Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
File: F_2hoaCf3teimtqgN1JFpM7SPGg.mft (raw, json)
Hash identifier: FaBRPMt2FX85QCtOH5xpqOPQg9JDOvr5H9W/mdoZ7fU=
Subject key identifier: A3:F6:AA:42:D3:C1:D8:C2:8D:46:6E:8F:9F:24:19:09:FA:95:5C:23
Authority key identifier: 17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
Certificate issuer: /CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Certificate serial: 01A0DDCEE155D4B4C2967A0B19BA903CD93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
Manifest number: 01BE
Signing time: Sat 26 Sep 2026 13:01:57 +0000
Manifest this update: Sat 26 Sep 2026 13:01:57 +0000
Manifest next update: Sun 27 Sep 2026 13:01:57 +0000
Files and hashes: 1: F_2hoaCf3teimtqgN1JFpM7SPGg.crl (hash: QarkteSMVqIvE73yiURLlJji3lSnE51wcf0OI6v82tM=)
2: V_lZZIqY5s85SF0ugHkKTWjJMIw.roa (hash: k646Q+fHI6cZiQ9lJkMUeqvbWvtUz1EBniyuZudyxSE=)
3: ccpyB2p3G0mmKqz1sdLuUDX6wl0.roa (hash: VbBq9JONk0sG6hiNflvsf2M93Fqkn8mHP3+rmtcZv9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:e1:55:d4:b4:c2:96:7a:0b:19:ba:90:3c:d9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Validity
Not Before: Sep 26 13:01:57 2026 GMT
Not After : Sep 27 13:01:57 2026 GMT
Subject: CN=a3f6aa42d3c1d8c28d466e8f9f241909fa955c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:71:c0:dc:10:3f:c3:4e:82:dd:c4:2b:f8:
0e:a9:77:3d:d6:7e:35:c5:1a:f5:14:5f:7a:2b:f4:
d2:01:0c:50:8b:fc:3b:9a:44:91:61:4f:67:e6:c2:
b1:b5:4a:79:70:4d:5b:aa:fc:55:29:64:a9:15:ba:
7a:20:cd:68:76:2e:35:03:2f:1f:86:95:d7:8d:a7:
81:b5:ff:3d:c1:d9:40:dc:af:5e:a7:7f:81:2f:3d:
33:97:ad:55:35:f6:54:94:e0:09:46:da:11:8e:17:
5c:ec:d0:bc:74:b5:80:2f:d8:ae:2e:cd:ef:50:ca:
47:e4:d1:3d:3a:2d:76:33:38:9c:b5:0f:40:a1:1f:
0a:68:59:93:e1:b4:25:cd:78:21:d9:ac:2e:27:95:
58:b9:42:22:db:c2:7a:81:b2:77:e8:82:83:16:bf:
38:ad:db:8f:31:d2:4c:71:fb:aa:36:d7:69:cd:df:
c7:bc:6d:14:82:55:80:83:c1:89:5e:b3:6a:5a:38:
88:a9:f0:38:34:35:52:d9:e9:00:d9:f8:21:5a:0f:
57:bd:22:3f:a3:11:1f:3a:a1:38:36:6a:de:be:09:
d9:63:66:eb:d1:83:c3:64:21:a0:65:70:5d:16:b1:
d6:00:0b:90:9c:33:40:ed:58:ac:84:64:d1:94:85:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F6:AA:42:D3:C1:D8:C2:8D:46:6E:8F:9F:24:19:09:FA:95:5C:23
X509v3 Authority Key Identifier:
keyid:17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:da:bf:d1:70:9d:2e:7c:8b:a4:cc:07:64:63:d9:6a:36:53:
61:0d:12:e2:b7:89:46:a6:1b:10:a5:83:2d:2c:8e:a9:1e:ed:
9f:97:3f:16:67:8f:2c:26:61:09:73:d8:a6:b5:0d:75:e4:b8:
44:e3:c5:b2:ec:45:fc:9a:38:95:36:5d:45:23:61:bd:1d:f9:
e5:c5:cf:5f:67:27:2a:b0:9d:8c:63:48:e4:96:ec:f8:ca:33:
d9:9d:98:54:87:64:71:ad:0a:22:a2:b4:e6:cd:bb:cd:ca:db:
01:8b:a8:77:c8:df:2d:c5:b5:8d:e2:e8:b6:6f:c2:bb:73:74:
0e:76:66:90:66:cc:44:fd:c6:38:1b:81:b0:6e:df:57:76:90:
00:29:d4:d5:22:fc:0d:85:24:e4:f2:62:cc:12:bd:fd:ae:ad:
30:52:95:27:d4:f3:f4:1d:35:ab:e8:1e:58:c7:b3:07:38:7f:
9d:f0:2b:ee:4c:7a:e6:05:18:77:62:aa:c7:5e:85:eb:26:4c:
9c:1e:13:a3:fd:76:fb:8b:ff:24:79:bc:43:7c:61:1a:17:3b:
0d:6c:5b:7e:78:2e:1e:ef:9c:0c:46:2d:47:31:0b:5d:d7:f1:
99:73:fb:37:ec:b6:d7:1b:5a:43:28:f7:a6:66:73:ec:7c:12:
a1:0a:7e:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdzuFV1LTClnoLGbqQPNk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZmRhMWExYTA5ZmRlZDdhMjlhZGFhMDM3NTI0NWE0Y2Vk
MjNjNjgwHhcNMjYwOTI2MTMwMTU3WhcNMjYwOTI3MTMwMTU3WjAzMTEwLwYDVQQD
EyhhM2Y2YWE0MmQzYzFkOGMyOGQ0NjZlOGY5ZjI0MTkwOWZhOTU1YzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/pxwNwQP8NOgt3EK/gOqXc91n41
xRr1FF96K/TSAQxQi/w7mkSRYU9n5sKxtUp5cE1bqvxVKWSpFbp6IM1odi41Ay8f
hpXXjaeBtf89wdlA3K9ep3+BLz0zl61VNfZUlOAJRtoRjhdc7NC8dLWAL9iuLs3v
UMpH5NE9Oi12MzictQ9AoR8KaFmT4bQlzXgh2awuJ5VYuUIi28J6gbJ36IKDFr84
rduPMdJMcfuqNtdpzd/HvG0UglWAg8GJXrNqWjiIqfA4NDVS2ekA2fghWg9XvSI/
oxEfOqE4NmrevgnZY2br0YPDZCGgZXBdFrHWAAuQnDNA7VishGTRlIUeJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKP2qkLTwdjCjUZuj58kGQn6lVwjMB8GA1UdIwQY
MBaAFBf9oaGgn97XopraoDdSRaTO0jxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl8yaG9hQ2YzdGVpbXRxZ04xSkZwTTdTUEdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMWE2ZWMtNzk0MS00MDIyLTkwNzUt
MWIyYjY0ZjEwNjhlLzEvRl8yaG9hQ2YzdGVpbXRxZ04xSkZwTTdTUEdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wMWE2ZWMtNzk0MS00MDIyLTkwNzUtMWIyYjY0ZjEwNjhl
LzEvRl8yaG9hQ2YzdGVpbXRxZ04xSkZwTTdTUEdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxdq/0XCd
LnyLpMwHZGPZajZTYQ0S4reJRqYbEKWDLSyOqR7tn5c/FmePLCZhCXPYprUNdeS4
ROPFsuxF/Jo4lTZdRSNhvR355cXPX2cnKrCdjGNI5Jbs+Moz2Z2YVIdkca0KIqK0
5s27zcrbAYuod8jfLcW1jeLotm/Cu3N0DnZmkGbMRP3GOBuBsG7fV3aQACnU1SL8
DYUk5PJizBK9/a6tMFKVJ9Tz9B01q+geWMezBzh/nfAr7kx65gUYd2Kqx16F6yZM
nB4To/12+4v/JHm8Q3xhGhc7DWxbfnguHu+cDEYtRzELXdfxmXP7N+y21xtaQyj3
pmZz7HwSoQp+UQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:39:07 2026 by rpki-client