Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: 0oZRMC0pAdegkCAH9fkVW9yrIy3o5talyucIlrGEQdY=
Subject key identifier: 17:6D:C5:93:27:C2:06:1A:ED:FC:2C:41:66:E3:B4:1F:30:EB:4E:E8
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 01A0CFA3B8623A9DBD1440B8ED5FD857E44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0C78
Signing time: Wed 23 Sep 2026 19:00:08 +0000
Manifest this update: Wed 23 Sep 2026 19:00:08 +0000
Manifest next update: Thu 24 Sep 2026 19:00:08 +0000
Files and hashes: 1: E3jz9qmqTjg_zIJIvHv94CK6zsY.roa (hash: 0Lk+ZfoyEeeu5e++mGbGnXSf6tV5iYmorQKGtAl1EXE=)
2: GIL9uqecVqs2J_KF2ar2nbKLRYY.roa (hash: R/5DgAUg2cp6Uj0SCyngsXoMIJaoy6aqdVqAoNaJ2f8=)
3: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: eTjsSwu30mVX25yyLhP5vbF7j7QM11RUXQfzibaW7s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:b8:62:3a:9d:bd:14:40:b8:ed:5f:d8:57:e4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Sep 23 19:00:08 2026 GMT
Not After : Sep 24 19:00:08 2026 GMT
Subject: CN=176dc59327c2061aedfc2c4166e3b41f30eb4ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:54:42:9a:bb:c0:73:fa:c4:42:d5:5a:4e:a5:
0f:ab:0b:12:91:8c:a5:b5:5e:72:03:44:8b:15:71:
0f:78:b1:c0:32:5e:e2:e3:7c:16:03:13:99:df:ba:
52:ed:db:b6:b4:24:b8:db:91:ea:a9:90:49:7a:81:
be:c0:3d:63:2c:67:6f:1f:64:95:72:ba:01:33:b4:
34:87:8b:55:84:53:b8:fe:f6:6a:50:aa:68:53:57:
a0:75:8d:13:99:2c:93:74:d5:59:bb:ba:5c:21:a2:
cc:55:46:f0:b1:db:c6:d4:fb:cf:d6:c8:de:6a:5c:
30:99:46:c1:1d:3f:90:24:dd:eb:e8:71:dc:c9:bf:
ef:81:ee:40:0a:e4:b2:44:ed:67:b3:e9:ac:40:0a:
85:06:2b:5d:95:39:52:45:be:6c:e0:eb:d4:ae:15:
0c:19:33:49:8d:e6:04:c3:84:36:df:e1:fa:b8:61:
26:b7:03:02:50:35:97:3b:bc:7d:25:50:10:be:99:
97:e4:4b:41:8f:03:16:59:e9:d4:b2:a9:f2:9d:57:
77:9d:4a:6c:5b:1c:b7:4a:43:1c:a4:ec:74:51:8f:
23:df:53:39:cd:fd:94:46:90:ac:25:c9:65:4f:7d:
25:68:99:f5:c5:88:e7:b8:de:ec:0d:fe:52:e4:48:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:C5:93:27:C2:06:1A:ED:FC:2C:41:66:E3:B4:1F:30:EB:4E:E8
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:92:0c:d7:db:4d:bb:38:2f:90:1a:08:47:d9:50:96:9a:df:
6d:06:69:ef:63:f9:a3:ab:88:ce:fb:90:a9:4e:4f:85:5c:15:
31:5a:52:c4:3d:b9:93:6e:11:db:4f:cf:67:87:bd:96:f0:ee:
71:23:26:65:67:91:e6:a0:47:07:02:02:8a:63:6e:f8:2c:61:
6d:f6:62:93:42:4c:60:18:d5:06:5e:cd:2e:bb:7b:17:e0:06:
fa:60:d9:27:60:b8:2b:1f:07:2d:26:3c:52:f1:6e:12:50:c1:
b5:b8:4a:2e:06:19:94:d6:89:ae:d4:e6:e4:6a:84:44:9d:79:
18:a3:42:0d:f6:69:9e:81:43:77:14:b4:54:ba:44:4d:b8:46:
28:3a:9e:38:fa:f2:58:0d:0d:bf:ac:18:56:e2:e6:62:fd:f0:
a4:c0:fe:4d:cd:a8:65:68:e2:5d:7c:cd:dd:b4:a4:dd:c3:0a:
45:ef:2f:de:54:c0:38:32:73:82:4f:db:00:41:85:4a:f6:d7:
93:ad:ca:2c:34:ba:df:6b:25:f5:b6:ef:f2:8f:7f:80:31:49:
be:69:f5:28:5b:93:d4:ad:5a:5a:1d:43:d9:fa:9a:bc:24:1d:
fc:7f:4a:7b:87:68:87:05:ee:78:a0:fe:f3:ed:84:4f:0d:cc:
dd:c7:12:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPo7hiOp29FEC47V/YV+RMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNGU0ODc3YjQ2NGU0ODllOGUxZTYxYmU1N2I4YmJlOGU1
MGU3OTkwHhcNMjYwOTIzMTkwMDA4WhcNMjYwOTI0MTkwMDA4WjAzMTEwLwYDVQQD
EygxNzZkYzU5MzI3YzIwNjFhZWRmYzJjNDE2NmUzYjQxZjMwZWI0ZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31RCmrvAc/rEQtVaTqUPqwsSkYyl
tV5yA0SLFXEPeLHAMl7i43wWAxOZ37pS7du2tCS425HqqZBJeoG+wD1jLGdvH2SV
croBM7Q0h4tVhFO4/vZqUKpoU1egdY0TmSyTdNVZu7pcIaLMVUbwsdvG1PvP1sje
alwwmUbBHT+QJN3r6HHcyb/vge5ACuSyRO1ns+msQAqFBitdlTlSRb5s4OvUrhUM
GTNJjeYEw4Q23+H6uGEmtwMCUDWXO7x9JVAQvpmX5EtBjwMWWenUsqnynVd3nUps
Wxy3SkMcpOx0UY8j31M5zf2URpCsJcllT30laJn1xYjnuN7sDf5S5EhwlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdtxZMnwgYa7fwsQWbjtB8w607oMB8GA1UdIwQY
MBaAFH5OSHe0ZOSJ6OHmG+V7i76OUOeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYt
MGFmMjZiYzc2NDIxLzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYtMGFmMjZiYzc2NDIx
LzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5IM19tN
uzgvkBoIR9lQlprfbQZp72P5o6uIzvuQqU5PhVwVMVpSxD25k24R20/PZ4e9lvDu
cSMmZWeR5qBHBwICimNu+CxhbfZik0JMYBjVBl7NLrt7F+AG+mDZJ2C4Kx8HLSY8
UvFuElDBtbhKLgYZlNaJrtTm5GqERJ15GKNCDfZpnoFDdxS0VLpETbhGKDqeOPry
WA0Nv6wYVuLmYv3wpMD+Tc2oZWjiXXzN3bSk3cMKRe8v3lTAODJzgk/bAEGFSvbX
k63KLDS632sl9bbv8o9/gDFJvmn1KFuT1K1aWh1D2fqavCQd/H9Ke4dohwXueKD+
8+2ETw3M3ccS9A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:30:01 2026 by rpki-client