Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier: ftcJyXSm4lkDJ1EgNh/XkEuLsL9Wk7zgBcfxdGM00vE=
Subject key identifier: 8F:E3:2C:97:5E:C1:C9:F9:98:0B:98:4D:31:1A:12:F6:24:F5:67:5C
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer: /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial: 01A12AD64B00070CC0439866A17933A11A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 12:00:49 +0000
Manifest this update: Sun 11 Oct 2026 12:00:49 +0000
Manifest next update: Mon 12 Oct 2026 12:00:49 +0000
Files and hashes: 1: 2_PmjSq2ymAnVudAlocm7T1tmn4.roa (hash: QSuT7TExW9U0JzR64tb3XYLCTidPjZYgevzpEmIents=)
2: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: JdrR7moyG2m6EjIGSh+WFLzOF4YlNU/HwPBlL5/vjfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:4b:00:07:0c:c0:43:98:66:a1:79:33:a1:1a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
Validity
Not Before: Oct 11 12:00:49 2026 GMT
Not After : Oct 12 12:00:49 2026 GMT
Subject: CN=8fe32c975ec1c9f9980b984d311a12f624f5675c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:60:7c:8e:06:7f:f7:d2:36:65:bc:e5:f9:
da:3d:69:6d:91:42:0b:c4:ee:e9:88:d3:4f:59:b3:
4d:ce:a0:84:fa:e6:fc:64:d2:2a:b3:d4:ff:e7:0d:
43:53:27:71:83:90:92:64:16:71:c7:e6:d3:bd:fb:
72:4c:56:70:50:ca:00:86:e0:48:2c:45:21:47:e1:
03:6e:45:01:28:06:c4:22:16:d7:8d:7e:64:98:19:
ee:22:1b:7d:bd:7f:ac:26:96:33:f4:f4:57:f2:94:
31:89:88:d6:de:c8:5e:a2:c7:82:23:d0:56:66:13:
59:e3:a3:a5:9a:df:ee:b7:78:8a:56:75:4c:0a:1f:
fa:a6:d7:c4:da:56:7e:2e:fd:64:e8:02:e2:2a:c1:
f9:39:64:ab:e5:b6:11:ca:61:e6:c8:03:44:93:df:
c6:2a:67:e8:9c:75:c9:fb:fe:06:87:a4:e0:fd:04:
9c:7e:5a:3c:97:a9:d4:6f:f4:32:be:9b:4f:7c:73:
a7:c4:ac:6f:c4:b1:a8:bd:a5:71:88:ae:13:88:89:
fe:17:b3:14:17:1f:be:50:20:1c:db:ac:99:98:81:
f8:f8:18:b3:7a:fc:20:35:b8:10:8c:7a:06:5d:eb:
d6:77:e8:dd:48:67:c7:31:fa:45:b1:d0:d3:a7:a3:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E3:2C:97:5E:C1:C9:F9:98:0B:98:4D:31:1A:12:F6:24:F5:67:5C
X509v3 Authority Key Identifier:
keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c3:e6:a4:b7:2e:2d:4a:98:1d:fd:32:82:79:b1:7f:f3:aa:
6e:b4:08:6c:ec:24:ff:4c:29:81:a3:ed:18:77:1a:0a:d4:f6:
45:f9:d5:81:95:a1:18:71:6d:fe:4b:3c:50:f6:90:8f:1e:7e:
93:80:4d:5c:2c:78:e7:18:da:f7:f0:07:e1:06:5f:6f:ff:b5:
16:f1:d5:7d:db:f6:b0:a1:fc:74:4e:b4:af:a6:95:8b:b0:42:
ea:5e:33:ff:b8:b3:e9:e1:a4:4f:71:7b:51:8e:fd:27:07:f7:
56:3b:29:b5:50:e6:e7:e5:14:78:dd:96:e5:10:78:32:e8:ae:
ae:cb:5e:35:a3:00:2b:a2:ba:0b:89:f2:1b:7f:69:27:fe:68:
5b:ec:20:2a:99:5f:92:ae:fb:8c:27:a1:79:f8:97:af:07:60:
36:5e:d4:93:87:ca:5b:98:8a:03:24:4a:68:08:92:46:13:03:
e9:8e:e8:67:6c:df:74:2f:34:10:a8:2c:9e:2e:fe:52:79:77:
d1:5e:d3:03:05:64:ee:7b:49:4f:9a:53:9e:52:b0:8c:32:c2:
21:ba:6c:20:7f:7e:14:8f:29:b1:60:cb:88:ab:73:cc:66:0f:
12:79:ad:c6:63:c8:d5:e3:2e:5e:4e:9a:eb:2c:84:15:3e:6a:
27:2b:eb:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEq1ksABwzAQ5hmoXkzoRoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1M2Q3NTdiNzcwNjdiZWZkOTQ0NjY5NDc0OGFkMmIwNGU5
N2IzOGMwHhcNMjYxMDExMTIwMDQ5WhcNMjYxMDEyMTIwMDQ5WjAzMTEwLwYDVQQD
Eyg4ZmUzMmM5NzVlYzFjOWY5OTgwYjk4NGQzMTFhMTJmNjI0ZjU2NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYZgfI4Gf/fSNmW85fnaPWltkUIL
xO7piNNPWbNNzqCE+ub8ZNIqs9T/5w1DUydxg5CSZBZxx+bTvftyTFZwUMoAhuBI
LEUhR+EDbkUBKAbEIhbXjX5kmBnuIht9vX+sJpYz9PRX8pQxiYjW3sheoseCI9BW
ZhNZ46Olmt/ut3iKVnVMCh/6ptfE2lZ+Lv1k6ALiKsH5OWSr5bYRymHmyANEk9/G
KmfonHXJ+/4Gh6Tg/QScflo8l6nUb/QyvptPfHOnxKxvxLGovaVxiK4TiIn+F7MU
Fx++UCAc26yZmIH4+BizevwgNbgQjHoGXevWd+jdSGfHMfpFsdDTp6MrEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/jLJdewcn5mAuYTTEaEvYk9WdcMB8GA1UdIwQY
MBaAFBU9dXt3Bnvv2URmlHSK0rBOl7OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYt
MDE5ZTFmODQwM2RkLzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYtMDE5ZTFmODQwM2Rk
LzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMsPmpLcu
LUqYHf0ygnmxf/OqbrQIbOwk/0wpgaPtGHcaCtT2RfnVgZWhGHFt/ks8UPaQjx5+
k4BNXCx45xja9/AH4QZfb/+1FvHVfdv2sKH8dE60r6aVi7BC6l4z/7iz6eGkT3F7
UY79Jwf3VjsptVDm5+UUeN2W5RB4MuiursteNaMAK6K6C4nyG39pJ/5oW+wgKplf
kq77jCehefiXrwdgNl7Uk4fKW5iKAyRKaAiSRhMD6Y7oZ2zfdC80EKgsni7+Unl3
0V7TAwVk7ntJT5pTnlKwjDLCIbpsIH9+FI8psWDLiKtzzGYPEnmtxmPI1eMuXk6a
6yyEFT5qJyvrIg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:17:49 2026 by rpki-client