Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
File: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json)
Hash identifier: Ate09MAi9TKh6dyFDE4t0sekhNNoJGMvtQxroTsSh9w=
Subject key identifier: 8E:E1:18:98:46:44:0D:3F:D0:7F:24:D3:4C:E3:CC:24:AC:63:3B:23
Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Certificate serial: 01A104003523A5FBCE3EA319B836F5A9E1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
Manifest number: 03FA
Signing time: Sat 03 Oct 2026 23:01:24 +0000
Manifest this update: Sat 03 Oct 2026 23:01:24 +0000
Manifest next update: Sun 04 Oct 2026 23:01:24 +0000
Files and hashes: 1: 5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa (hash: Rd6vx0quono9MPD1F0vpd55eYapHMtF51xcO/Hw6eew=)
2: PoSXBK0GzT2QEYKdRSEGvAFwxC0.roa (hash: PXjaU8QTswXCjDyy2BPXpx1XOOVAoOODgsuczLeFqK8=)
3: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: 9yYdjdKQnc/jz70Fx4mLvroCLXfbZyLCuYk9c9QyJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:00:35:23:a5:fb:ce:3e:a3:19:b8:36:f5:a9:e1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Validity
Not Before: Oct 3 23:01:24 2026 GMT
Not After : Oct 4 23:01:24 2026 GMT
Subject: CN=8ee1189846440d3fd07f24d34ce3cc24ac633b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:51:cc:43:98:d5:e4:fa:bc:4a:8f:0e:c1:
0e:27:46:c0:99:43:ec:2b:a4:f6:ac:ae:73:64:65:
cb:d6:e9:cf:bf:f4:03:9b:12:04:98:ae:4e:36:6a:
73:e0:b1:a5:16:b7:ea:58:b8:1b:61:94:cb:9f:bd:
9d:99:ee:b8:15:37:51:c6:b7:59:94:83:26:85:e5:
c7:d4:14:45:df:80:c6:e2:5a:be:01:65:73:49:11:
02:6b:dd:d4:c8:38:7d:bd:4b:43:98:05:67:20:9b:
c0:be:ef:f8:81:b7:6d:0c:13:7f:e0:75:19:97:5f:
bc:30:e9:f8:c3:ed:33:fe:33:ae:15:1d:41:de:4b:
74:3c:15:62:49:18:70:46:21:7c:24:3e:e3:b3:77:
87:a3:6e:08:1e:57:cb:7d:f4:bd:70:c4:91:60:b2:
46:dd:be:6a:a7:a0:50:70:cc:3d:b0:62:d7:6a:c2:
be:44:e2:7b:4d:bc:b8:c8:39:4e:d6:b9:bb:bb:02:
ce:4c:81:eb:b4:33:b2:c5:6f:37:c0:f3:63:85:c0:
f0:4f:18:55:dc:99:50:12:38:ae:5f:ae:ea:15:e1:
cd:68:20:6f:eb:33:f3:a0:fb:36:d1:15:80:75:3e:
f6:ac:a4:10:c1:7c:2b:40:e6:74:d8:40:c2:9a:0c:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E1:18:98:46:44:0D:3F:D0:7F:24:D3:4C:E3:CC:24:AC:63:3B:23
X509v3 Authority Key Identifier:
keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:85:6a:94:dd:f9:7a:0b:3d:77:42:2d:bb:f9:0b:86:8c:1c:
b1:eb:7a:2d:92:56:53:33:ad:a0:da:1b:ea:c7:e0:d7:37:5f:
6d:ab:75:39:da:9b:08:b2:2c:1b:8c:d1:ce:ba:76:0d:06:3b:
46:35:06:c6:78:23:12:82:30:2e:ac:8e:8b:fe:c9:d8:18:8c:
a0:5b:ab:d1:9a:0b:00:5d:e6:dd:71:24:02:59:eb:77:b1:23:
98:a4:c1:33:4e:98:30:03:83:14:dc:e2:50:cd:52:10:71:5c:
2e:79:63:e9:4f:a9:58:65:5b:86:09:38:f2:20:ce:df:fe:8a:
88:cb:2b:03:3d:3f:46:7d:e6:ab:59:b9:e7:83:99:ea:8e:10:
9d:7a:04:10:c4:eb:91:e5:3f:64:c3:1b:86:b1:cd:55:3f:c1:
cf:b5:1f:7c:96:cc:2e:69:09:91:4b:2b:8b:ab:27:58:f2:a2:
df:a1:e4:7f:a3:66:b8:ca:61:6c:4c:a7:db:cc:68:a2:64:fb:
7b:b8:ef:91:34:00:10:f3:cd:9c:3b:16:15:df:ca:45:54:c0:
64:5f:bb:8d:1c:c2:92:1f:b3:2c:55:38:8b:13:da:c5:b6:00:
5c:ac:1f:46:d7:b3:fe:3b:22:6a:6f:ec:49:f6:d4:ca:72:e7:
65:4b:44:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEEADUjpfvOPqMZuDb1qeH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzQ2YWNlNGU2NTI4NzBmMTY4NzQ1MGQ1YzM0ZTE0Y2Iw
MDk0YjUwHhcNMjYxMDAzMjMwMTI0WhcNMjYxMDA0MjMwMTI0WjAzMTEwLwYDVQQD
Eyg4ZWUxMTg5ODQ2NDQwZDNmZDA3ZjI0ZDM0Y2UzY2MyNGFjNjMzYjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwtRzEOY1eT6vEqPDsEOJ0bAmUPs
K6T2rK5zZGXL1unPv/QDmxIEmK5ONmpz4LGlFrfqWLgbYZTLn72dme64FTdRxrdZ
lIMmheXH1BRF34DG4lq+AWVzSRECa93UyDh9vUtDmAVnIJvAvu/4gbdtDBN/4HUZ
l1+8MOn4w+0z/jOuFR1B3kt0PBViSRhwRiF8JD7js3eHo24IHlfLffS9cMSRYLJG
3b5qp6BQcMw9sGLXasK+ROJ7Tby4yDlO1rm7uwLOTIHrtDOyxW83wPNjhcDwTxhV
3JlQEjiuX67qFeHNaCBv6zPzoPs20RWAdT72rKQQwXwrQOZ02EDCmgxmGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7hGJhGRA0/0H8k00zjzCSsYzsjMB8GA1UdIwQY
MBaAFH00as5OZShw8Wh0UNXDThTLAJS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEt
MzI3YWNjMWIxZTU5LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEtMzI3YWNjMWIxZTU5
LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIVqlN35
egs9d0Itu/kLhowcset6LZJWUzOtoNob6sfg1zdfbat1OdqbCLIsG4zRzrp2DQY7
RjUGxngjEoIwLqyOi/7J2BiMoFur0ZoLAF3m3XEkAlnrd7EjmKTBM06YMAODFNzi
UM1SEHFcLnlj6U+pWGVbhgk48iDO3/6KiMsrAz0/Rn3mq1m554OZ6o4QnXoEEMTr
keU/ZMMbhrHNVT/Bz7UffJbMLmkJkUsri6snWPKi36Hkf6NmuMphbEyn28xoomT7
e7jvkTQAEPPNnDsWFd/KRVTAZF+7jRzCkh+zLFU4ixPaxbYAXKwfRtez/jsiam/s
SfbUynLnZUtEnw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:33:58 2026 by rpki-client