Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: HT+XrkWmmwo9Hbx6OddgfvTTrwTj2WdIFwBazcrhzbU=
Subject key identifier: F8:D6:8F:DE:0F:E1:04:DA:28:D2:84:DB:C9:7D:75:11:8A:FD:D6:1D
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 01A1DB6FDF17B2B9B77BD902A73CA37610D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 0E37
Signing time: Sat 14 Nov 2026 19:01:44 +0000
Manifest this update: Sat 14 Nov 2026 19:01:44 +0000
Manifest next update: Sun 15 Nov 2026 19:01:44 +0000
Files and hashes: 1: 2e8QyLYMT4HWwfUGaImHeP_tGTY.roa (hash: s9h03bDzb0Cy0LO5kY73K6dn/N9HUik5sgJSj+kQ3k8=)
2: Y28Wd-rLHaf4YfijKKoceP6pCO4.roa (hash: T4TEmypQSq/p5gS6mPa8ZhWCLwbTNsBlfya0BmZTPbQ=)
3: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: HDaOxIRQqDJyIGrbmw/3mYZhsWRkiM0E2cdPuxoJOTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:6f:df:17:b2:b9:b7:7b:d9:02:a7:3c:a3:76:10:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: Nov 14 19:01:44 2026 GMT
Not After : Nov 15 19:01:44 2026 GMT
Subject: CN=f8d68fde0fe104da28d284dbc97d75118afdd61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:c9:2d:2d:10:35:7d:25:1f:75:f7:05:a4:
4f:70:40:fb:96:31:76:08:bd:c5:9f:40:79:76:3a:
e3:30:8a:83:01:15:1c:61:79:34:4c:29:cb:39:ee:
31:34:13:1f:f2:59:0e:a8:99:0b:14:43:64:20:6e:
ba:a7:14:47:7e:8b:8a:28:74:4f:0f:70:66:5f:7f:
a2:8d:8c:42:1c:46:b1:9a:10:ac:f6:e5:9f:68:be:
19:44:85:f7:96:fc:31:97:9a:32:7b:1a:d2:83:52:
19:d3:b9:fe:b0:0d:9d:f3:fc:08:31:00:af:ee:27:
c4:a3:aa:46:8e:fa:59:e3:8a:17:a0:af:30:80:58:
af:e1:e1:c8:bf:d1:63:ea:28:7a:5c:3d:93:21:9b:
f8:fe:f2:0f:df:83:bc:09:a0:27:5b:af:e6:9e:eb:
3d:d4:31:9e:6a:97:bb:10:1b:ff:f7:4f:e9:85:c1:
5c:27:9d:4a:93:64:85:7f:ac:8d:c1:9d:6b:a7:26:
1d:30:f9:ec:a4:21:c9:75:9e:b2:93:6a:bc:78:96:
6a:92:77:17:a2:75:ad:ba:2f:79:dc:7f:c7:f4:05:
90:48:4c:08:1c:cb:ad:67:2b:ba:67:c5:8f:bc:1c:
ff:07:36:95:d0:75:54:b1:f9:3e:c3:77:e3:18:4f:
a7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:8F:DE:0F:E1:04:DA:28:D2:84:DB:C9:7D:75:11:8A:FD:D6:1D
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ff:8f:8f:72:ea:04:fd:ee:85:8d:c0:bc:e6:14:d7:0f:89:
cf:78:91:23:fe:65:70:e6:73:36:de:e9:49:96:38:28:52:e0:
72:06:13:fc:0f:71:59:72:1b:79:93:70:a1:a9:52:ff:0c:f8:
14:6c:e3:e6:65:08:31:2b:ca:8b:92:c3:b8:aa:54:78:fe:53:
92:17:fc:ef:4f:cd:dd:62:ad:be:1d:65:21:a6:11:04:67:d1:
b0:5f:6b:69:22:b1:b9:51:8d:d5:a4:23:78:1c:4e:c3:3f:70:
3d:3f:50:5e:f9:e1:d1:24:4a:49:d7:75:5c:fc:40:92:ea:74:
cc:35:34:f7:d4:35:f0:43:28:6e:f5:47:d7:60:b6:dd:7d:15:
35:e1:68:73:43:bb:51:bb:7b:4b:32:dd:0d:32:b2:88:3e:4f:
ec:3e:2b:3d:c5:dc:83:1c:68:94:78:4b:4b:67:cb:7b:b2:61:
ef:89:2f:04:19:1b:4c:db:e5:1c:dd:00:9b:fc:bd:37:49:8f:
2d:ee:ae:85:ee:18:b0:1b:1c:76:1c:7f:59:f5:68:0a:15:35:
0d:e7:18:ad:86:dc:c0:e5:81:23:ba:6f:36:7b:72:97:e7:b3:
77:43:e2:a3:b5:2b:54:fa:0d:99:7e:33:9b:22:7f:27:8e:e9:
d2:c8:c0:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbb98Xsrm3e9kCpzyjdhDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZGM0MGMzZGJkZjgxOWQ3NDEzZTc3MmJkODc1ODE0Yzdl
YWY1NWUwHhcNMjYxMTE0MTkwMTQ0WhcNMjYxMTE1MTkwMTQ0WjAzMTEwLwYDVQQD
EyhmOGQ2OGZkZTBmZTEwNGRhMjhkMjg0ZGJjOTdkNzUxMThhZmRkNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuPJLS0QNX0lH3X3BaRPcED7ljF2
CL3Fn0B5djrjMIqDARUcYXk0TCnLOe4xNBMf8lkOqJkLFENkIG66pxRHfouKKHRP
D3BmX3+ijYxCHEaxmhCs9uWfaL4ZRIX3lvwxl5oyexrSg1IZ07n+sA2d8/wIMQCv
7ifEo6pGjvpZ44oXoK8wgFiv4eHIv9Fj6ih6XD2TIZv4/vIP34O8CaAnW6/mnus9
1DGeape7EBv/90/phcFcJ51Kk2SFf6yNwZ1rpyYdMPnspCHJdZ6yk2q8eJZqkncX
onWtui953H/H9AWQSEwIHMutZyu6Z8WPvBz/BzaV0HVUsfk+w3fjGE+n0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjWj94P4QTaKNKE28l9dRGK/dYdMB8GA1UdIwQY
MBaAFHzcQMPb34GddBPncr2HWBTH6vVeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk54QXc5dmZnWjEwRS1keXZZZFlGTWZxOVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yZTU0M2QtNGVmNy00ZTg1LTg2N2Et
OTlmMjAwNDY1OWQxLzEvZk54QXc5dmZnWjEwRS1keXZZZFlGTWZxOVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yZTU0M2QtNGVmNy00ZTg1LTg2N2EtOTlmMjAwNDY1OWQx
LzEvZk54QXc5dmZnWjEwRS1keXZZZFlGTWZxOVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApv+Pj3Lq
BP3uhY3AvOYU1w+Jz3iRI/5lcOZzNt7pSZY4KFLgcgYT/A9xWXIbeZNwoalS/wz4
FGzj5mUIMSvKi5LDuKpUeP5Tkhf870/N3WKtvh1lIaYRBGfRsF9raSKxuVGN1aQj
eBxOwz9wPT9QXvnh0SRKSdd1XPxAkup0zDU099Q18EMobvVH12C23X0VNeFoc0O7
Ubt7SzLdDTKyiD5P7D4rPcXcgxxolHhLS2fLe7Jh74kvBBkbTNvlHN0Am/y9N0mP
Le6uhe4YsBscdhx/WfVoChU1DecYrYbcwOWBI7pvNntyl+ezd0Pio7UrVPoNmX4z
myJ/J47p0sjA+g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:48:37 2026 by rpki-client