Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
File: FEz3GmQFf4aSkG29men2hEB9boA.mft (raw, json)
Hash identifier: zoRAlB3+GJSfCAwyQWNdu4Imu8BrkzcYSM6TF7bhg5U=
Subject key identifier: BA:00:51:C9:EB:FE:48:C9:D9:5C:71:DB:CB:A6:D7:3F:A1:AF:6E:07
Authority key identifier: 14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
Certificate issuer: /CN=144cf71a64057f8692906dbd99e9f684407d6e80
Certificate serial: 01A0C70EB7EB37840C58E2ADF14B5F15BDB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
Manifest number: 0209
Signing time: Tue 22 Sep 2026 03:00:25 +0000
Manifest this update: Tue 22 Sep 2026 03:00:25 +0000
Manifest next update: Wed 23 Sep 2026 03:00:25 +0000
Files and hashes: 1: FEz3GmQFf4aSkG29men2hEB9boA.crl (hash: AdiYPjXFVJSLp8HqO4w6Z1qxJjjbwQ0GzKPLneYs+oA=)
2: V7cyqG-pYyAMULVUem9DUD4mh5Y.roa (hash: NfpPyZF7G0X8PIMTTllt/U0ECaL4KgW7SFDL7u8msig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:b7:eb:37:84:0c:58:e2:ad:f1:4b:5f:15:bd:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144cf71a64057f8692906dbd99e9f684407d6e80
Validity
Not Before: Sep 22 03:00:25 2026 GMT
Not After : Sep 23 03:00:25 2026 GMT
Subject: CN=ba0051c9ebfe48c9d95c71dbcba6d73fa1af6e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:df:aa:66:40:05:77:24:37:1c:fd:31:77:
48:b4:37:95:db:ec:bd:28:d3:e9:32:48:82:d4:e3:
53:cb:82:0c:b5:d2:c9:a5:9b:9f:0c:73:7a:1a:c7:
23:d9:f4:60:9e:f9:5c:d2:4f:83:fb:0d:1a:94:49:
2b:1c:52:3e:44:33:88:e0:16:86:cf:3c:92:c2:7a:
d1:16:f9:df:bf:85:ac:d0:74:34:e0:14:ac:3f:cd:
bc:c4:d4:d4:c6:48:19:37:2e:83:a8:e6:7c:71:09:
42:3d:b6:51:b7:40:54:8b:cb:4d:b3:56:ca:43:45:
79:cd:36:c5:db:28:a8:4c:78:a0:d0:ec:1c:12:96:
50:65:a3:28:d5:60:89:85:20:df:93:22:08:f0:9c:
d9:33:6d:c0:94:25:51:7f:23:08:f7:fe:62:d2:d2:
ea:3b:19:7f:89:94:3a:9b:cf:7b:5e:1b:24:a0:e8:
3f:9d:33:1f:50:30:ec:7a:45:65:7e:0d:c4:37:1b:
26:7a:cc:18:93:57:43:99:db:43:cc:64:19:fa:ef:
dc:ba:34:f5:94:a1:e9:65:6f:d6:32:5a:03:4d:03:
14:c7:bc:c5:43:ea:bb:e1:ce:07:7f:c8:df:31:f4:
41:6b:6a:d5:b4:a4:fc:20:6d:a5:17:ef:66:1e:3f:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:00:51:C9:EB:FE:48:C9:D9:5C:71:DB:CB:A6:D7:3F:A1:AF:6E:07
X509v3 Authority Key Identifier:
keyid:14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f4:80:4b:c0:80:42:4f:e5:e9:85:83:bb:79:25:73:96:ba:
a8:bf:5d:07:a6:02:7f:4b:88:ff:a3:14:6d:e6:47:eb:8e:74:
e2:ea:8c:a7:64:3c:34:47:c8:61:5c:6d:35:ca:db:ab:d4:f1:
3e:fc:71:15:8e:86:fd:c3:91:eb:99:67:22:1f:8b:93:d9:73:
91:dd:ae:65:ff:20:cf:cd:30:07:b2:85:ae:61:98:81:35:b8:
b3:d3:a1:75:af:8c:ed:28:19:6a:95:a1:66:d4:e2:17:cc:4d:
9a:3e:a5:dc:40:74:ee:82:41:19:b1:b1:73:0f:41:3f:d4:91:
83:63:6a:b8:65:ef:51:0a:14:19:04:1c:89:08:91:cd:84:ca:
3a:da:43:1f:70:e0:14:2e:4a:5d:3e:f8:66:20:44:f1:8e:4a:
1c:57:4e:73:61:5c:5c:16:1c:45:5d:7e:1f:f0:8e:ca:b9:ab:
95:58:8d:f4:c9:70:53:6f:4c:ad:b0:1c:c0:e6:65:eb:fc:a5:
d6:f6:ca:e6:c2:eb:7e:e2:7a:f0:ab:ef:5c:41:10:a5:eb:09:
c9:5d:55:99:b5:9d:ae:d2:19:79:49:c1:d6:c0:09:ad:b6:20:
cc:78:6e:80:6a:e5:dc:c1:bf:c1:42:5c:43:6e:8c:87:ae:2d:
eb:14:a2:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHDrfrN4QMWOKt8UtfFb2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NGNmNzFhNjQwNTdmODY5MjkwNmRiZDk5ZTlmNjg0NDA3
ZDZlODAwHhcNMjYwOTIyMDMwMDI1WhcNMjYwOTIzMDMwMDI1WjAzMTEwLwYDVQQD
EyhiYTAwNTFjOWViZmU0OGM5ZDk1YzcxZGJjYmE2ZDczZmExYWY2ZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpDfqmZABXckNxz9MXdItDeV2+y9
KNPpMkiC1ONTy4IMtdLJpZufDHN6Gscj2fRgnvlc0k+D+w0alEkrHFI+RDOI4BaG
zzySwnrRFvnfv4Ws0HQ04BSsP828xNTUxkgZNy6DqOZ8cQlCPbZRt0BUi8tNs1bK
Q0V5zTbF2yioTHig0OwcEpZQZaMo1WCJhSDfkyII8JzZM23AlCVRfyMI9/5i0tLq
Oxl/iZQ6m897XhskoOg/nTMfUDDsekVlfg3ENxsmeswYk1dDmdtDzGQZ+u/cujT1
lKHpZW/WMloDTQMUx7zFQ+q74c4Hf8jfMfRBa2rVtKT8IG2lF+9mHj+5dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoAUcnr/kjJ2Vxx28um1z+hr24HMB8GA1UdIwQY
MBaAFBRM9xpkBX+GkpBtvZnp9oRAfW6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkV6M0dtUUZmNGFTa0cyOW1lbjJoRUI5Ym9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xNDBkMDQtY2FmYi00NmUzLThjZmEt
YjA1Y2RlOTNkOGU1LzEvRkV6M0dtUUZmNGFTa0cyOW1lbjJoRUI5Ym9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xNDBkMDQtY2FmYi00NmUzLThjZmEtYjA1Y2RlOTNkOGU1
LzEvRkV6M0dtUUZmNGFTa0cyOW1lbjJoRUI5Ym9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/SAS8CA
Qk/l6YWDu3klc5a6qL9dB6YCf0uI/6MUbeZH64504uqMp2Q8NEfIYVxtNcrbq9Tx
PvxxFY6G/cOR65lnIh+Lk9lzkd2uZf8gz80wB7KFrmGYgTW4s9Ohda+M7SgZapWh
ZtTiF8xNmj6l3EB07oJBGbGxcw9BP9SRg2NquGXvUQoUGQQciQiRzYTKOtpDH3Dg
FC5KXT74ZiBE8Y5KHFdOc2FcXBYcRV1+H/COyrmrlViN9MlwU29MrbAcwOZl6/yl
1vbK5sLrfuJ68KvvXEEQpesJyV1VmbWdrtIZeUnB1sAJrbYgzHhugGrl3MG/wUJc
Q26Mh64t6xSiAQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:20:28 2026 by rpki-client