Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File: FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier: 18LDqj23TN6NYGDWRleGzVAbrwmkl+LVmcL918iLdv4=
Subject key identifier: 29:2D:49:C0:04:63:F6:D1:51:F7:F0:A1:C5:40:DC:C7:3D:66:D3:BA
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer: /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial: 019FAB6390E3D5A58CD60DC0C2907A4666DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number: 08A3
Signing time: Wed 29 Jul 2026 01:00:56 +0000
Manifest this update: Wed 29 Jul 2026 01:00:56 +0000
Manifest next update: Thu 30 Jul 2026 01:00:56 +0000
Files and hashes: 1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: q7E4KeJtogJBHcZWFQmVRhoOZxOWOmqYHzTtnVOGQR8=)
2: mSf_6hw9LbwczEGLxS7bvwkiv9c.roa (hash: CPUV5PHm53/ZGx8XFmHD3voe3NEDlMd+rbTwW6kMNMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:90:e3:d5:a5:8c:d6:0d:c0:c2:90:7a:46:66:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Validity
Not Before: Jul 29 01:00:56 2026 GMT
Not After : Jul 30 01:00:56 2026 GMT
Subject: CN=292d49c00463f6d151f7f0a1c540dcc73d66d3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:0e:52:f4:7c:b1:bc:49:8b:ef:35:34:54:
a9:05:7a:9c:0e:0d:ee:46:0f:80:80:0f:42:7e:29:
91:05:81:01:e8:ca:65:66:82:f2:f2:74:bf:9d:6f:
f6:79:aa:a1:7d:c1:4d:62:ed:28:4c:69:96:c5:d6:
5c:df:2e:d5:7c:fa:8e:5b:24:52:e1:cc:20:5e:e8:
46:7e:9d:64:60:27:02:9b:99:ba:8f:06:9e:cc:49:
73:d5:51:c5:a3:04:fb:0f:17:00:5d:05:3f:73:d8:
a6:ef:ab:e0:37:3a:6a:ec:68:39:fd:2f:60:a2:1e:
de:ae:4f:02:69:64:5e:73:68:2e:4e:0f:24:71:a5:
d1:e3:6d:3f:4b:2c:e0:cf:fd:ae:3e:29:6a:d8:af:
6c:85:c8:e9:81:3a:10:41:5e:32:42:e5:04:aa:0d:
76:84:7e:91:55:1b:08:57:2e:5a:e5:49:af:96:7b:
15:09:11:1d:83:5b:f5:b9:e4:80:8c:ad:9a:03:f6:
14:11:1e:90:4c:76:c1:8c:bf:fd:2c:71:74:71:81:
80:2a:1d:48:c4:19:39:76:b4:dc:af:87:7d:40:87:
ce:77:0e:5a:e5:85:27:8d:e0:fb:6f:d9:9b:e1:2a:
ee:0d:40:57:ba:24:e8:89:ba:d3:a1:63:f4:f8:fb:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2D:49:C0:04:63:F6:D1:51:F7:F0:A1:C5:40:DC:C7:3D:66:D3:BA
X509v3 Authority Key Identifier:
keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:38:7a:b4:b1:bf:1e:aa:b7:df:88:05:79:35:8a:91:4f:4f:
43:76:5f:75:32:7a:3b:b4:42:9b:fa:6a:63:14:fa:9b:24:23:
84:5e:1e:28:bc:bf:79:26:15:37:9d:de:22:a7:69:7a:45:24:
9e:b5:42:f9:bf:1c:19:50:9d:78:74:c1:f6:78:91:ae:0e:51:
90:a1:5e:9b:3d:0c:6a:60:bf:f0:18:0b:4c:22:b7:75:8a:50:
b6:b3:00:b7:e5:83:df:43:22:dc:e7:47:2a:e7:fc:d1:92:d4:
c4:3b:bf:d9:16:c4:f7:d5:d0:c7:19:ed:8d:77:89:0c:28:03:
ab:7c:d1:e0:bc:c1:aa:fd:65:f3:1c:34:48:6f:2c:ab:59:19:
1d:63:fb:21:81:7d:97:38:7a:0b:0e:03:ba:d9:26:29:00:3f:
68:bd:b1:72:05:cb:d3:b9:d0:0f:a1:72:12:c7:40:f4:73:68:
99:17:75:51:13:cb:44:a8:38:d0:d7:c3:5f:41:d9:4c:91:d5:
61:05:eb:50:da:0a:41:dc:b1:6d:4b:bd:11:a7:a2:93:ba:cf:
0e:5f:06:27:ff:5e:3e:bf:2b:c6:4b:d2:71:77:5f:c1:b4:c2:
9e:d2:34:3d:e5:98:01:e4:74:df:f0:42:78:55:7d:21:9d:ce:
ca:af:5f:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY5Dj1aWM1g3AwpB6RmbbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTI4YTBlMjQxZmZmN2FhMmU2NGFhMzg4MTU2ZjIyM2Uy
ZDIxNWYwHhcNMjYwNzI5MDEwMDU2WhcNMjYwNzMwMDEwMDU2WjAzMTEwLwYDVQQD
EygyOTJkNDljMDA0NjNmNmQxNTFmN2YwYTFjNTQwZGNjNzNkNjZkM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcMOUvR8sbxJi+81NFSpBXqcDg3u
Rg+AgA9CfimRBYEB6MplZoLy8nS/nW/2eaqhfcFNYu0oTGmWxdZc3y7VfPqOWyRS
4cwgXuhGfp1kYCcCm5m6jwaezElz1VHFowT7DxcAXQU/c9im76vgNzpq7Gg5/S9g
oh7erk8CaWRec2guTg8kcaXR420/Syzgz/2uPilq2K9shcjpgToQQV4yQuUEqg12
hH6RVRsIVy5a5UmvlnsVCREdg1v1ueSAjK2aA/YUER6QTHbBjL/9LHF0cYGAKh1I
xBk5drTcr4d9QIfOdw5a5YUnjeD7b9mb4SruDUBXuiToibrToWP0+PvVaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCktScAEY/bRUffwocVA3Mc9ZtO6MB8GA1UdIwQY
MBaAFBaiig4kH/96ouZKo4gVbyI+LSFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2Et
ZmIyYTk4M2NjNjZhLzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2EtZmIyYTk4M2NjNjZh
LzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTh6tLG/
Hqq334gFeTWKkU9PQ3ZfdTJ6O7RCm/pqYxT6myQjhF4eKLy/eSYVN53eIqdpekUk
nrVC+b8cGVCdeHTB9niRrg5RkKFemz0MamC/8BgLTCK3dYpQtrMAt+WD30Mi3OdH
Kuf80ZLUxDu/2RbE99XQxxntjXeJDCgDq3zR4LzBqv1l8xw0SG8sq1kZHWP7IYF9
lzh6Cw4DutkmKQA/aL2xcgXL07nQD6FyEsdA9HNomRd1URPLRKg40NfDX0HZTJHV
YQXrUNoKQdyxbUu9Eaeik7rPDl8GJ/9ePr8rxkvScXdfwbTCntI0PeWYAeR03/BC
eFV9IZ3Oyq9fuQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:22:07 2026 by rpki-client