Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File: fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier: U4tt2Lkv2X9LqoFSYW02VP4Wg8+zIpxcPJQu+zwcx7U=
Subject key identifier: 7F:DE:2B:CD:4B:21:AF:DD:B9:C7:CA:F7:38:CB:C1:E5:A9:A8:BF:8A
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 01A0D0800F6F63FD3F40E867F4DC5C89CB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number: 0A16
Signing time: Wed 23 Sep 2026 23:00:48 +0000
Manifest this update: Wed 23 Sep 2026 23:00:48 +0000
Manifest next update: Thu 24 Sep 2026 23:00:48 +0000
Files and hashes: 1: 0yr8aXhOgym_087pCWjaXD2xwbo.roa (hash: ibUboXeSVZSey6KFBr4VW/S44K1bXt0+EVOA97v+hoA=)
2: IbaW7xjndY6EP4RVlLBG-ZEnYYo.roa (hash: ysgDo6QmZenYrn+i6Pxn3RI9PAFzW45gWtKEwSVQWB4=)
3: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: An3by2Xirr5Uk9QVXV9fayAjet5ynF+nlUFx+CQMflA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:0f:6f:63:fd:3f:40:e8:67:f4:dc:5c:89:cb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: Sep 23 23:00:48 2026 GMT
Not After : Sep 24 23:00:48 2026 GMT
Subject: CN=7fde2bcd4b21afddb9c7caf738cbc1e5a9a8bf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6b:60:77:44:ce:1a:05:14:f4:7f:c8:8d:e9:
43:5c:29:18:42:d5:bc:d8:3b:35:75:fd:44:0e:59:
6e:ea:52:81:07:8a:da:b8:e9:f3:3d:06:7f:bb:ac:
90:fd:b7:7f:42:f3:50:75:5a:95:a7:1d:5c:ff:e6:
41:cc:3f:32:ce:95:5b:0e:76:7f:0c:95:3e:f3:27:
58:a8:5a:d2:c6:8d:2f:3c:d4:15:1c:8d:4c:df:0f:
68:de:67:39:28:44:00:12:84:1a:5e:dd:60:22:f8:
a8:b7:17:3d:d3:c7:a2:46:36:ba:f7:02:52:0a:2b:
5b:75:19:8a:b6:58:25:d0:1d:2b:34:fa:70:b6:27:
4b:f4:4e:00:2b:47:c4:f7:60:20:7d:11:46:b5:fc:
72:1c:b5:5a:54:eb:a7:6b:ef:eb:01:b6:e5:05:ee:
91:68:61:59:02:b8:15:4a:1f:bc:26:e6:07:a1:60:
9c:68:7c:04:ff:53:dd:32:5a:b3:8f:44:6c:3f:f6:
03:21:8a:a5:4a:1b:4d:21:cf:4a:ed:ff:3e:84:0d:
16:83:cd:08:2f:24:64:81:6d:59:1c:22:b0:02:5a:
aa:97:c8:03:ed:7c:af:63:bb:05:80:98:de:c2:dc:
87:7b:8a:d3:b7:ad:33:23:26:53:7d:3f:b5:06:e8:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DE:2B:CD:4B:21:AF:DD:B9:C7:CA:F7:38:CB:C1:E5:A9:A8:BF:8A
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:22:8d:cd:bb:ce:b3:3c:f9:18:c5:80:82:b7:97:54:53:e1:
bb:29:8a:d6:c7:67:51:22:68:12:4a:19:0b:d0:98:b6:40:c2:
ce:8f:07:7a:6d:91:49:67:9c:a5:8f:4c:01:d3:d3:82:1c:46:
a8:6d:82:8e:fa:84:8e:e2:ff:03:07:27:d8:c8:b5:28:fd:27:
cd:67:66:41:3e:13:13:c5:79:fb:cb:7f:0e:79:26:f2:8f:bc:
f6:4b:6e:af:e0:ff:75:ad:c9:ca:05:43:f3:cd:c2:3f:9c:4f:
41:b8:31:39:13:77:e2:d5:19:bd:99:de:e1:11:85:85:f6:2f:
c7:58:bc:f8:df:d2:70:95:37:73:7c:9b:c7:ba:27:04:04:ff:
0a:9d:2e:43:0a:20:d4:a5:95:2e:2b:7b:1c:66:27:ae:4e:e1:
a6:77:75:7a:dd:30:d2:4e:4f:de:44:f5:6e:4f:8d:4f:1c:9b:
ad:08:fe:41:51:99:12:f6:83:63:74:b7:0d:b9:b1:c0:fe:10:
f4:8a:d4:4f:b1:78:ed:a4:a1:ed:f0:66:01:71:7b:48:72:4e:
be:58:d4:9d:4c:9b:04:e8:5e:e8:eb:17:5f:84:f6:0f:d4:af:
a3:ab:88:79:4e:cf:2a:72:af:1b:62:b3:ed:28:81:01:cc:85:
f9:75:33:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQgA9vY/0/QOhn9NxcicuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTU5ODMyMmE2OTkwNWE1YzZlMDI5NWEwY2ExZmI1NTY2
NmMxNGIwHhcNMjYwOTIzMjMwMDQ4WhcNMjYwOTI0MjMwMDQ4WjAzMTEwLwYDVQQD
Eyg3ZmRlMmJjZDRiMjFhZmRkYjljN2NhZjczOGNiYzFlNWE5YThiZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Wtgd0TOGgUU9H/IjelDXCkYQtW8
2Ds1df1EDllu6lKBB4rauOnzPQZ/u6yQ/bd/QvNQdVqVpx1c/+ZBzD8yzpVbDnZ/
DJU+8ydYqFrSxo0vPNQVHI1M3w9o3mc5KEQAEoQaXt1gIviotxc908eiRja69wJS
CitbdRmKtlgl0B0rNPpwtidL9E4AK0fE92AgfRFGtfxyHLVaVOuna+/rAbblBe6R
aGFZArgVSh+8JuYHoWCcaHwE/1PdMlqzj0RsP/YDIYqlShtNIc9K7f8+hA0Wg80I
LyRkgW1ZHCKwAlqql8gD7XyvY7sFgJjewtyHe4rTt60zIyZTfT+1Buh5SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/eK81LIa/ducfK9zjLweWpqL+KMB8GA1UdIwQY
MBaAFHylmDIqaZBaXG4ClaDKH7VWZsFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktXWU1pcHBrRnBjYmdLVm9Nb2Z0Vlptd1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kYTY2YzAtYjlmOC00MDk0LWE5MzUt
NTgwZDg3Njg4NWExLzEvZktXWU1pcHBrRnBjYmdLVm9Nb2Z0Vlptd1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kYTY2YzAtYjlmOC00MDk0LWE5MzUtNTgwZDg3Njg4NWEx
LzEvZktXWU1pcHBrRnBjYmdLVm9Nb2Z0Vlptd1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiKNzbvO
szz5GMWAgreXVFPhuymK1sdnUSJoEkoZC9CYtkDCzo8Hem2RSWecpY9MAdPTghxG
qG2CjvqEjuL/Awcn2Mi1KP0nzWdmQT4TE8V5+8t/Dnkm8o+89ktur+D/da3JygVD
883CP5xPQbgxORN34tUZvZne4RGFhfYvx1i8+N/ScJU3c3ybx7onBAT/Cp0uQwog
1KWVLit7HGYnrk7hpnd1et0w0k5P3kT1bk+NTxybrQj+QVGZEvaDY3S3DbmxwP4Q
9IrUT7F47aSh7fBmAXF7SHJOvljUnUybBOhe6OsXX4T2D9Svo6uIeU7PKnKvG2Kz
7SiBAcyF+XUz7w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:10:26 2026 by rpki-client