c:
35:c5:92:fc:bf:3d:e6:4e:f4:ce:de:91:63:b7:5c:
9d:ac:d1:4e:92:31:b5:38:46:13:90:94:a0:bb:5e:
56:c9:39:35:9a:02:de:78:36:be:a1:3b:9d:3d:e2:
99:03:d8:e0:e3:7d:bb:5d:b7:a3:32:fd:42:21:c3:
78:f5:2c:a8:71:bc:ad:08:f6:f7:af:83:7b:d7:2a:
d3:bc:4f:f3:1e:34:61:28:06:43:69:f6:98:fb:15:
10:ec:b1:e1:bf:b1:9f:79:24:46:27:80:18:bf:48:
2c:07:41:1b:61:2b:03:a9:dd:26:0a:7a:f5:19:01:
32:cf:09:e9:ad:d1:b0:17:88:38:c2:79:ff:c2:cd:
e2:89:4d:bb:57:7e:1b:fc:07:27:f9:b5:df:b5:7b:
66:d2:d8:91:d2:0a:0e:77:19:55:f6:e2:e5:9e:54:
12:2d:20:ab:19:51:11:fb:7f:87:26:c7:6e:b6:46:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7F:99:61:6D:32:28:63:AA:B4:6F:5F:07:6F:EF:83:49:8F:4B:6C
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:50:4a:0d:29:ce:dd:36:0d:b5:c2:f5:00:85:7c:0c:3c:88:
0c:c8:cb:e9:61:17:ed:48:3e:94:34:d3:62:d1:08:c8:44:1b:
9b:23:bd:03:2f:2f:f4:57:54:62:e6:c8:07:6b:7a:7f:c3:ec:
6b:5b:f6:79:b7:da:c1:f7:a9:33:f0:f0:d0:1b:b4:7d:80:bf:
e6:63:63:a1:c9:d1:87:54:e0:2b:9f:f8:95:9f:4a:c8:42:c1:
0e:21:90:b1:5b:da:66:c0:ff:f6:9a:9e:88:15:ab:e4:66:51:
25:96:37:5b:1c:43:dc:19:7c:24:69:ac:c4:07:46:67:88:b6:
2d:9e:1a:44:aa:49:a1:64:95:25:88:80:b3:28:29:56:2c:1f:
9d:bb:df:43:c1:d1:39:58:e7:57:fa:36:9b:1c:1e:fe:71:32:
fe:c5:26:3e:fb:a2:d5:09:17:fc:aa:55:9a:30:e4:35:dc:84:
32:3f:ca:21:8e:e3:cb:f1:ae:d4:f9:55:fa:50:b8:8e:1c:97:
f0:b6:f0:21:82:0b:28:e9:19:9a:08:9e:c0:08:be:4e:a3:59:
2a:c5:0c:bf:26:16:ca:d1:cd:35:f2:34:44:5d:87:3a:e9:ef:
d4:66:44:84:fa:da:e3:c1:72:07:55:cd:b5:bf:fa:93:cc:23:
72:33:d5:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjK/JECxqW9tKit9BDCP4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTE0MzI5YjZjMWU2OTUwMTFhODI0MDZmN2FmNDhmNGJi
MTBhZDQwHhcNMjYwOTI3MTQwMTQzWhcNMjYwOTI4MTQwMTQzWjAzMTEwLwYDVQQD
EygwZDdmOTk2MTZkMzIyODYzYWFiNDZmNWYwNzZmZWY4MzQ5OGY0YjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPRWOMTKl3Ewva3vRsllDaix/ZUj
XeoYqwviKrMlEa3RviH9n9EKQoT6dPudeNOyu1i39ic6O5S7TYTw4h519aUCziet
iIjHK5w1xZL8vz3mTvTO3pFjt1ydrNFOkjG1OEYTkJSgu15WyTk1mgLeeDa+oTud
PeKZA9jg4327XbejMv1CIcN49SyocbytCPb3r4N71yrTvE/zHjRhKAZDafaY+xUQ
7LHhv7GfeSRGJ4AYv0gsB0EbYSsDqd0mCnr1GQEyzwnprdGwF4g4wnn/ws3iiU27
V34b/Acn+bXftXtm0tiR0goOdxlV9uLlnlQSLSCrGVER+3+HJsdutkbXLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1/mWFtMihjqrRvXwdv74NJj0tsMB8GA1UdIwQY
MBaAFD/hQym2weaVARqCQG969I9LsQrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQt
YzNkNTdlMjM4N2NhLzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQtYzNkNTdlMjM4N2Nh
LzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlBKDSnO
3TYNtcL1AIV8DDyIDMjL6WEX7Ug+lDTTYtEIyEQbmyO9Ay8v9FdUYubIB2t6f8Ps
a1v2ebfawfepM/Dw0Bu0fYC/5mNjocnRh1TgK5/4lZ9KyELBDiGQsVvaZsD/9pqe
iBWr5GZRJZY3WxxD3Bl8JGmsxAdGZ4i2LZ4aRKpJoWSVJYiAsygpViwfnbvfQ8HR
OVjnV/o2mxwe/nEy/sUmPvui1QkX/KpVmjDkNdyEMj/KIY7jy/Gu1PlV+lC4jhyX
8LbwIYILKOkZmgiewAi+TqNZKsUMvyYWytHNNfI0RF2HOunv1GZEhPra48FyB1XN
tb/6k8wjcjPVMg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 21:20:49 2026 by rpki-client