Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
File: _ZRaQP7pGQtdrjV1RenSN91_Kr0.mft (raw, json)
Hash identifier: qGlFDfypsA+It/ZTPOa4Yah89lm5RTC/7C515Yn8RRM=
Subject key identifier: 95:12:05:FD:67:A7:FE:54:63:B8:06:B2:D7:FF:29:15:29:C1:66:FF
Authority key identifier: FD:94:5A:40:FE:E9:19:0B:5D:AE:35:75:45:E9:D2:37:DD:7F:2A:BD
Certificate issuer: /CN=fd945a40fee9190b5dae357545e9d237dd7f2abd
Certificate serial: 01A0F8AA882CD9CF3C267998D7A094D154C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
Manifest number: FA
Signing time: Thu 01 Oct 2026 18:12:00 +0000
Manifest this update: Thu 01 Oct 2026 18:12:00 +0000
Manifest next update: Fri 02 Oct 2026 18:12:00 +0000
Files and hashes: 1: FneKNxnzANLquvs5RDh285FbFjo.roa (hash: wM7MaFPVmqdgH2laeuL0dQ1Y/ck3S2iV1sW46582MtM=)
2: _ZRaQP7pGQtdrjV1RenSN91_Kr0.crl (hash: lsXzjBamIYUav6RSRSCXgAxxs7JY7MkuIwnmZbkwxGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:aa:88:2c:d9:cf:3c:26:79:98:d7:a0:94:d1:54:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd945a40fee9190b5dae357545e9d237dd7f2abd
Validity
Not Before: Oct 1 18:12:00 2026 GMT
Not After : Oct 2 18:12:00 2026 GMT
Subject: CN=951205fd67a7fe5463b806b2d7ff291529c166ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:c1:5b:b5:f7:97:61:ce:7e:4b:5f:d4:0e:
c1:4a:b6:f4:11:5e:ae:28:ae:bc:26:4b:47:a3:0a:
f5:53:33:3f:31:73:83:2e:da:b5:53:1b:ac:31:2f:
a0:90:c3:4a:1e:59:72:2f:36:08:ef:0a:18:d7:4a:
c2:8a:03:81:f0:8a:2e:5f:7e:78:ec:9a:79:ec:06:
bc:82:ca:26:15:70:d4:f4:01:4b:63:36:96:ee:03:
8a:b0:57:89:83:33:82:80:60:26:c1:1c:8a:4b:68:
5a:d7:4f:80:a3:76:9e:71:eb:e9:78:6e:19:12:f4:
b4:c8:1b:45:68:6e:fb:d6:bf:a8:4f:16:22:d3:70:
9c:46:77:2d:02:38:df:45:62:09:ad:10:aa:29:e3:
6b:fa:e9:18:20:f7:e4:ea:1e:af:f9:70:42:c8:e4:
22:bd:1a:a4:1c:3f:26:35:2d:06:65:9a:4a:04:a8:
a5:4f:1c:73:15:13:84:d5:f7:d3:c0:95:fb:23:d0:
14:67:ae:ab:ef:8b:97:99:45:24:91:0f:ad:85:88:
db:10:01:26:82:46:57:ad:71:1d:c9:c1:c2:78:07:
7f:11:56:02:ff:b4:0a:c3:59:0b:eb:e6:c5:f6:38:
b1:71:22:89:f3:c5:77:43:e3:ac:0d:c1:97:e6:2a:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:12:05:FD:67:A7:FE:54:63:B8:06:B2:D7:FF:29:15:29:C1:66:FF
X509v3 Authority Key Identifier:
keyid:FD:94:5A:40:FE:E9:19:0B:5D:AE:35:75:45:E9:D2:37:DD:7F:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZRaQP7pGQtdrjV1RenSN91_Kr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/_ZRaQP7pGQtdrjV1RenSN91_Kr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8b:53:6e:fe:4b:7c:48:30:32:ea:d8:36:b4:df:e2:83:13:
e5:c6:81:8f:f5:ea:3a:1c:6a:96:70:d0:4b:7d:7c:03:7d:24:
d2:0d:5f:0d:49:1b:7c:84:e1:4e:b7:7d:17:60:39:d9:c8:79:
6b:40:a3:93:d1:5e:66:fa:5e:c6:44:fc:d1:eb:7b:3c:2f:96:
a9:d2:57:ef:4a:b2:8a:40:bf:f7:50:30:c1:c8:f7:12:ab:77:
fd:1d:d5:45:58:21:3d:07:4c:5d:2f:c0:0a:ca:26:4e:80:3c:
a0:c7:be:f4:5e:1b:b0:0d:9c:02:d8:7e:19:0c:cc:e0:2a:6f:
c2:fb:f3:24:4a:c5:50:05:f0:1c:74:86:b8:8e:dd:13:e5:fb:
24:e7:da:9f:04:6c:67:0c:4c:dd:29:e8:df:0b:c9:77:5f:09:
88:a1:1f:05:3b:0a:3f:a7:de:e9:c9:47:4e:0c:6c:8a:42:4e:
1f:23:38:51:3c:1a:6b:27:49:53:2d:61:d0:d0:9e:fd:39:38:
2b:2f:79:3f:96:ea:8e:73:e3:b4:eb:ea:45:d1:e5:50:b3:f8:
c9:1e:89:8e:e4:61:50:58:d6:66:38:79:3f:ca:95:4c:3a:47:
12:87:16:49:21:0a:30:ca:17:3f:75:df:c4:37:8c:11:ee:89:
a7:9b:07:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD4qogs2c88JnmY16CU0VTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOTQ1YTQwZmVlOTE5MGI1ZGFlMzU3NTQ1ZTlkMjM3ZGQ3
ZjJhYmQwHhcNMjYxMDAxMTgxMjAwWhcNMjYxMDAyMTgxMjAwWjAzMTEwLwYDVQQD
Eyg5NTEyMDVmZDY3YTdmZTU0NjNiODA2YjJkN2ZmMjkxNTI5YzE2NmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34PBW7X3l2HOfktf1A7BSrb0EV6u
KK68JktHowr1UzM/MXODLtq1UxusMS+gkMNKHllyLzYI7woY10rCigOB8IouX354
7Jp57Aa8gsomFXDU9AFLYzaW7gOKsFeJgzOCgGAmwRyKS2ha10+Ao3aecevpeG4Z
EvS0yBtFaG771r+oTxYi03CcRnctAjjfRWIJrRCqKeNr+ukYIPfk6h6v+XBCyOQi
vRqkHD8mNS0GZZpKBKilTxxzFROE1ffTwJX7I9AUZ66r74uXmUUkkQ+thYjbEAEm
gkZXrXEdycHCeAd/EVYC/7QKw1kL6+bF9jixcSKJ88V3Q+OsDcGX5iqqPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUSBf1np/5UY7gGstf/KRUpwWb/MB8GA1UdIwQY
MBaAFP2UWkD+6RkLXa41dUXp0jfdfyq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1pSYVFQN3BHUXRkcmpWMVJlblNOOTFfS3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmIt
ZmRjMjU4Mzc3MzAxLzEvX1pSYVFQN3BHUXRkcmpWMVJlblNOOTFfS3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85OTUyYjYtMzM2Zi00NjY4LWJhZmItZmRjMjU4Mzc3MzAx
LzEvX1pSYVFQN3BHUXRkcmpWMVJlblNOOTFfS3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYtTbv5L
fEgwMurYNrTf4oMT5caBj/XqOhxqlnDQS318A30k0g1fDUkbfIThTrd9F2A52ch5
a0Cjk9FeZvpexkT80et7PC+WqdJX70qyikC/91Awwcj3Eqt3/R3VRVghPQdMXS/A
CsomToA8oMe+9F4bsA2cAth+GQzM4CpvwvvzJErFUAXwHHSGuI7dE+X7JOfanwRs
ZwxM3Sno3wvJd18JiKEfBTsKP6fe6clHTgxsikJOHyM4UTwaaydJUy1h0NCe/Tk4
Ky95P5bqjnPjtOvqRdHlULP4yR6JjuRhUFjWZjh5P8qVTDpHEocWSSEKMMoXP3Xf
xDeMEe6Jp5sHAA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 10:43:28 2026 by rpki-client