Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
File: fdq9ZIcR0M5WmJiW77c6DmXpczk.mft (raw, json)
Hash identifier: JkLGfinQWzZFAoM0VIZwgrjV4HUuBCbvqJO8yidKQDU=
Subject key identifier: 4E:6D:30:19:72:F7:3B:DD:83:25:D0:47:94:67:57:2D:5E:B5:57:A1
Authority key identifier: 7D:DA:BD:64:87:11:D0:CE:56:98:98:96:EF:B7:3A:0E:65:E9:73:39
Certificate issuer: /CN=7ddabd648711d0ce56989896efb73a0e65e97339
Certificate serial: 01A10436FE9DA85B0EFE48943CAB23D588A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
Manifest number: FA
Signing time: Sun 04 Oct 2026 00:01:15 +0000
Manifest this update: Sun 04 Oct 2026 00:01:15 +0000
Manifest next update: Mon 05 Oct 2026 00:01:15 +0000
Files and hashes: 1: K60hVPLSPVtUpielhkzPMTSO0aM.roa (hash: G37NAr4nS+/pnxGye8gLOv9acyLCoKW6Bim3ph2z7sw=)
2: fdq9ZIcR0M5WmJiW77c6DmXpczk.crl (hash: q4VElK51Y/23Pp+xBT6x7k2IXd4/ohiwlfU9OTv+uNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:36:fe:9d:a8:5b:0e:fe:48:94:3c:ab:23:d5:88:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddabd648711d0ce56989896efb73a0e65e97339
Validity
Not Before: Oct 4 00:01:15 2026 GMT
Not After : Oct 5 00:01:15 2026 GMT
Subject: CN=4e6d301972f73bdd8325d0479467572d5eb557a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:89:b4:50:b7:15:06:17:d8:09:ed:b7:71:
fa:f8:1f:96:53:07:10:5b:30:be:cd:46:b1:77:51:
5a:12:a0:8e:8c:53:3a:ab:7b:77:ef:03:01:3c:24:
b0:2b:42:7f:99:e5:64:2e:5f:64:e6:57:73:c2:71:
89:41:e1:48:6b:de:ee:6d:e6:d9:23:a9:d5:e5:f5:
2b:b3:eb:0c:6e:06:b4:e2:50:5a:a2:bc:0f:01:00:
63:4e:98:7c:8c:e6:13:67:c6:51:4c:d9:d7:ba:ae:
33:13:4d:ae:94:74:93:84:80:e0:cb:13:e1:c1:44:
83:60:4e:e5:51:de:a4:d3:27:d4:a9:8d:14:ae:60:
15:8c:c3:37:74:10:3c:7e:f1:21:e3:92:1d:af:8b:
74:38:e8:46:d0:66:48:eb:33:ac:ca:33:a1:43:ca:
86:d8:eb:c2:bd:91:2e:e3:ed:a7:87:5d:64:92:d9:
2f:21:5c:1b:cf:7a:13:69:00:2a:e6:57:36:ba:dd:
a6:e6:39:ba:d3:3f:ec:71:9c:26:7a:02:e8:59:84:
44:b1:4f:9c:c7:9c:b6:c4:a1:76:cf:ed:1c:75:9c:
0a:54:f2:d2:ed:6b:dc:75:f6:6d:51:cd:f5:f4:f9:
3d:31:04:55:0a:5a:b3:54:e6:d9:8f:69:24:7a:58:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6D:30:19:72:F7:3B:DD:83:25:D0:47:94:67:57:2D:5E:B5:57:A1
X509v3 Authority Key Identifier:
keyid:7D:DA:BD:64:87:11:D0:CE:56:98:98:96:EF:B7:3A:0E:65:E9:73:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:56:93:5a:e1:55:64:ce:fd:c0:68:d9:0b:cb:63:74:c0:ac:
59:71:76:f6:c3:af:64:44:fe:2d:70:63:89:65:da:b4:42:30:
aa:7c:ef:87:06:1b:0d:91:72:af:df:59:7d:0a:c9:5b:77:1d:
f4:03:a4:00:72:01:b0:27:e3:80:7f:f0:13:a3:c8:70:39:89:
9c:b5:22:91:f9:f1:45:5b:4f:a9:47:c6:68:62:4f:d0:0c:06:
b2:ee:e2:9f:7b:b6:43:24:a6:fe:da:5c:e4:3b:c2:4a:15:6f:
6d:d9:10:b1:86:95:22:51:ad:12:aa:c4:8f:61:df:93:4a:cf:
fa:f1:9e:70:80:4a:c0:67:34:50:73:5a:ce:87:c6:99:bb:56:
6b:7e:07:91:1f:72:9e:4c:16:e3:68:d5:ec:63:db:38:fa:09:
5f:11:61:31:c5:f6:41:d9:cf:2c:bc:d5:49:1b:59:a4:be:18:
fd:f6:85:9f:05:17:71:bf:8f:d9:af:71:97:eb:b9:66:31:99:
fc:62:ed:39:2e:1a:c1:06:88:7f:5e:0e:b9:b1:1b:6f:1f:94:
94:0e:49:45:95:b0:e3:50:71:65:fd:72:48:a0:24:ac:33:fe:
98:2c:ef:76:e5:67:96:fc:bf:68:a6:86:fb:2c:e3:88:65:12:
78:6d:0f:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEENv6dqFsO/kiUPKsj1YipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGFiZDY0ODcxMWQwY2U1Njk4OTg5NmVmYjczYTBlNjVl
OTczMzkwHhcNMjYxMDA0MDAwMTE1WhcNMjYxMDA1MDAwMTE1WjAzMTEwLwYDVQQD
Eyg0ZTZkMzAxOTcyZjczYmRkODMyNWQwNDc5NDY3NTcyZDVlYjU1N2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3yJtFC3FQYX2Antt3H6+B+WUwcQ
WzC+zUaxd1FaEqCOjFM6q3t37wMBPCSwK0J/meVkLl9k5ldzwnGJQeFIa97ubebZ
I6nV5fUrs+sMbga04lBaorwPAQBjTph8jOYTZ8ZRTNnXuq4zE02ulHSThIDgyxPh
wUSDYE7lUd6k0yfUqY0UrmAVjMM3dBA8fvEh45Idr4t0OOhG0GZI6zOsyjOhQ8qG
2OvCvZEu4+2nh11kktkvIVwbz3oTaQAq5lc2ut2m5jm60z/scZwmegLoWYREsU+c
x5y2xKF2z+0cdZwKVPLS7WvcdfZtUc319Pk9MQRVClqzVObZj2kkeliDqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5tMBly9zvdgyXQR5RnVy1etVehMB8GA1UdIwQY
MBaAFH3avWSHEdDOVpiYlu+3Og5l6XM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmRxOVpJY1IwTTVXbUppVzc3YzZEbVhwY3prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMWJlMzctNmViNS00YmU3LWIwNmEt
Zjk1OGEwZWQwYTQ2LzEvZmRxOVpJY1IwTTVXbUppVzc3YzZEbVhwY3prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iMWJlMzctNmViNS00YmU3LWIwNmEtZjk1OGEwZWQwYTQ2
LzEvZmRxOVpJY1IwTTVXbUppVzc3YzZEbVhwY3prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1aTWuFV
ZM79wGjZC8tjdMCsWXF29sOvZET+LXBjiWXatEIwqnzvhwYbDZFyr99ZfQrJW3cd
9AOkAHIBsCfjgH/wE6PIcDmJnLUikfnxRVtPqUfGaGJP0AwGsu7in3u2QySm/tpc
5DvCShVvbdkQsYaVIlGtEqrEj2Hfk0rP+vGecIBKwGc0UHNazofGmbtWa34HkR9y
nkwW42jV7GPbOPoJXxFhMcX2QdnPLLzVSRtZpL4Y/faFnwUXcb+P2a9xl+u5ZjGZ
/GLtOS4awQaIf14OubEbbx+UlA5JRZWw41BxZf1ySKAkrDP+mCzvduVnlvy/aKaG
+yzjiGUSeG0Ppg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 06:49:54 2026 by rpki-client