Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
File: FcyIDwoSx7lPcdmy5bAopw0fo0o.mft (raw, json)
Hash identifier: yGjSI0I1xd8IlT1++cVl9rjIX2kTASUT62DvX3hw0jU=
Subject key identifier: BA:BC:21:C9:29:1B:C3:32:BB:B8:39:F6:EC:B5:E2:3E:CD:DE:5B:0A
Authority key identifier: 15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
Certificate issuer: /CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Certificate serial: 01A0D2A64382FE013A70D1E827A6C0B03645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 09:01:46 +0000
Manifest this update: Thu 24 Sep 2026 09:01:46 +0000
Manifest next update: Fri 25 Sep 2026 09:01:46 +0000
Files and hashes: 1: FcyIDwoSx7lPcdmy5bAopw0fo0o.crl (hash: 2a7tL5+oLyWsnZeLvGfc4TImKt59tJga6ZC1uKeUZHA=)
2: Lns8WMwmeahDBAtfj1YhXNC9YpQ.roa (hash: 1VID+VxCbvu/x4LUFWGdXKIYuEKVOmm6njJ+kAa8PjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:43:82:fe:01:3a:70:d1:e8:27:a6:c0:b0:36:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cc880f0a12c7b94f71d9b2e5b028a70d1fa34a
Validity
Not Before: Sep 24 09:01:46 2026 GMT
Not After : Sep 25 09:01:46 2026 GMT
Subject: CN=babc21c9291bc332bbb839f6ecb5e23ecdde5b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f1:73:74:01:fd:f9:d9:65:fc:3e:b3:a4:96:
f1:83:43:2c:65:3b:31:14:1e:8a:c6:6e:6e:89:1f:
e7:2f:63:7e:ce:09:2c:72:9f:1e:9b:9f:11:42:7f:
8a:45:9b:77:cb:14:73:cb:fe:1d:46:2c:be:f8:97:
ba:80:87:61:00:b9:9d:e0:90:96:c1:e8:d3:7d:dc:
60:fb:d3:71:10:3b:27:d9:ea:72:b1:0a:a2:0e:81:
39:84:64:20:4e:bb:64:31:48:d0:44:ba:24:4e:1d:
ab:a2:68:bc:61:79:cf:c7:0d:e2:f2:11:e6:89:f4:
7d:18:2d:c1:b5:41:53:86:cd:39:f2:c3:17:8c:4b:
04:cc:26:7f:f6:ba:97:51:a2:f6:f6:ae:9e:63:52:
49:91:cd:ad:d1:fb:38:32:c0:f3:93:c0:90:14:76:
11:10:51:d4:65:e8:b9:15:32:df:a4:af:c9:43:f7:
70:aa:d8:02:54:75:36:6a:27:cc:86:ea:90:ac:08:
22:6b:f0:3b:7f:50:49:55:ff:05:32:51:3a:a4:70:
d7:6f:60:85:61:5c:41:87:9b:aa:28:36:89:ab:f8:
34:5a:42:b2:73:53:2e:02:1a:3d:81:77:5c:b0:25:
f4:46:d2:53:35:5d:5d:ef:34:89:35:43:9a:eb:cd:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:21:C9:29:1B:C3:32:BB:B8:39:F6:EC:B5:E2:3E:CD:DE:5B:0A
X509v3 Authority Key Identifier:
keyid:15:CC:88:0F:0A:12:C7:B9:4F:71:D9:B2:E5:B0:28:A7:0D:1F:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcyIDwoSx7lPcdmy5bAopw0fo0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5986f1-863f-4eec-8551-0a8fe6434bf8/1/FcyIDwoSx7lPcdmy5bAopw0fo0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5b:c3:85:6c:e2:db:20:90:23:21:cb:a5:90:05:d5:28:c7:
94:8b:15:9c:0a:73:e9:95:f0:0a:b2:46:be:1f:f9:51:d3:ac:
d5:45:cd:ea:c1:ed:03:17:36:a6:19:e7:1d:06:ac:29:3e:0a:
9d:49:59:77:55:90:94:38:cc:0e:37:e8:71:7b:73:2b:40:25:
da:2f:a0:c9:be:24:ee:1c:90:63:9b:32:aa:f3:da:72:7a:31:
65:ed:f5:37:02:df:b3:37:a5:da:f7:39:bb:b9:d9:e0:6e:e9:
9b:e1:d0:33:5d:be:ce:47:c8:32:04:e9:5a:d8:76:e8:91:1b:
bf:9a:f9:0c:32:14:a1:80:56:a8:83:72:0d:ad:ad:7d:9a:c1:
40:00:f0:86:b3:b6:13:f3:79:02:5d:82:ba:1e:8b:a4:95:d0:
3f:00:20:b2:b3:c1:89:88:c6:8f:94:e9:83:b7:05:12:53:1e:
29:ca:d7:c0:c1:f8:66:59:fe:df:1b:bd:4e:b2:c9:87:3c:67:
79:a7:d4:83:09:84:57:88:53:0b:8c:9d:9c:2a:18:20:1b:53:
74:28:96:2e:cd:11:e8:be:a7:e7:0f:70:fa:70:0f:f1:55:36:
98:b0:0c:ce:e9:62:a2:0e:4c:1e:7f:df:cc:b7:44:b5:65:b3:
89:88:0f:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSpkOC/gE6cNHoJ6bAsDZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2M4ODBmMGExMmM3Yjk0ZjcxZDliMmU1YjAyOGE3MGQx
ZmEzNGEwHhcNMjYwOTI0MDkwMTQ2WhcNMjYwOTI1MDkwMTQ2WjAzMTEwLwYDVQQD
EyhiYWJjMjFjOTI5MWJjMzMyYmJiODM5ZjZlY2I1ZTIzZWNkZGU1YjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fFzdAH9+dll/D6zpJbxg0MsZTsx
FB6Kxm5uiR/nL2N+zgkscp8em58RQn+KRZt3yxRzy/4dRiy++Je6gIdhALmd4JCW
wejTfdxg+9NxEDsn2epysQqiDoE5hGQgTrtkMUjQRLokTh2romi8YXnPxw3i8hHm
ifR9GC3BtUFThs058sMXjEsEzCZ/9rqXUaL29q6eY1JJkc2t0fs4MsDzk8CQFHYR
EFHUZei5FTLfpK/JQ/dwqtgCVHU2aifMhuqQrAgia/A7f1BJVf8FMlE6pHDXb2CF
YVxBh5uqKDaJq/g0WkKyc1MuAho9gXdcsCX0RtJTNV1d7zSJNUOa683eBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLq8IckpG8Myu7g59uy14j7N3lsKMB8GA1UdIwQY
MBaAFBXMiA8KEse5T3HZsuWwKKcNH6NKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81OTg2ZjEtODYzZi00ZWVjLTg1NTEt
MGE4ZmU2NDM0YmY4LzEvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81OTg2ZjEtODYzZi00ZWVjLTg1NTEtMGE4ZmU2NDM0YmY4
LzEvRmN5SUR3b1N4N2xQY2RteTViQW9wdzBmbzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelvDhWzi
2yCQIyHLpZAF1SjHlIsVnApz6ZXwCrJGvh/5UdOs1UXN6sHtAxc2phnnHQasKT4K
nUlZd1WQlDjMDjfocXtzK0Al2i+gyb4k7hyQY5syqvPacnoxZe31NwLfszel2vc5
u7nZ4G7pm+HQM12+zkfIMgTpWth26JEbv5r5DDIUoYBWqINyDa2tfZrBQADwhrO2
E/N5Al2Cuh6LpJXQPwAgsrPBiYjGj5Tpg7cFElMeKcrXwMH4Zln+3xu9TrLJhzxn
eafUgwmEV4hTC4ydnCoYIBtTdCiWLs0R6L6n5w9w+nAP8VU2mLAMzuliog5MHn/f
zLdEtWWziYgPMg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:29:37 2026 by rpki-client