
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
File: Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft (raw, json)
Hash identifier: IojJ6KVjzcvhDLFv7tBOE4BSdBQEauwJJpqQdatOaTA=
Subject key identifier: 8C:79:5A:70:3C:87:9C:CF:2D:91:0E:D4:CF:73:2A:94:2D:94:32:65
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 01A0D7963F1CCE6222B9EFCB6B9D8555D3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
Manifest number: 077A
Signing time: Fri 25 Sep 2026 08:02:22 +0000
Manifest this update: Fri 25 Sep 2026 08:02:22 +0000
Manifest next update: Sat 26 Sep 2026 08:02:22 +0000
Files and hashes: 1: 9bJWHvsD-dqBntAB20zO9CBt_Wc.roa (hash: 0W6NRPv1Nxc5Zsqyro6dwCeLDZh0yMAr5QQPzv2LCsU=)
2: Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl (hash: V5E15dn73FI0L45nkVBkQRPzJmjl+CRzg8fTwyD8TmY=)
3: yPmy2OvPneIoAhLD9gE1TBP3MwA.asa (hash: A9PQOXlu+etQnQ8jd/8UOZro+MQjl0GkxZpOe3jQx6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:3f:1c:ce:62:22:b9:ef:cb:6b:9d:85:55:d3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Sep 25 08:02:22 2026 GMT
Not After : Sep 26 08:02:22 2026 GMT
Subject: CN=8c795a703c879ccf2d910ed4cf732a942d943265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:21:a6:4d:bf:13:ab:32:63:4a:67:c6:a4:
17:d8:ba:56:25:cd:dd:6a:2d:84:5a:c4:7b:73:d5:
48:0e:5c:a5:89:6c:55:93:35:af:3f:26:9a:25:e3:
f4:52:bb:30:18:61:b5:d0:b8:cb:d0:3f:8b:81:d2:
72:3d:3b:ae:fa:ce:84:6d:fd:f1:3b:ab:ad:25:33:
94:f0:c6:e5:a5:fe:31:86:68:f0:54:ac:3b:25:ed:
fa:c4:f4:59:3f:6b:06:11:b7:12:41:25:46:00:ea:
9c:36:92:0c:7e:f0:5e:b3:1f:97:3f:f6:e0:b5:b6:
39:ac:80:10:2d:cb:f6:81:aa:a3:80:48:2a:8a:f6:
b2:51:18:5a:e7:99:62:38:44:77:8b:a2:90:31:f0:
90:64:19:cf:17:5d:cc:f7:b3:69:54:46:ac:88:9d:
2d:95:06:fe:98:26:79:eb:9e:77:cf:ba:73:08:bc:
02:ed:4b:e1:8a:0e:f9:37:ff:4e:1e:1c:9c:47:22:
7b:9a:d2:93:52:10:be:3c:7d:f7:65:76:04:8f:c1:
89:73:2a:3b:6c:e5:7b:7e:c0:b5:62:84:e0:64:77:
d1:5f:55:51:e5:17:58:b6:25:ed:c5:89:25:49:4b:
c7:d3:f0:76:c6:b4:e9:ae:43:f6:d3:c7:34:1e:e6:
92:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:79:5A:70:3C:87:9C:CF:2D:91:0E:D4:CF:73:2A:94:2D:94:32:65
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:db:e6:69:94:40:31:17:5d:7a:c6:f0:6d:08:99:7c:ef:20:
1f:58:39:52:18:2a:41:3d:24:09:c1:47:81:6d:88:05:81:c7:
76:a3:5d:84:19:3d:ad:c6:e0:1a:ee:e8:ff:82:e6:f4:89:19:
ba:f5:56:12:8d:10:b6:0a:41:2a:13:b7:af:9d:c3:76:0d:56:
cd:61:61:9e:93:8d:34:b7:70:7d:29:b9:0c:11:52:7d:b7:92:
de:d2:3e:3d:b1:63:46:f9:ee:8e:e4:ff:68:17:2b:95:dd:b7:
36:75:21:c0:bb:01:79:f8:8b:3e:79:fd:7f:ac:33:03:fe:30:
d5:9a:85:03:3c:6e:ce:31:cd:a1:a5:91:f6:a2:f7:39:2a:8e:
60:6c:51:f0:ed:1a:cc:ab:3e:b4:7f:11:39:99:7e:54:5b:21:
e8:ef:12:8f:13:a2:67:91:e9:06:f0:0a:50:f1:f0:f7:c5:19:
34:ba:28:39:83:6c:c6:5b:aa:b8:ca:5a:ec:d5:65:8b:31:5e:
41:f5:a0:3f:17:c9:08:7c:6c:f4:e8:2a:ef:6d:b4:be:65:bd:
a7:97:0e:da:8b:4b:64:1b:cc:f4:cd:2f:31:5e:cb:c8:32:98:
75:f0:ad:cb:6c:4e:1c:a1:54:89:a4:d3:a6:5c:d2:db:e0:53:
b8:e5:b7:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXlj8czmIiue/La52FVdP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NWZhZDQxMDkyODNiMzNiNmYzYmE1M2ZhZTgzYTE0NWQx
OTM0ZTIwHhcNMjYwOTI1MDgwMjIyWhcNMjYwOTI2MDgwMjIyWjAzMTEwLwYDVQQD
Eyg4Yzc5NWE3MDNjODc5Y2NmMmQ5MTBlZDRjZjczMmE5NDJkOTQzMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcEhpk2/E6syY0pnxqQX2LpWJc3d
ai2EWsR7c9VIDlyliWxVkzWvPyaaJeP0UrswGGG10LjL0D+LgdJyPTuu+s6Ebf3x
O6utJTOU8Mblpf4xhmjwVKw7Je36xPRZP2sGEbcSQSVGAOqcNpIMfvBesx+XP/bg
tbY5rIAQLcv2gaqjgEgqivayURha55liOER3i6KQMfCQZBnPF13M97NpVEasiJ0t
lQb+mCZ56553z7pzCLwC7Uvhig75N/9OHhycRyJ7mtKTUhC+PH33ZXYEj8GJcyo7
bOV7fsC1YoTgZHfRX1VR5RdYtiXtxYklSUvH0/B2xrTprkP208c0HuaS7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx5WnA8h5zPLZEO1M9zKpQtlDJlMB8GA1UdIwQY
MBaAFBZfrUEJKDsztvO6U/roOhRdGTTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmwtdFFRa29Pek8yODdwVC11ZzZGRjBaTk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjcyYzAtNWRlOS00NmE0LWFiZDQt
MzFiNjAzMTFjMzE1LzEvRmwtdFFRa29Pek8yODdwVC11ZzZGRjBaTk9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zYjcyYzAtNWRlOS00NmE0LWFiZDQtMzFiNjAzMTFjMzE1
LzEvRmwtdFFRa29Pek8yODdwVC11ZzZGRjBaTk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdvmaZRA
MRddesbwbQiZfO8gH1g5UhgqQT0kCcFHgW2IBYHHdqNdhBk9rcbgGu7o/4Lm9IkZ
uvVWEo0QtgpBKhO3r53Ddg1WzWFhnpONNLdwfSm5DBFSfbeS3tI+PbFjRvnujuT/
aBcrld23NnUhwLsBefiLPnn9f6wzA/4w1ZqFAzxuzjHNoaWR9qL3OSqOYGxR8O0a
zKs+tH8ROZl+VFsh6O8SjxOiZ5HpBvAKUPHw98UZNLooOYNsxluquMpa7NVlizFe
QfWgPxfJCHxs9Ogq7220vmW9p5cO2otLZBvM9M0vMV7LyDKYdfCty2xOHKFUiaTT
plzS2+BTuOW36g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:51:58 2026 by rpki-client