Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier: nJPlJx+bDGtlmi4jrDqYheFwnOmsJBZ6hlIAM2Cn6wU=
Subject key identifier: D2:6E:0C:3E:87:D6:69:4A:2E:D2:36:3A:BF:5D:C8:E8:0F:E6:CE:F1
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 01A0EAE5155D06551FF2896BC393DC368586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number: 10FD
Signing time: Tue 29 Sep 2026 02:01:16 +0000
Manifest this update: Tue 29 Sep 2026 02:01:16 +0000
Manifest next update: Wed 30 Sep 2026 02:01:16 +0000
Files and hashes: 1: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: YDbGZ73tIsAvA6moHCirWFN2tCRaKfpZNl7S/UnamlI=)
2: abxz-YS2pIcWJysLZsLURj3wFjE.roa (hash: v8u8I3KyfjrBtGFxRTuhA7B6RHsn+uH/zjkzCl303+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:15:5d:06:55:1f:f2:89:6b:c3:93:dc:36:85:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: Sep 29 02:01:16 2026 GMT
Not After : Sep 30 02:01:16 2026 GMT
Subject: CN=d26e0c3e87d6694a2ed2363abf5dc8e80fe6cef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d4:c2:9a:d4:78:bb:de:24:8c:75:6e:0f:93:
68:61:0f:06:5b:7f:29:7f:01:55:b6:9f:d4:0b:51:
1a:a1:81:c5:66:c6:57:31:d7:8d:20:6c:04:f1:9e:
fc:5e:d5:49:d8:05:c8:f7:57:e4:ee:9f:e8:ad:bc:
a9:d3:27:68:02:db:bb:10:fa:bf:0b:14:b2:e7:c3:
14:3c:24:b4:38:eb:bd:99:a3:6f:f6:61:bc:0f:89:
d1:3e:24:b9:47:e8:7e:32:ea:a5:7d:73:69:02:79:
af:46:28:28:28:28:66:36:5d:78:60:48:cf:8e:d8:
9b:87:59:75:e8:56:14:28:7b:fd:6d:de:85:dd:aa:
11:62:00:d7:1d:bc:2e:e7:65:76:86:fd:f1:19:f3:
af:03:33:59:44:a5:d6:1e:f4:6c:8c:ce:b0:8b:19:
bf:0d:a3:94:89:58:e1:05:7b:dd:13:d3:38:be:8b:
92:75:c9:d8:1e:1b:1d:d4:06:36:83:4e:16:49:ee:
64:82:33:c7:91:18:e1:87:07:51:9e:81:44:5f:65:
17:ee:ec:b4:98:f5:69:24:ea:ed:f3:7a:e9:08:e1:
fd:09:76:4d:cb:77:82:88:81:50:5d:1b:29:35:74:
66:10:78:d7:6e:ad:a5:3f:14:76:55:a4:e8:6f:ec:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6E:0C:3E:87:D6:69:4A:2E:D2:36:3A:BF:5D:C8:E8:0F:E6:CE:F1
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:af:51:a1:d7:cd:44:8e:ea:43:e7:e7:14:e5:c4:6b:79:7f:
c1:0a:7f:33:90:67:b8:dd:3d:0a:90:b5:78:fa:59:a7:16:c4:
3b:2a:7d:8e:86:8e:8c:70:2d:4b:e3:3b:a1:2f:30:57:c3:f2:
ea:e3:97:24:49:dc:b0:ec:20:be:ea:bf:5d:32:e3:f6:4e:21:
26:c3:86:9a:c8:65:e9:ec:35:6f:01:2c:7d:35:e1:20:46:38:
e6:da:13:7e:4f:6c:e2:55:88:56:9c:15:5b:38:d1:bc:ab:a3:
d7:65:2d:72:ad:85:3a:54:f6:9b:11:2a:ee:60:f9:bf:f6:fa:
1c:2f:3d:d6:56:6c:d9:e5:77:8c:77:1a:97:46:5e:ac:6b:25:
b6:80:a3:15:dc:b8:a5:01:09:4b:a4:a0:7e:95:e3:6f:20:37:
e0:d5:ff:1d:38:32:27:d3:87:b7:d2:8a:a9:ce:ec:66:89:02:
d2:5f:e1:74:74:a1:61:20:66:42:8f:c1:be:89:b4:a7:19:f4:
7a:c5:62:62:80:b2:86:a8:59:f1:3b:24:95:a9:03:7e:3d:50:
ed:f9:04:74:f1:87:23:ae:08:3a:d5:a1:e9:df:59:99:3b:25:
ea:94:bb:71:51:5d:5a:68:b9:8c:11:37:1e:7e:b3:f3:72:bd:
ee:b7:3b:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDq5RVdBlUf8olrw5PcNoWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZTQ1ZmQ2ZmQzZDkzMjY4NGMwYzViYzI3ZjRmYTYxNWEx
MDkwZTAwHhcNMjYwOTI5MDIwMTE2WhcNMjYwOTMwMDIwMTE2WjAzMTEwLwYDVQQD
EyhkMjZlMGMzZTg3ZDY2OTRhMmVkMjM2M2FiZjVkYzhlODBmZTZjZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79TCmtR4u94kjHVuD5NoYQ8GW38p
fwFVtp/UC1EaoYHFZsZXMdeNIGwE8Z78XtVJ2AXI91fk7p/orbyp0ydoAtu7EPq/
CxSy58MUPCS0OOu9maNv9mG8D4nRPiS5R+h+MuqlfXNpAnmvRigoKChmNl14YEjP
jtibh1l16FYUKHv9bd6F3aoRYgDXHbwu52V2hv3xGfOvAzNZRKXWHvRsjM6wixm/
DaOUiVjhBXvdE9M4vouSdcnYHhsd1AY2g04WSe5kgjPHkRjhhwdRnoFEX2UX7uy0
mPVpJOrt83rpCOH9CXZNy3eCiIFQXRspNXRmEHjXbq2lPxR2VaTob+xs1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJuDD6H1mlKLtI2Or9dyOgP5s7xMB8GA1UdIwQY
MBaAFPzkX9b9PZMmhMDFvCf0+mFaEJDgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX09SZjF2MDlreWFFd01XOEpfVDZZVm9Ra09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iZjVhNjQtOGFhZi00NGE4LWJhY2Ut
MzY4NTBkZjRlOTk3LzEvX09SZjF2MDlreWFFd01XOEpfVDZZVm9Ra09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9iZjVhNjQtOGFhZi00NGE4LWJhY2UtMzY4NTBkZjRlOTk3
LzEvX09SZjF2MDlreWFFd01XOEpfVDZZVm9Ra09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAK9RodfN
RI7qQ+fnFOXEa3l/wQp/M5BnuN09CpC1ePpZpxbEOyp9joaOjHAtS+M7oS8wV8Py
6uOXJEncsOwgvuq/XTLj9k4hJsOGmshl6ew1bwEsfTXhIEY45toTfk9s4lWIVpwV
WzjRvKuj12Utcq2FOlT2mxEq7mD5v/b6HC891lZs2eV3jHcal0ZerGsltoCjFdy4
pQEJS6SgfpXjbyA34NX/HTgyJ9OHt9KKqc7sZokC0l/hdHShYSBmQo/Bvom0pxn0
esViYoCyhqhZ8TsklakDfj1Q7fkEdPGHI64IOtWh6d9ZmTsl6pS7cVFdWmi5jBE3
Hn6z83K97rc7Uw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:34:01 2026 by rpki-client