Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: lMHGWmMQ0nOiD++wQv99VrH7iCQNAUuJv+dqwGGyvdA=
Subject key identifier: 1C:DB:90:AE:1E:22:0E:81:97:B6:C6:CB:0A:79:0A:81:1C:3F:9C:3E
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 01A0D8A83AB398633CA678F8590E16B61E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 1704
Signing time: Fri 25 Sep 2026 13:01:38 +0000
Manifest this update: Fri 25 Sep 2026 13:01:38 +0000
Manifest next update: Sat 26 Sep 2026 13:01:38 +0000
Files and hashes: 1: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: nuUjDC7TrLRg5Q0xQCydflrZrOm6x8lOCMMjAeJCvww=)
2: KPei4pGh6l2ch2CO4YkeyV22yvw.roa (hash: k1IWbcYO0kXCRKUgrnwnc4nPu4ClnarK73JxRUTod6I=)
3: kaDMDof3JnegZ76WynjnrQpCAYo.roa (hash: FDrbnAWfbNlBDk06C3Ts0xLMWNBRoitqJnesKeSlD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:3a:b3:98:63:3c:a6:78:f8:59:0e:16:b6:1e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Sep 25 13:01:38 2026 GMT
Not After : Sep 26 13:01:38 2026 GMT
Subject: CN=1cdb90ae1e220e8197b6c6cb0a790a811c3f9c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:53:4c:b3:84:1c:0e:63:78:82:ed:b2:1a:
7c:37:de:c1:fb:9b:84:07:54:65:f8:a2:af:ac:5c:
1a:39:73:90:19:10:b4:2c:8d:1e:64:e0:d7:62:d4:
9b:e1:08:9b:d7:af:25:64:14:2f:5f:42:17:98:8f:
57:19:1a:58:d4:c9:fc:2e:53:16:e9:93:44:b0:a7:
c4:91:62:ec:02:8f:9d:76:5a:ec:06:13:11:d5:63:
36:6c:d2:7c:4b:f6:67:a4:a7:d8:0f:f0:4d:c3:eb:
53:a7:a6:a1:06:a6:75:32:22:ad:78:cc:35:12:98:
ae:5e:f6:7d:e5:f3:5d:73:6b:2b:f9:87:fb:dd:6d:
6a:2f:c1:ee:2c:f1:3e:d1:6e:8f:cf:a0:3e:61:a4:
71:61:95:11:4a:09:32:d7:9d:a1:12:53:21:56:27:
32:4f:a7:b9:37:72:11:04:52:1c:2c:bf:e7:08:b1:
cb:b4:23:42:84:52:cf:dc:67:77:10:92:e9:1d:96:
a9:03:a4:e5:73:ae:ef:4d:a8:71:1e:54:a0:a8:cc:
c8:50:7e:b6:5f:1e:66:f3:fd:8a:bb:90:3a:8b:ce:
dd:64:be:02:85:4d:2b:e8:a9:49:bb:18:ce:80:41:
5d:c3:bb:60:a4:3f:8c:3d:c5:20:92:9f:8f:3a:d5:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DB:90:AE:1E:22:0E:81:97:B6:C6:CB:0A:79:0A:81:1C:3F:9C:3E
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5b:57:09:18:bd:91:18:a1:ae:2a:05:d1:39:a6:98:c5:57:
2f:80:96:63:e3:43:f4:43:c5:66:9f:1b:0f:82:5d:34:b2:27:
a1:a8:65:48:28:90:93:26:d2:fb:6b:b4:3d:91:f9:e8:ab:9d:
c1:e2:9b:45:00:dc:73:82:ac:f1:a7:5f:71:0c:4d:a0:4b:2f:
50:ed:b2:3a:c3:22:7e:bf:99:98:ba:2d:d7:0b:13:a7:61:fa:
d0:f0:47:6c:e3:49:17:28:da:45:6f:a5:3e:28:4d:12:11:18:
6f:08:8d:a0:2e:58:bc:4b:82:39:c7:76:a7:19:a8:a2:57:64:
96:76:b6:2d:7a:3c:dd:ed:0a:f6:45:e3:32:f4:de:26:e8:b8:
b1:c6:e0:fe:9a:7b:15:34:d4:4c:24:61:3e:7f:35:3c:b1:72:
53:01:b3:81:c2:40:e0:57:5b:f3:f9:ea:12:8d:84:d1:e6:99:
8f:3b:4a:89:1e:c8:b4:ee:f8:68:1e:81:5f:ed:8e:62:d5:8e:
b1:45:20:49:e4:89:53:b9:96:87:f9:43:c0:aa:16:87:17:33:
45:7f:16:b8:87:67:b2:f6:a3:ae:06:1a:0d:9c:f4:45:c1:36:
1d:6a:a0:7d:6f:88:1c:44:89:49:b8:4c:bb:02:f3:7b:9b:48:
11:bd:bc:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYqDqzmGM8pnj4WQ4Wth4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2UwNmI0NGQ4ZGM0M2RjNzQyYzQwZGUzYmRhOGFhMzc0
NGUyYmQwHhcNMjYwOTI1MTMwMTM4WhcNMjYwOTI2MTMwMTM4WjAzMTEwLwYDVQQD
EygxY2RiOTBhZTFlMjIwZTgxOTdiNmM2Y2IwYTc5MGE4MTFjM2Y5YzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7pTTLOEHA5jeILtshp8N97B+5uE
B1Rl+KKvrFwaOXOQGRC0LI0eZODXYtSb4Qib168lZBQvX0IXmI9XGRpY1Mn8LlMW
6ZNEsKfEkWLsAo+ddlrsBhMR1WM2bNJ8S/ZnpKfYD/BNw+tTp6ahBqZ1MiKteMw1
EpiuXvZ95fNdc2sr+Yf73W1qL8HuLPE+0W6Pz6A+YaRxYZURSgky152hElMhVicy
T6e5N3IRBFIcLL/nCLHLtCNChFLP3Gd3EJLpHZapA6Tlc67vTahxHlSgqMzIUH62
Xx5m8/2Ku5A6i87dZL4ChU0r6KlJuxjOgEFdw7tgpD+MPcUgkp+POtUXhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzbkK4eIg6Bl7bGywp5CoEcP5w+MB8GA1UdIwQY
MBaAFBXOBrRNjcQ9x0LEDeO9qKo3ROK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEt
ZGVlNDMxN2Y1YjE0LzEvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEtZGVlNDMxN2Y1YjE0
LzEvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIltXCRi9
kRihrioF0TmmmMVXL4CWY+ND9EPFZp8bD4JdNLInoahlSCiQkybS+2u0PZH56Kud
weKbRQDcc4Ks8adfcQxNoEsvUO2yOsMifr+ZmLot1wsTp2H60PBHbONJFyjaRW+l
PihNEhEYbwiNoC5YvEuCOcd2pxmooldklna2LXo83e0K9kXjMvTeJui4scbg/pp7
FTTUTCRhPn81PLFyUwGzgcJA4Fdb8/nqEo2E0eaZjztKiR7ItO74aB6BX+2OYtWO
sUUgSeSJU7mWh/lDwKoWhxczRX8WuIdnsvajrgYaDZz0RcE2HWqgfW+IHESJSbhM
uwLze5tIEb28UA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:10:50 2026 by rpki-client