Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: iXl8aDHR0I7JVurY9sU7dw3DrKTa+8BhVJ5w90mNicY=
Subject key identifier: 67:80:07:F9:8C:A8:46:90:8A:E6:C7:74:E2:11:67:BC:3E:CB:5D:CB
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 019E1F118E3E6D4FFFE6B0380379AA4A9CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 0993
Signing time: Wed 13 May 2026 02:01:44 +0000
Manifest this update: Wed 13 May 2026 02:01:44 +0000
Manifest next update: Thu 14 May 2026 02:01:44 +0000
Files and hashes: 1: f4bD2j2ZctfyMRffHbpMKHwXRSU.roa (hash: rtGJzd+eO3rg+u8EKiSavSngCqzv1WolCN9nYYZQY64=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: Qh4eYVSXTQ8vDJ1wJG5NY38AL6D1Eg33AnacTgMkoBw=)
3: sWzc9UukZssUn_EjgB277LtZfe4.roa (hash: pyPZe27dAwl2biV/QtNdOvZ13e3NYVb6oI5PNCsGFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:8e:3e:6d:4f:ff:e6:b0:38:03:79:aa:4a:9c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: May 13 02:01:44 2026 GMT
Not After : May 14 02:01:44 2026 GMT
Subject: CN=678007f98ca846908ae6c774e21167bc3ecb5dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:57:c0:56:e5:57:04:b6:09:cc:09:33:6c:
e0:28:6f:66:b3:84:e7:75:3b:6b:06:0b:b4:fb:b7:
2d:22:b8:a6:8a:5e:2a:c9:77:08:33:7b:5c:92:b4:
31:09:c9:c8:20:58:b2:90:9d:d2:e6:05:ce:f3:1b:
b6:3d:72:19:30:d9:90:06:8d:8a:e8:25:17:16:e6:
d8:00:9b:33:af:98:46:77:65:45:11:57:9e:b0:34:
06:96:61:a3:44:ee:1b:a4:4e:d7:cb:b9:96:01:5d:
d9:40:59:38:8a:1c:e8:17:a0:64:30:fe:d6:d6:8a:
db:d1:b3:5f:0c:97:a0:b4:4f:94:07:75:3e:31:fd:
a7:28:13:45:cd:74:79:ac:d7:ba:a7:32:4a:77:51:
70:4e:3d:72:9c:7d:0f:2f:43:bb:cd:dd:d6:93:a7:
f3:a2:5b:d7:49:de:48:52:79:dc:02:37:56:54:93:
31:3e:3e:6c:da:50:d4:7f:8a:14:34:a6:2b:45:74:
da:27:48:be:a0:89:2f:48:4d:7f:56:0b:6e:57:24:
56:6c:bf:32:16:a0:94:79:ab:53:2f:3a:7e:e2:52:
d3:86:aa:d1:5e:71:fe:a0:0f:08:82:57:bc:8c:cf:
05:08:f0:7c:88:78:b3:fa:a6:12:3f:fc:39:56:ae:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:80:07:F9:8C:A8:46:90:8A:E6:C7:74:E2:11:67:BC:3E:CB:5D:CB
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:27:b2:20:e3:af:67:95:6f:55:8b:35:8a:9e:df:5c:ac:68:
e8:4d:58:c0:df:c3:9b:47:d3:ab:7f:2a:8f:29:1d:9b:ac:24:
8f:67:c6:1a:53:05:a6:05:50:9e:d8:be:c8:63:56:bd:6a:a9:
67:28:ed:ee:42:ee:9b:f7:bf:8e:6c:c4:4e:fb:09:c8:40:a7:
42:7d:7f:a4:03:7f:7a:bf:cd:4b:31:0b:ff:e3:d2:83:62:81:
8d:c7:f9:39:7e:5c:e9:f5:5b:6c:90:8e:c4:08:14:fa:96:fe:
23:40:80:82:6f:5e:6d:0a:22:cc:8e:0d:c2:96:6f:b2:70:99:
30:7d:f5:b9:72:5b:52:a2:54:f4:7e:16:45:21:86:5a:a0:0f:
4d:08:28:80:28:94:18:8e:0d:20:6c:31:ff:24:ea:1c:26:d9:
d4:1d:02:2d:80:9a:47:a9:1d:91:75:3f:c7:f2:76:a4:d8:b0:
28:24:72:21:fb:74:5e:5b:8c:9b:ff:7d:e4:78:da:c0:64:fc:
c4:53:69:eb:e2:ca:56:b4:44:c2:b7:cf:d2:c2:6e:f7:21:d9:
b6:b8:d8:c4:05:2c:91:b7:c5:81:bd:74:36:54:7f:c3:14:8c:
f8:aa:3a:85:c6:f7:c0:9d:5e:f0:75:7b:19:d9:b8:59:ae:41:
c9:bc:39:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEY4+bU//5rA4A3mqSpzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODZmMTNhOWI3MjFjZDE4NjlmYmI5NzRlZTUzZDkwMDIy
ZWFhMmMwHhcNMjYwNTEzMDIwMTQ0WhcNMjYwNTE0MDIwMTQ0WjAzMTEwLwYDVQQD
Eyg2NzgwMDdmOThjYTg0NjkwOGFlNmM3NzRlMjExNjdiYzNlY2I1ZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeRXwFblVwS2CcwJM2zgKG9ms4Tn
dTtrBgu0+7ctIrimil4qyXcIM3tckrQxCcnIIFiykJ3S5gXO8xu2PXIZMNmQBo2K
6CUXFubYAJszr5hGd2VFEVeesDQGlmGjRO4bpE7Xy7mWAV3ZQFk4ihzoF6BkMP7W
1orb0bNfDJegtE+UB3U+Mf2nKBNFzXR5rNe6pzJKd1FwTj1ynH0PL0O7zd3Wk6fz
olvXSd5IUnncAjdWVJMxPj5s2lDUf4oUNKYrRXTaJ0i+oIkvSE1/VgtuVyRWbL8y
FqCUeatTLzp+4lLThqrRXnH+oA8Igle8jM8FCPB8iHiz+qYSP/w5Vq6IEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeAB/mMqEaQiubHdOIRZ7w+y13LMB8GA1UdIwQY
MBaAFHyG8TqbchzRhp+7l07lPZACLqosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklieE9wdHlITkdHbjd1WFR1VTlrQUl1cWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDc3MjEtMDBmZi00NTgxLTgwZTUt
NmZhODQ0MDJkNmEwLzEvZklieE9wdHlITkdHbjd1WFR1VTlrQUl1cWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MDc3MjEtMDBmZi00NTgxLTgwZTUtNmZhODQ0MDJkNmEw
LzEvZklieE9wdHlITkdHbjd1WFR1VTlrQUl1cWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCeyIOOv
Z5VvVYs1ip7fXKxo6E1YwN/Dm0fTq38qjykdm6wkj2fGGlMFpgVQnti+yGNWvWqp
Zyjt7kLum/e/jmzETvsJyECnQn1/pAN/er/NSzEL/+PSg2KBjcf5OX5c6fVbbJCO
xAgU+pb+I0CAgm9ebQoizI4NwpZvsnCZMH31uXJbUqJU9H4WRSGGWqAPTQgogCiU
GI4NIGwx/yTqHCbZ1B0CLYCaR6kdkXU/x/J2pNiwKCRyIft0XluMm/995HjawGT8
xFNp6+LKVrREwrfP0sJu9yHZtrjYxAUskbfFgb10NlR/wxSM+Ko6hcb3wJ1e8HV7
Gdm4Wa5Bybw5fw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:43:26 2026 by rpki-client