Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: ZNaqIhjikCkilBry90BE3xAe1Bum8aAewSg2Z2fMs2E=
Subject key identifier: 31:4C:32:97:44:A2:82:60:9A:86:CC:3A:ED:84:CF:63:BA:6D:DC:58
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 01A0CE24EAF88D20F3E283F5D157E6630A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0FA0
Signing time: Wed 23 Sep 2026 12:02:00 +0000
Manifest this update: Wed 23 Sep 2026 12:02:00 +0000
Manifest next update: Thu 24 Sep 2026 12:02:00 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: zoStz3W6nuyneyI9W/2q31A/6eODlVI78SsQx8xtRq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:ea:f8:8d:20:f3:e2:83:f5:d1:57:e6:63:0a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Sep 23 12:02:00 2026 GMT
Not After : Sep 24 12:02:00 2026 GMT
Subject: CN=314c329744a282609a86cc3aed84cf63ba6ddc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:7f:17:17:7c:8a:03:45:50:72:8e:55:b5:
2a:69:06:e5:9a:10:c4:91:c1:fd:76:ad:b9:9d:b1:
68:9b:25:f3:87:2b:36:13:b5:06:2a:ae:2f:c0:2c:
21:dd:0b:62:16:10:e5:c2:9b:de:e7:12:25:f2:22:
67:24:f4:7e:6c:2c:06:92:36:a8:e2:83:f4:a1:6a:
0e:00:95:28:81:ff:bd:a2:7f:d7:f7:17:32:35:86:
09:b6:0f:5e:04:b5:0c:c4:6e:72:77:91:7e:36:b7:
f9:0e:62:fb:9e:81:90:01:29:8c:36:65:44:84:27:
25:f8:5e:e7:46:92:5d:c5:48:f7:1e:05:cb:92:11:
ba:71:b0:b4:d9:0b:25:43:77:9f:c7:5d:bb:dc:aa:
12:98:cd:36:3b:f0:d2:de:c6:ea:90:b1:dd:ff:9f:
72:d5:78:db:c4:ad:5b:03:7a:6d:30:5c:d6:53:54:
ed:d0:b4:c2:6c:56:1a:8e:af:95:f0:ed:1b:0f:ef:
4e:31:bb:7d:4d:86:eb:0c:5e:69:eb:c9:3e:a6:32:
fa:87:98:2f:2e:03:cd:b4:14:68:59:bf:5f:4e:2c:
a1:4c:eb:67:5e:ef:c5:cc:6e:bf:e6:ea:9b:e6:81:
ee:eb:b5:03:73:82:d4:3f:23:56:10:66:e6:22:a0:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:32:97:44:A2:82:60:9A:86:CC:3A:ED:84:CF:63:BA:6D:DC:58
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cb:76:35:f2:f3:9e:9b:81:36:23:8f:70:29:ba:cd:b8:6f:
50:86:4f:6c:86:61:79:2e:b4:6e:15:f2:ff:9a:ec:69:66:33:
c1:66:cf:02:c5:20:a9:45:bf:b5:e1:3a:d8:52:da:1b:33:e0:
87:3f:5d:2b:3f:12:80:a9:cd:7e:bc:bc:ca:61:08:6a:83:85:
d2:c2:66:0b:99:dc:d6:07:60:ea:ac:ed:19:d5:db:c1:92:df:
df:e5:37:b0:9c:8d:cc:c4:d7:e1:ca:4f:c2:86:27:18:77:5d:
df:ce:0a:8b:18:cc:a9:54:5a:30:0e:c5:dd:2e:98:ab:62:3a:
ce:f6:f7:77:86:e9:3e:8b:26:b7:36:80:a5:fc:20:bb:e1:73:
e5:47:6c:ba:77:44:cf:e9:07:c8:33:ff:bb:95:7e:32:12:c3:
9a:a8:af:0f:a3:93:f8:b6:f4:94:25:8e:21:ef:47:7b:34:32:
51:7e:7a:f1:66:59:69:44:cb:e0:15:2c:80:3b:eb:48:e4:55:
08:16:59:2f:f7:67:45:ac:3d:b6:c3:65:ff:e1:75:dc:af:e9:
68:a5:3f:7e:84:b0:0e:d7:bb:70:84:50:dc:10:f0:d6:8f:3f:
1c:c4:25:6c:bb:2b:bd:74:f7:0e:b5:52:68:ec:f2:1e:87:80:
a7:42:1a:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOJOr4jSDz4oP10VfmYwpsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMjM4MGQ3NjRhOTYxMWRmZTJmYmMwY2UwY2M0MDQ5NmVj
MWU4M2UwHhcNMjYwOTIzMTIwMjAwWhcNMjYwOTI0MTIwMjAwWjAzMTEwLwYDVQQD
EygzMTRjMzI5NzQ0YTI4MjYwOWE4NmNjM2FlZDg0Y2Y2M2JhNmRkYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWV/Fxd8igNFUHKOVbUqaQblmhDE
kcH9dq25nbFomyXzhys2E7UGKq4vwCwh3QtiFhDlwpve5xIl8iJnJPR+bCwGkjao
4oP0oWoOAJUogf+9on/X9xcyNYYJtg9eBLUMxG5yd5F+Nrf5DmL7noGQASmMNmVE
hCcl+F7nRpJdxUj3HgXLkhG6cbC02QslQ3efx1273KoSmM02O/DS3sbqkLHd/59y
1XjbxK1bA3ptMFzWU1Tt0LTCbFYajq+V8O0bD+9OMbt9TYbrDF5p68k+pjL6h5gv
LgPNtBRoWb9fTiyhTOtnXu/FzG6/5uqb5oHu67UDc4LUPyNWEGbmIqARPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFMMpdEooJgmobMOu2Ez2O6bdxYMB8GA1UdIwQY
MBaAFHwjgNdkqWEd/i+8DODMQEluweg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMt
NWQ4Y2E2MzY4MWFkLzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMtNWQ4Y2E2MzY4MWFk
LzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjst2NfLz
npuBNiOPcCm6zbhvUIZPbIZheS60bhXy/5rsaWYzwWbPAsUgqUW/teE62FLaGzPg
hz9dKz8SgKnNfry8ymEIaoOF0sJmC5nc1gdg6qztGdXbwZLf3+U3sJyNzMTX4cpP
woYnGHdd384KixjMqVRaMA7F3S6Yq2I6zvb3d4bpPosmtzaApfwgu+Fz5UdsundE
z+kHyDP/u5V+MhLDmqivD6OT+Lb0lCWOIe9HezQyUX568WZZaUTL4BUsgDvrSORV
CBZZL/dnRaw9tsNl/+F13K/paKU/foSwDte7cIRQ3BDw1o8/HMQlbLsrvXT3DrVS
aOzyHoeAp0IahA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:14:19 2026 by rpki-client