Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft
File: _ubQl9bBh0oVzIxu61MpAULPB6k.mft (raw, json)
Hash identifier: RpA9DPqTXEh942IBxv0yg/03dBMT2/n+DSyjmf3KGeo=
Subject key identifier: F5:D2:F6:4C:C4:20:34:15:4C:87:7E:31:E3:5A:42:5C:FA:FE:7A:0A
Authority key identifier: FE:E6:D0:97:D6:C1:87:4A:15:CC:8C:6E:EB:53:29:01:42:CF:07:A9
Certificate issuer: /CN=fee6d097d6c1874a15cc8c6eeb53290142cf07a9
Certificate serial: 01A0EB8A5473FE891A6D71048AE4236DB33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ubQl9bBh0oVzIxu61MpAULPB6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft
Manifest number: 87
Signing time: Tue 29 Sep 2026 05:01:46 +0000
Manifest this update: Tue 29 Sep 2026 05:01:46 +0000
Manifest next update: Wed 30 Sep 2026 05:01:46 +0000
Files and hashes: 1: X9MygZSKSL6QlOO0UVIquYhu0Fo.asa (hash: Oin11/QLAtTIeyxZUGkGGrAhnCjiS0Q0Kg95zmjFkRI=)
2: _ubQl9bBh0oVzIxu61MpAULPB6k.crl (hash: 8I6+MaKQxhRsmT3En823g7k20XHXjwoCOoG16qW9v5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ubQl9bBh0oVzIxu61MpAULPB6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:54:73:fe:89:1a:6d:71:04:8a:e4:23:6d:b3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee6d097d6c1874a15cc8c6eeb53290142cf07a9
Validity
Not Before: Sep 29 05:01:46 2026 GMT
Not After : Sep 30 05:01:46 2026 GMT
Subject: CN=f5d2f64cc42034154c877e31e35a425cfafe7a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:74:9e:e1:21:f5:99:2e:7f:a7:e0:ae:53:
0a:db:31:14:f4:ff:49:63:b5:ea:fa:9c:04:bf:71:
c8:ee:5a:9d:65:cc:6b:0f:e7:cb:5d:fa:bd:12:76:
76:bd:40:1f:9c:7c:9b:94:a6:7a:ba:4d:58:3c:f5:
4d:a1:24:40:84:cc:e5:bd:8c:59:81:ee:92:54:4c:
52:27:ac:76:24:0c:5b:3e:b3:e3:97:3e:09:fc:8e:
a3:c1:75:ca:a7:81:d0:33:74:e8:04:67:67:10:32:
b1:54:f1:a1:74:9c:02:2a:b8:91:6f:05:e2:ef:6a:
d8:3f:67:13:3c:6e:8c:01:09:c4:26:57:82:54:52:
76:35:b6:94:84:ce:20:06:c4:5c:2d:ac:42:9a:53:
fc:d4:9c:1b:67:42:d7:e1:bd:d6:f7:04:ce:79:ce:
0c:16:3e:b4:e6:a1:72:b0:89:2b:16:59:fb:78:c6:
5d:df:9d:95:87:da:c7:91:5f:0a:7f:f9:3e:7e:4b:
9d:e8:51:5e:fd:33:b3:5c:9a:f4:e7:79:e8:d7:29:
1a:9d:cb:0a:ca:dd:47:1e:24:93:0b:b0:43:86:80:
65:61:88:0f:94:94:8c:83:92:12:4b:85:ea:69:22:
6a:51:b4:8d:77:1c:21:0b:b2:7b:e9:86:da:27:c6:
c1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D2:F6:4C:C4:20:34:15:4C:87:7E:31:E3:5A:42:5C:FA:FE:7A:0A
X509v3 Authority Key Identifier:
keyid:FE:E6:D0:97:D6:C1:87:4A:15:CC:8C:6E:EB:53:29:01:42:CF:07:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ubQl9bBh0oVzIxu61MpAULPB6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:48:98:0e:e4:6d:25:e5:a2:34:29:9a:fc:58:62:5a:bb:b9:
2f:f7:06:69:9e:a4:ad:08:4e:fd:ac:84:7c:d5:a1:8e:d4:f2:
6e:09:81:51:d8:7a:19:2e:cc:17:9c:ea:36:42:e7:ce:e1:6c:
4a:a3:6a:3a:c5:2f:d9:38:a0:61:e4:51:76:d9:a0:16:67:a2:
c2:91:97:4c:f6:e9:6f:92:51:1c:fc:bb:a9:98:c5:e3:8b:f6:
6e:f6:6c:ed:ca:fe:cd:a0:ae:38:f6:c9:50:29:70:70:18:e9:
13:45:9b:05:4b:78:d4:12:fc:72:50:a1:93:a7:46:12:49:99:
46:02:3c:9d:98:27:58:90:b4:89:4a:b0:22:8c:80:cc:bf:39:
7c:40:d0:e9:a0:35:b9:b9:30:ff:09:56:46:e0:79:22:c7:4e:
0c:2e:5b:e8:bd:4f:08:86:3f:7f:c0:a8:af:73:83:87:e7:46:
69:8e:d2:be:08:49:f8:a8:b8:8d:60:dc:e1:d5:1d:0c:81:a8:
6a:07:c7:04:54:b6:84:5a:4a:9e:34:40:31:02:c7:2b:a2:9a:
63:c9:41:33:87:53:af:86:2c:fa:2f:68:11:c6:e3:4b:05:fa:
21:9b:48:3d:9d:23:2a:5f:bc:90:49:64:3f:58:fc:af:1d:a8:
5b:b5:3c:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrilRz/okabXEEiuQjbbM7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZTZkMDk3ZDZjMTg3NGExNWNjOGM2ZWViNTMyOTAxNDJj
ZjA3YTkwHhcNMjYwOTI5MDUwMTQ2WhcNMjYwOTMwMDUwMTQ2WjAzMTEwLwYDVQQD
EyhmNWQyZjY0Y2M0MjAzNDE1NGM4NzdlMzFlMzVhNDI1Y2ZhZmU3YTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8l0nuEh9Zkuf6fgrlMK2zEU9P9J
Y7Xq+pwEv3HI7lqdZcxrD+fLXfq9EnZ2vUAfnHyblKZ6uk1YPPVNoSRAhMzlvYxZ
ge6SVExSJ6x2JAxbPrPjlz4J/I6jwXXKp4HQM3ToBGdnEDKxVPGhdJwCKriRbwXi
72rYP2cTPG6MAQnEJleCVFJ2NbaUhM4gBsRcLaxCmlP81JwbZ0LX4b3W9wTOec4M
Fj605qFysIkrFln7eMZd352Vh9rHkV8Kf/k+fkud6FFe/TOzXJr053no1ykancsK
yt1HHiSTC7BDhoBlYYgPlJSMg5ISS4XqaSJqUbSNdxwhC7J76YbaJ8bBewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXS9kzEIDQVTId+MeNaQlz6/noKMB8GA1UdIwQY
MBaAFP7m0JfWwYdKFcyMbutTKQFCzwepMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3ViUWw5YkJoMG9Wekl4dTYxTXBBVUxQQjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iOGFkMTktYTlmMC00ZDgzLTk3NjIt
MDA0NzBiMWY4MjQ0LzEvX3ViUWw5YkJoMG9Wekl4dTYxTXBBVUxQQjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iOGFkMTktYTlmMC00ZDgzLTk3NjItMDA0NzBiMWY4MjQ0
LzEvX3ViUWw5YkJoMG9Wekl4dTYxTXBBVUxQQjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEiYDuRt
JeWiNCma/FhiWru5L/cGaZ6krQhO/ayEfNWhjtTybgmBUdh6GS7MF5zqNkLnzuFs
SqNqOsUv2TigYeRRdtmgFmeiwpGXTPbpb5JRHPy7qZjF44v2bvZs7cr+zaCuOPbJ
UClwcBjpE0WbBUt41BL8clChk6dGEkmZRgI8nZgnWJC0iUqwIoyAzL85fEDQ6aA1
ubkw/wlWRuB5IsdODC5b6L1PCIY/f8Cor3ODh+dGaY7SvghJ+Ki4jWDc4dUdDIGo
agfHBFS2hFpKnjRAMQLHK6KaY8lBM4dTr4Ys+i9oEcbjSwX6IZtIPZ0jKl+8kElk
P1j8rx2oW7U8/A==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:40:42 2026 by rpki-client