Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
File: fEDTjH5rzUtq76C7Ss17ZEznGkc.mft (raw, json)
Hash identifier: ymuqxIG9i4oY4aYYNYjM2AAXVC3nok/j4nA9dUWb3zI=
Subject key identifier: 3F:08:C3:D7:86:FF:6A:39:F2:4C:6A:09:F8:B6:42:44:92:1B:59:5E
Authority key identifier: 7C:40:D3:8C:7E:6B:CD:4B:6A:EF:A0:BB:4A:CD:7B:64:4C:E7:1A:47
Certificate issuer: /CN=7c40d38c7e6bcd4b6aefa0bb4acd7b644ce71a47
Certificate serial: 01A0D01257B192F9DBB48F5E6344E1FE5606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
Manifest number: 020B
Signing time: Wed 23 Sep 2026 21:00:58 +0000
Manifest this update: Wed 23 Sep 2026 21:00:58 +0000
Manifest next update: Thu 24 Sep 2026 21:00:58 +0000
Files and hashes: 1: JOrZbv5P8xa_uNN_bW2nd8t85fw.roa (hash: +tU3FVRnRItU1Djfz+HewHPi/7UJ09UTc4dbTgRdd4Q=)
2: fEDTjH5rzUtq76C7Ss17ZEznGkc.crl (hash: +qrak/e9AqWV/ftwhJFvJt2XuyxH1xD7p0MSYZQ8few=)
3: zOYOJF9DfijezlN9iaw-AlTXC9Y.roa (hash: 9l40cVFv1YhreHGWhH0joF4uHabuY804EXNUsY9cFxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:57:b1:92:f9:db:b4:8f:5e:63:44:e1:fe:56:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c40d38c7e6bcd4b6aefa0bb4acd7b644ce71a47
Validity
Not Before: Sep 23 21:00:58 2026 GMT
Not After : Sep 24 21:00:58 2026 GMT
Subject: CN=3f08c3d786ff6a39f24c6a09f8b64244921b595e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:15:df:be:be:9b:72:96:67:61:f7:38:ce:
34:8e:29:17:a3:f2:f5:bb:97:1b:0e:ee:41:1f:87:
4a:c5:ac:1e:38:14:8e:83:0f:e2:2d:4c:4c:e9:90:
2e:55:00:f2:1a:69:68:23:b2:c9:ed:d0:9e:c8:81:
82:01:f2:dc:bc:03:bb:54:97:05:75:60:31:42:b2:
08:bd:92:06:b6:12:72:06:3e:76:ba:e6:1a:76:8c:
66:68:df:10:f9:7a:66:92:ed:19:6a:ea:18:15:5b:
c2:40:f5:83:42:50:14:6f:3a:ef:cc:db:a3:6f:22:
05:62:e8:ab:74:65:80:2c:e9:ac:34:42:d4:d1:74:
53:6e:5a:78:91:bb:9c:f5:1b:a8:e2:5d:44:4b:0f:
e0:64:95:e6:b2:62:85:26:5f:84:75:da:0e:e0:1b:
af:94:1a:e8:b9:21:d4:43:93:4c:06:92:ea:27:62:
3b:de:f7:63:8c:27:21:c9:8b:07:01:92:46:fb:4e:
af:0f:63:24:05:fe:09:b0:4a:85:ac:aa:94:ee:b9:
95:26:f2:e5:34:29:d3:e2:1a:b9:5e:f6:95:17:83:
a8:58:e2:5c:72:03:4d:59:f0:2a:f1:f5:65:cf:ff:
d1:5c:a1:b3:7f:92:55:f7:79:e2:78:1c:0a:d2:9c:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:08:C3:D7:86:FF:6A:39:F2:4C:6A:09:F8:B6:42:44:92:1B:59:5E
X509v3 Authority Key Identifier:
keyid:7C:40:D3:8C:7E:6B:CD:4B:6A:EF:A0:BB:4A:CD:7B:64:4C:E7:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a3:83:62:85:80:56:89:31:d1:46:bb:c1:8f:20:cc:a1:2c:
ad:88:20:2d:de:8e:3f:fa:cf:02:48:fb:7a:70:c8:f7:02:95:
84:a8:4f:fd:63:fd:39:ca:79:6a:cf:83:ae:6d:d6:7c:91:76:
fd:b2:cb:cc:79:c1:07:57:d6:23:5e:cb:a4:4c:5c:b1:b5:56:
3f:0c:5b:71:d5:9e:66:9e:76:3e:b1:da:7f:7c:03:90:48:5b:
c1:0e:b0:d8:53:56:a7:e2:ca:9d:8d:c9:31:04:9c:b2:7e:fd:
d3:2a:dd:42:cc:e2:0f:42:a8:8e:01:ca:8b:f8:d9:4b:fa:f4:
41:99:a5:fe:67:aa:fc:08:7e:eb:0c:75:1e:af:2a:a0:3c:08:
28:5a:9a:83:ac:06:1a:d0:b8:68:44:51:ea:d7:e7:f8:c4:f5:
20:64:7e:91:e4:83:cb:36:ff:63:a5:4c:ae:2a:69:93:7e:39:
6f:53:66:25:25:7c:9a:7f:e8:99:49:95:9d:19:11:38:0f:46:
7e:6a:d4:7b:cd:a0:b5:35:ed:45:08:67:a5:45:4c:07:91:e1:
43:16:14:4e:9f:b0:83:4c:e5:7c:92:9e:b4:66:f6:46:49:92:
c3:9a:20:27:82:c8:ed:4f:9c:41:a1:c8:5e:66:41:dd:c3:cc:
84:00:65:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQElexkvnbtI9eY0Th/lYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNDBkMzhjN2U2YmNkNGI2YWVmYTBiYjRhY2Q3YjY0NGNl
NzFhNDcwHhcNMjYwOTIzMjEwMDU4WhcNMjYwOTI0MjEwMDU4WjAzMTEwLwYDVQQD
EygzZjA4YzNkNzg2ZmY2YTM5ZjI0YzZhMDlmOGI2NDI0NDkyMWI1OTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEMV376+m3KWZ2H3OM40jikXo/L1
u5cbDu5BH4dKxaweOBSOgw/iLUxM6ZAuVQDyGmloI7LJ7dCeyIGCAfLcvAO7VJcF
dWAxQrIIvZIGthJyBj52uuYadoxmaN8Q+Xpmku0ZauoYFVvCQPWDQlAUbzrvzNuj
byIFYuirdGWALOmsNELU0XRTblp4kbuc9Ruo4l1ESw/gZJXmsmKFJl+EddoO4Buv
lBrouSHUQ5NMBpLqJ2I73vdjjCchyYsHAZJG+06vD2MkBf4JsEqFrKqU7rmVJvLl
NCnT4hq5XvaVF4OoWOJccgNNWfAq8fVlz//RXKGzf5JV93nieBwK0px/9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8Iw9eG/2o58kxqCfi2QkSSG1leMB8GA1UdIwQY
MBaAFHxA04x+a81Lau+gu0rNe2RM5xpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkVEVGpINXJ6VXRxNzZDN1NzMTdaRXpuR2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84OWYxMmYtY2FlYy00ZTdhLThhYzkt
ZDZiNTFkMzdhZmY0LzEvZkVEVGpINXJ6VXRxNzZDN1NzMTdaRXpuR2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84OWYxMmYtY2FlYy00ZTdhLThhYzktZDZiNTFkMzdhZmY0
LzEvZkVEVGpINXJ6VXRxNzZDN1NzMTdaRXpuR2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaODYoWA
Vokx0Ua7wY8gzKEsrYggLd6OP/rPAkj7enDI9wKVhKhP/WP9Ocp5as+Drm3WfJF2
/bLLzHnBB1fWI17LpExcsbVWPwxbcdWeZp52PrHaf3wDkEhbwQ6w2FNWp+LKnY3J
MQScsn790yrdQsziD0KojgHKi/jZS/r0QZml/meq/Ah+6wx1Hq8qoDwIKFqag6wG
GtC4aERR6tfn+MT1IGR+keSDyzb/Y6VMrippk345b1NmJSV8mn/omUmVnRkROA9G
fmrUe82gtTXtRQhnpUVMB5HhQxYUTp+wg0zlfJKetGb2RkmSw5ogJ4LI7U+cQaHI
XmZB3cPMhABlKw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:03:19 2026 by rpki-client