Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: J01IywBGWIOWKwqxsNwUvfYHvMMvb1gIJ9a52NEtq6Q=
Subject key identifier: 40:3B:A5:E1:8B:D8:B2:84:3F:F1:C7:C5:F7:CB:F0:CD:C2:D8:B5:1E
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019FA9AC6B62DEF20F0CFD5A68382C8D97BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0F82
Signing time: Tue 28 Jul 2026 17:01:16 +0000
Manifest this update: Tue 28 Jul 2026 17:01:16 +0000
Manifest next update: Wed 29 Jul 2026 17:01:16 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: SypmLkCChEkWDlnNeGvDiCZNjVO/pBO2czdEYGgxXvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:6b:62:de:f2:0f:0c:fd:5a:68:38:2c:8d:97:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Jul 28 17:01:16 2026 GMT
Not After : Jul 29 17:01:16 2026 GMT
Subject: CN=403ba5e18bd8b2843ff1c7c5f7cbf0cdc2d8b51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a0:57:64:87:81:d6:40:4e:66:69:cd:bb:dd:
af:69:b3:4f:5a:ef:d3:41:eb:23:b8:09:0f:c3:29:
1a:8d:c7:a9:bf:ac:2b:c0:33:ee:49:c4:4c:d9:f6:
89:74:d5:36:5c:0d:dc:e3:b5:63:7d:bb:6a:84:61:
18:e7:eb:f8:5d:fe:d8:ce:f7:3a:fe:3e:8f:5d:79:
db:cc:f6:f9:54:46:66:82:ae:32:d1:a8:b7:7d:a6:
42:65:6b:10:8e:f2:53:34:ea:3e:ef:fc:f8:c3:54:
2d:a6:de:76:5e:63:2f:95:f2:b1:7e:ed:b6:18:50:
24:43:03:30:99:ce:43:61:28:f1:bd:50:d3:e7:93:
ac:d5:39:34:0e:e4:8b:71:da:fb:a0:39:96:a3:9b:
36:cb:ef:f4:de:12:a0:32:40:64:51:25:a8:3d:e6:
f4:d0:6a:2b:d6:e4:4e:46:0e:0b:d3:09:47:09:5d:
3f:73:ba:6a:e9:d9:36:66:42:be:5e:36:10:9e:63:
18:0a:1f:5d:59:77:60:1b:01:a0:e4:0f:32:f2:f8:
ef:97:5f:bc:a0:c3:14:f8:b8:de:85:7d:9b:d0:29:
3b:6d:bd:f5:f7:51:70:83:1e:77:b4:3f:2e:54:67:
fd:66:81:4e:33:77:62:f7:8b:05:ee:85:e5:22:55:
d2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3B:A5:E1:8B:D8:B2:84:3F:F1:C7:C5:F7:CB:F0:CD:C2:D8:B5:1E
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2e:1a:c0:fd:d4:32:db:e6:ce:ee:0d:57:be:69:75:15:58:
31:43:61:c5:05:52:cb:de:4b:80:44:c8:bc:46:36:4f:03:c9:
dc:66:54:08:3f:2e:27:05:10:ac:3c:61:53:0a:12:fb:11:29:
e1:a8:41:12:80:20:d0:eb:25:72:70:6d:01:25:fe:ee:de:3f:
b2:9c:a3:ee:0c:60:17:83:98:2e:0a:bb:9b:d7:2f:1e:e7:83:
02:89:49:13:fd:86:47:ef:c5:b5:b1:bb:7e:97:de:43:0f:a0:
d4:a0:2f:23:f1:bd:96:e7:56:75:c7:44:57:ff:03:7a:61:7f:
01:b5:53:e9:78:9b:25:d8:b0:01:eb:37:e5:7d:6b:20:a7:9b:
bd:40:e0:18:94:ea:6b:a9:5b:39:fc:83:70:79:ba:ba:4c:24:
ec:da:ea:a8:c6:55:50:2d:ff:0d:9d:4f:7f:58:9d:e2:94:e9:
b3:15:a1:14:10:55:4c:19:46:d1:0c:79:59:cd:82:3e:90:db:
6b:38:43:51:8e:d8:79:3d:16:c6:97:38:c1:da:56:41:24:cd:
b4:85:03:c7:db:74:8c:a3:91:69:aa:4b:88:de:8a:2d:b0:2e:
e5:33:7a:c2:a1:fe:a9:bf:45:eb:eb:bf:11:33:39:32:10:dd:
1b:f9:5f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prGti3vIPDP1aaDgsjZe8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjODM1MjVkMTQyZmJmNGI5NGIzZDE2OTQ0NTM2NWM2NmRk
ZmRkZmQwHhcNMjYwNzI4MTcwMTE2WhcNMjYwNzI5MTcwMTE2WjAzMTEwLwYDVQQD
Eyg0MDNiYTVlMThiZDhiMjg0M2ZmMWM3YzVmN2NiZjBjZGMyZDhiNTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66BXZIeB1kBOZmnNu92vabNPWu/T
QesjuAkPwykajcepv6wrwDPuScRM2faJdNU2XA3c47VjfbtqhGEY5+v4Xf7Yzvc6
/j6PXXnbzPb5VEZmgq4y0ai3faZCZWsQjvJTNOo+7/z4w1Qtpt52XmMvlfKxfu22
GFAkQwMwmc5DYSjxvVDT55Os1Tk0DuSLcdr7oDmWo5s2y+/03hKgMkBkUSWoPeb0
0Gor1uRORg4L0wlHCV0/c7pq6dk2ZkK+XjYQnmMYCh9dWXdgGwGg5A8y8vjvl1+8
oMMU+LjehX2b0Ck7bb3191Fwgx53tD8uVGf9ZoFOM3di94sF7oXlIlXSzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEA7peGL2LKEP/HHxffL8M3C2LUeMB8GA1UdIwQY
MBaAFPyDUl0UL79LlLPRaURTZcZt3939MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQt
NjkyM2E3ZTYxYTZiLzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQtNjkyM2E3ZTYxYTZi
LzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeS4awP3U
Mtvmzu4NV75pdRVYMUNhxQVSy95LgETIvEY2TwPJ3GZUCD8uJwUQrDxhUwoS+xEp
4ahBEoAg0OslcnBtASX+7t4/spyj7gxgF4OYLgq7m9cvHueDAolJE/2GR+/FtbG7
fpfeQw+g1KAvI/G9ludWdcdEV/8DemF/AbVT6XibJdiwAes35X1rIKebvUDgGJTq
a6lbOfyDcHm6ukwk7NrqqMZVUC3/DZ1Pf1id4pTpsxWhFBBVTBlG0Qx5Wc2CPpDb
azhDUY7YeT0Wxpc4wdpWQSTNtIUDx9t0jKORaapLiN6KLbAu5TN6wqH+qb9F6+u/
ETM5MhDdG/lfwg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:48 2026 by rpki-client