Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: enJy7MhO2dB5NYnVKvsE0q4INReO+bA9cFScZzt22sQ=
Subject key identifier: E4:68:1E:8D:4F:3C:12:87:51:D4:2A:8F:F8:50:36:AD:6D:4B:5C:03
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 01A0CCA347AA9A8B7E734D53FF63CFF4D669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 066B
Signing time: Wed 23 Sep 2026 05:00:47 +0000
Manifest this update: Wed 23 Sep 2026 05:00:47 +0000
Manifest next update: Thu 24 Sep 2026 05:00:47 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: ZfS+FVW8xcpS+JMKlo42sCATg3q9d0FgdmlP+xBxNUM=)
2: J1pVACF6PeMRaHASpAzEk72R1og.roa (hash: w+tfbD6b+VC1EgseTOng/yA5kapR5uE7759IAX7+VLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:47:aa:9a:8b:7e:73:4d:53:ff:63:cf:f4:d6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Sep 23 05:00:47 2026 GMT
Not After : Sep 24 05:00:47 2026 GMT
Subject: CN=e4681e8d4f3c128751d42a8ff85036ad6d4b5c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:93:6a:36:8a:c2:74:33:d8:de:60:19:27:
a0:fa:21:63:78:96:26:4b:3e:bf:b0:0e:2d:6b:ed:
c8:f1:91:f7:a6:2b:90:df:58:6a:bc:4f:a9:df:64:
b1:5f:b6:04:23:a9:f8:68:35:63:71:11:b4:79:a9:
58:42:7f:e7:01:27:1e:da:e1:3b:6c:79:85:dc:b8:
60:46:23:39:00:bf:af:d1:50:e9:96:92:24:61:5d:
b6:6d:fd:37:a1:28:03:75:8b:01:a3:98:9b:88:41:
0e:59:b1:f5:a0:02:93:0b:b5:af:54:3c:a6:03:1d:
70:4c:7d:d0:87:d6:31:b9:0f:59:59:a8:9c:05:be:
03:ee:a5:61:dc:69:f0:d8:ac:e0:40:4c:0a:34:6f:
c2:26:c7:1c:1c:81:78:70:82:80:a2:c2:5a:56:05:
5e:2a:df:0d:94:cc:0c:7c:c5:a2:c1:0e:b5:96:ba:
b1:4c:b9:6e:e3:a6:94:b5:9c:6f:c0:d6:d6:3e:93:
fd:1a:84:05:eb:33:26:c6:58:84:82:fb:9f:6d:29:
8f:b6:e9:73:15:3f:0c:0f:5b:fc:6d:d5:80:80:fb:
be:aa:32:dd:63:40:f4:c1:49:73:cb:cd:40:0b:97:
f4:88:b9:fd:a0:a6:92:16:f4:65:28:cc:9f:e2:c5:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:68:1E:8D:4F:3C:12:87:51:D4:2A:8F:F8:50:36:AD:6D:4B:5C:03
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:40:0b:a0:27:2b:8b:5b:7a:83:28:d5:22:bd:74:3b:c9:26:
6e:a7:29:3e:6b:e3:a0:0d:98:ea:85:4a:b7:8a:c0:4b:75:9a:
74:7a:e8:16:28:b8:ec:88:6f:ad:c7:ee:63:45:b7:73:8a:e7:
da:f3:bb:be:6c:0c:3e:da:66:87:bb:6b:d8:54:a8:9c:79:19:
84:cb:2d:87:54:8a:1e:54:a2:9a:76:ad:6e:ad:03:b1:a1:f3:
ba:b4:4b:b9:ae:0c:f4:c0:0e:7d:27:e3:70:ba:f0:19:32:78:
07:cc:a4:41:b6:a4:d5:ac:0f:a4:01:2e:e3:db:a1:1e:b2:32:
0e:4f:d1:96:ae:be:d0:4f:bd:58:fa:98:0b:63:24:be:66:48:
d1:c5:2b:d0:52:43:5b:81:83:7b:ae:55:41:55:5a:15:29:76:
56:83:f3:66:00:60:b4:12:c3:f8:2c:7e:cc:c2:9e:81:9a:c2:
6d:bd:89:13:6f:cc:23:e3:ef:3d:e1:2a:ef:d1:7a:5e:53:ee:
3e:f8:4b:65:5b:79:7e:d1:52:cc:e8:31:00:a5:c2:66:ec:28:
9d:09:15:40:50:98:94:30:07:5a:84:ca:d7:31:df:e0:77:ec:
cc:7d:6c:75:6a:a1:f6:05:a9:98:9a:1d:6f:b8:bc:31:5e:89:
0a:ad:2c:a5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDMo0eqmot+c01T/2PP9NZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NTI1ZTQxMmM2YWUyYjE2Y2FjMzllY2YyODhjMmUyZTZh
NzVkZTIwHhcNMjYwOTIzMDUwMDQ3WhcNMjYwOTI0MDUwMDQ3WjAzMTEwLwYDVQQD
EyhlNDY4MWU4ZDRmM2MxMjg3NTFkNDJhOGZmODUwMzZhZDZkNGI1YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqISTajaKwnQz2N5gGSeg+iFjeJYm
Sz6/sA4ta+3I8ZH3piuQ31hqvE+p32SxX7YEI6n4aDVjcRG0ealYQn/nASce2uE7
bHmF3LhgRiM5AL+v0VDplpIkYV22bf03oSgDdYsBo5ibiEEOWbH1oAKTC7WvVDym
Ax1wTH3Qh9YxuQ9ZWaicBb4D7qVh3Gnw2KzgQEwKNG/CJsccHIF4cIKAosJaVgVe
Kt8NlMwMfMWiwQ61lrqxTLlu46aUtZxvwNbWPpP9GoQF6zMmxliEgvufbSmPtulz
FT8MD1v8bdWAgPu+qjLdY0D0wUlzy81AC5f0iLn9oKaSFvRlKMyf4sVPfQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFORoHo1PPBKHUdQqj/hQNq1tS1wDMB8GA1UdIwQY
MBaAFPhSXkEsauKxbKw57PKIwuLmp13iMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GSmVRU3hxNHJGc3JEbnM4b2pDNHVhblhlSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvYTNmZDhiLTY4NmItNGU2Yy04Yjdi
LTQzMTBjMzliMWY0NC8xLzEtRkplUVN4cTRyRnNyRG5zOG9qQzR1YW5YZUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2EzL2EzZmQ4Yi02ODZiLTRlNmMtOGI3Yi00MzEwYzM5YjFm
NDQvMS8xLUZKZVFTeHE0ckZzckRuczhvakM0dWFuWGVJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUAL
oCcri1t6gyjVIr10O8kmbqcpPmvjoA2Y6oVKt4rAS3WadHroFii47IhvrcfuY0W3
c4rn2vO7vmwMPtpmh7tr2FSonHkZhMsth1SKHlSimnatbq0DsaHzurRLua4M9MAO
fSfjcLrwGTJ4B8ykQbak1awPpAEu49uhHrIyDk/Rlq6+0E+9WPqYC2MkvmZI0cUr
0FJDW4GDe65VQVVaFSl2VoPzZgBgtBLD+Cx+zMKegZrCbb2JE2/MI+PvPeEq79F6
XlPuPvhLZVt5ftFSzOgxAKXCZuwonQkVQFCYlDAHWoTK1zHf4HfszH1sdWqh9gWp
mJodb7i8MV6JCq0spQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:02:35 2026 by rpki-client