Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier: qv6710RbfGFm7izDgD2ebKZE2E4Jgjl7S5faMA29zog=
Subject key identifier: 03:99:A7:A6:CE:13:B6:1D:63:18:75:3E:2F:06:3B:99:65:B5:75:5F
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial: 01A0D50234A8BD0A1DACAD84E1375D74847A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number: 1A00
Signing time: Thu 24 Sep 2026 20:01:26 +0000
Manifest this update: Thu 24 Sep 2026 20:01:26 +0000
Manifest next update: Fri 25 Sep 2026 20:01:26 +0000
Files and hashes: 1: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: clb2kZ4WrmJLSfhX9PsEt21YArWoPW8mC2nNCytlBKI=)
2: uuyf9SL1IzQsxC4GwsHv2Aqvi6I.roa (hash: bWBF8Lzkc1fXhVOcL+v1lM3xBjFclLxIjyc/HWhj0fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:34:a8:bd:0a:1d:ac:ad:84:e1:37:5d:74:84:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Validity
Not Before: Sep 24 20:01:26 2026 GMT
Not After : Sep 25 20:01:26 2026 GMT
Subject: CN=0399a7a6ce13b61d6318753e2f063b9965b5755f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f1:06:c5:66:8f:24:4e:a3:7c:54:81:f7:ca:
bd:ca:84:2b:ea:91:41:7f:55:6a:f0:78:81:43:2d:
8c:8d:3e:40:85:ac:a6:79:82:ff:70:00:f6:2f:97:
23:1c:d3:90:5f:7f:08:f1:eb:2c:56:fe:ca:5f:2b:
63:a4:14:8e:8d:3a:50:39:fb:9d:f8:34:75:3b:ec:
c2:c5:01:72:95:43:ba:f9:44:c5:21:76:6a:f8:2a:
43:ff:d7:34:c0:47:47:84:ae:94:11:56:cb:77:84:
92:72:71:38:03:b0:b8:68:77:bf:6a:4c:a9:47:97:
25:cc:cf:f9:ea:bb:03:c4:0d:08:31:1c:2b:e6:be:
cd:b4:01:9b:db:ff:bb:43:d4:d7:da:c4:ae:0f:46:
41:81:0d:e9:7e:76:86:2f:6a:e7:10:b7:ee:30:9b:
d1:03:b8:28:11:26:7e:a0:4a:3e:68:04:6a:bf:06:
04:8b:97:2e:fa:c2:0a:e2:07:94:15:c9:60:60:68:
e1:e2:e5:51:a6:6c:cd:23:47:36:4c:01:d6:11:bc:
9d:d9:dc:9e:6d:e8:7b:73:ed:1a:3f:19:6c:a1:cb:
ce:a8:bd:70:99:53:7c:75:23:11:d9:6b:42:2b:1d:
33:56:e2:41:89:60:19:b2:ce:34:f3:3a:c5:c7:c9:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:99:A7:A6:CE:13:B6:1D:63:18:75:3E:2F:06:3B:99:65:B5:75:5F
X509v3 Authority Key Identifier:
keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:79:ab:41:de:9c:0b:cd:cb:7d:6d:7a:16:05:c2:d0:00:77:
85:95:15:a7:31:4c:d2:c5:41:07:f3:e6:f9:60:6c:42:8d:6c:
49:81:a3:63:00:32:36:08:1f:c9:12:b4:8f:3b:a6:e6:82:91:
7c:65:2f:97:ac:a5:85:fd:73:cc:cb:ef:1b:28:7b:57:b2:81:
68:6e:f8:fd:30:c4:37:67:38:a0:54:fb:22:c7:e9:d4:7d:6a:
3e:a7:a1:3b:94:ac:c0:eb:fd:50:34:c6:70:43:6f:b2:fd:79:
04:57:c6:35:14:b7:b6:0e:cf:fb:70:1b:c6:5f:3e:55:b5:93:
71:89:9f:f4:2e:de:32:18:97:db:c8:98:41:c5:72:8a:45:5e:
8a:89:83:58:fe:ec:36:f0:3e:bb:0e:09:23:d3:0d:9f:a1:16:
94:79:f8:0c:c3:9b:91:7b:45:18:f1:58:c1:7a:f5:a1:27:f3:
ca:54:96:a0:8d:18:6a:bb:6e:f3:1c:20:1b:db:86:48:73:cb:
72:d0:aa:49:ee:c4:8a:5b:f2:b3:45:31:7e:5a:37:5f:76:4a:
96:48:e5:63:49:8c:d8:23:20:7c:bb:05:1d:69:2f:2d:9c:32:
66:51:d6:f5:ee:09:2e:ea:84:9e:fd:bc:6b:8c:62:0b:68:a4:
d8:07:1b:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAjSovQodrK2E4TdddIR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDFhNWQ5MGRjM2E4MzZjZWI2MzgxZWZjNzUzNGUxMjlm
NDNhNGMwHhcNMjYwOTI0MjAwMTI2WhcNMjYwOTI1MjAwMTI2WjAzMTEwLwYDVQQD
EygwMzk5YTdhNmNlMTNiNjFkNjMxODc1M2UyZjA2M2I5OTY1YjU3NTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfEGxWaPJE6jfFSB98q9yoQr6pFB
f1Vq8HiBQy2MjT5AhaymeYL/cAD2L5cjHNOQX38I8essVv7KXytjpBSOjTpQOfud
+DR1O+zCxQFylUO6+UTFIXZq+CpD/9c0wEdHhK6UEVbLd4SScnE4A7C4aHe/akyp
R5clzM/56rsDxA0IMRwr5r7NtAGb2/+7Q9TX2sSuD0ZBgQ3pfnaGL2rnELfuMJvR
A7goESZ+oEo+aARqvwYEi5cu+sIK4geUFclgYGjh4uVRpmzNI0c2TAHWEbyd2dye
beh7c+0aPxlsocvOqL1wmVN8dSMR2WtCKx0zVuJBiWAZss408zrFx8l7UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOZp6bOE7YdYxh1Pi8GO5lltXVfMB8GA1UdIwQY
MBaAFH0BpdkNw6g2zrY4Hvx1NOEp9DpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWIwMDctYTA4Ni00MzEyLTlkMjMt
NjJmNjY2NDczYjIxLzEvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yMWIwMDctYTA4Ni00MzEyLTlkMjMtNjJmNjY2NDczYjIx
LzEvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnmrQd6c
C83LfW16FgXC0AB3hZUVpzFM0sVBB/Pm+WBsQo1sSYGjYwAyNggfyRK0jzum5oKR
fGUvl6ylhf1zzMvvGyh7V7KBaG74/TDEN2c4oFT7Isfp1H1qPqehO5SswOv9UDTG
cENvsv15BFfGNRS3tg7P+3Abxl8+VbWTcYmf9C7eMhiX28iYQcVyikVeiomDWP7s
NvA+uw4JI9MNn6EWlHn4DMObkXtFGPFYwXr1oSfzylSWoI0Yartu8xwgG9uGSHPL
ctCqSe7Eilvys0Uxflo3X3ZKlkjlY0mM2CMgfLsFHWkvLZwyZlHW9e4JLuqEnv28
a4xiC2ik2AcbDw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:30:45 2026 by rpki-client