Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: LsMVxFWTKzLU3xn9bn1z8J53e4bMqId11scQbTIkGK8=
Subject key identifier: 40:47:75:07:C7:8E:39:58:98:C6:75:58:16:A9:86:93:71:83:D6:AD
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 019E1EA354EFBFB1F93E0CF83E58E0E2D8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0E3C
Signing time: Wed 13 May 2026 00:01:21 +0000
Manifest this update: Wed 13 May 2026 00:01:21 +0000
Manifest next update: Thu 14 May 2026 00:01:21 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: vDQBMYy65UhKMiFtq++nZN6bGvdPX0VXubXpgB51y0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:54:ef:bf:b1:f9:3e:0c:f8:3e:58:e0:e2:d8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: May 13 00:01:21 2026 GMT
Not After : May 14 00:01:21 2026 GMT
Subject: CN=40477507c78e395898c6755816a986937183d6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:3f:55:ef:22:12:7c:6b:4c:cb:c5:12:28:
73:f3:5a:c9:03:f2:5a:76:49:de:23:2e:83:3d:bd:
19:b3:6c:17:94:fa:c5:19:a1:c3:76:33:95:1f:92:
44:94:2c:51:13:f0:2b:02:56:d6:e8:b0:a3:b7:16:
a4:c1:61:4e:d4:06:cd:31:e3:7e:f0:a3:b5:0a:62:
51:ef:19:37:45:5a:6e:d8:74:81:c8:06:0c:c9:a3:
d0:77:95:2a:18:9b:cd:3e:fb:39:17:dc:d8:34:1d:
b8:80:87:a6:5f:8e:52:97:9e:be:b9:e4:b1:62:e5:
c5:37:af:61:8c:9d:ed:15:46:96:9f:65:e4:9c:cf:
5d:01:59:d5:ee:20:a5:9a:70:81:0d:43:5f:b8:d0:
37:da:18:98:77:52:82:b1:c9:b5:3e:83:ab:16:dc:
cf:90:bb:6b:40:79:e3:98:81:7c:f5:10:7b:54:9b:
fc:77:99:1b:0b:26:8f:2e:2d:d3:0a:01:1d:d3:aa:
14:18:e9:c0:2a:bd:05:36:0a:7c:a3:31:b9:1c:7d:
11:6d:ab:e5:54:3f:45:22:e6:36:40:7d:3c:df:bf:
34:80:48:63:88:42:ad:ae:38:48:96:b7:81:1a:c0:
c4:ec:4c:7d:8e:13:e5:17:9f:27:b0:d6:e4:82:93:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:47:75:07:C7:8E:39:58:98:C6:75:58:16:A9:86:93:71:83:D6:AD
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b5:db:60:14:68:5a:00:d1:65:08:31:db:57:fc:81:d5:b4:
e9:81:bf:fa:79:d3:33:a7:8a:56:79:2d:88:d3:d1:c7:7d:26:
33:f7:d6:72:5e:71:4b:b4:7e:0c:9b:6f:06:56:bf:28:4e:23:
bf:07:64:ae:2b:59:a4:79:c7:7f:8c:b8:8f:0c:b3:ae:70:94:
78:2e:8a:a8:28:2c:03:15:27:36:76:ed:98:e5:40:1e:a9:b6:
05:32:5d:6d:9b:bb:da:2e:f5:15:ff:2b:8f:d3:38:e0:38:02:
fd:79:5c:76:b7:63:10:b8:58:ee:1c:1d:49:65:fc:7d:87:32:
52:81:b1:3c:99:f2:bb:c0:71:39:fe:88:50:ce:9a:50:94:62:
0d:b8:a3:ab:f8:c2:19:9a:b0:b0:a3:05:cd:af:20:15:ee:55:
cc:92:de:0b:4e:c0:78:6a:4d:63:ba:f2:61:71:92:e4:58:41:
ff:a0:71:ea:17:c9:5b:cc:93:f9:ef:5b:91:2b:77:b3:f3:32:
14:1a:65:0e:4d:2b:be:7e:be:4b:3a:db:4c:51:b5:e2:70:9f:
a8:f8:f4:a9:f6:ba:b9:5c:d1:14:5d:3a:bd:f2:df:4d:38:ba:
f6:7d:20:b1:6f:b7:71:a9:28:ac:75:f1:0f:da:65:22:6f:99:
fa:47:1c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo1Tvv7H5Pgz4Pljg4titMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMjM4MGQ3NjRhOTYxMWRmZTJmYmMwY2UwY2M0MDQ5NmVj
MWU4M2UwHhcNMjYwNTEzMDAwMTIxWhcNMjYwNTE0MDAwMTIxWjAzMTEwLwYDVQQD
Eyg0MDQ3NzUwN2M3OGUzOTU4OThjNjc1NTgxNmE5ODY5MzcxODNkNmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Io/Ve8iEnxrTMvFEihz81rJA/Ja
dkneIy6DPb0Zs2wXlPrFGaHDdjOVH5JElCxRE/ArAlbW6LCjtxakwWFO1AbNMeN+
8KO1CmJR7xk3RVpu2HSByAYMyaPQd5UqGJvNPvs5F9zYNB24gIemX45Sl56+ueSx
YuXFN69hjJ3tFUaWn2XknM9dAVnV7iClmnCBDUNfuNA32hiYd1KCscm1PoOrFtzP
kLtrQHnjmIF89RB7VJv8d5kbCyaPLi3TCgEd06oUGOnAKr0FNgp8ozG5HH0Rbavl
VD9FIuY2QH083780gEhjiEKtrjhIlreBGsDE7Ex9jhPlF58nsNbkgpMBqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBHdQfHjjlYmMZ1WBaphpNxg9atMB8GA1UdIwQY
MBaAFHwjgNdkqWEd/i+8DODMQEluweg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMt
NWQ4Y2E2MzY4MWFkLzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMtNWQ4Y2E2MzY4MWFk
LzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLXbYBRo
WgDRZQgx21f8gdW06YG/+nnTM6eKVnktiNPRx30mM/fWcl5xS7R+DJtvBla/KE4j
vwdkritZpHnHf4y4jwyzrnCUeC6KqCgsAxUnNnbtmOVAHqm2BTJdbZu72i71Ff8r
j9M44DgC/XlcdrdjELhY7hwdSWX8fYcyUoGxPJnyu8BxOf6IUM6aUJRiDbijq/jC
GZqwsKMFza8gFe5VzJLeC07AeGpNY7ryYXGS5FhB/6Bx6hfJW8yT+e9bkSt3s/My
FBplDk0rvn6+SzrbTFG14nCfqPj0qfa6uVzRFF06vfLfTTi69n0gsW+3cakorHXx
D9plIm+Z+kcc2A==
-----END CERTIFICATE-----
Generated at Wed May 13 05:29:45 2026 by rpki-client