Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: imOoPfS563S2NPs8YOU2+TFOByoTj/DR39d1N8dd0qs=
Subject key identifier: F0:17:C6:B4:94:69:E7:9B:15:8F:07:CE:EB:9E:51:3C:92:01:8E:5E
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 01A15C6807389B6A03422306C7B208D2CE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 138D
Signing time: Wed 21 Oct 2026 03:01:23 +0000
Manifest this update: Wed 21 Oct 2026 03:01:23 +0000
Manifest next update: Thu 22 Oct 2026 03:01:23 +0000
Files and hashes: 1: MSIj_pvmmWV611TPzznzhVyMajg.roa (hash: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: CaKcbMF+U6/Tl8PnSZlKzZrCVo84wJSFlgW60u6O9o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:68:07:38:9b:6a:03:42:23:06:c7:b2:08:d2:ce:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Oct 21 03:01:23 2026 GMT
Not After : Oct 22 03:01:23 2026 GMT
Subject: CN=f017c6b49469e79b158f07ceeb9e513c92018e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:9c:b3:97:d2:6c:33:78:df:fa:48:f6:82:
91:9b:f3:3a:ea:06:c0:1b:b1:a0:87:7e:e4:35:3b:
f6:3c:f3:85:6e:0c:b5:9d:1a:e1:b5:c1:2b:94:43:
de:f9:29:17:3d:c4:df:93:a4:72:79:77:84:e1:47:
66:ef:b1:34:15:98:93:a1:ea:89:c4:c7:35:07:9d:
f8:3f:ba:d2:c1:40:2f:45:5b:d6:07:4b:27:38:11:
73:e6:72:b5:a6:5e:93:c1:6c:fd:fa:dc:04:89:46:
03:74:57:64:b5:8c:19:e0:30:1c:18:a8:3d:94:43:
5b:df:b9:76:ae:13:b1:a6:4d:28:b5:71:e2:e4:39:
45:d9:4f:3d:de:e8:64:22:c6:bd:27:79:ba:f9:5b:
15:a0:67:a0:14:fd:75:96:6c:96:c6:33:b2:1b:d7:
f7:9c:f5:4d:ff:73:97:53:cd:b9:62:4b:fe:e5:18:
06:11:44:cd:f0:30:37:c3:ea:d6:6a:9c:d1:ec:91:
75:8b:9d:84:48:e0:2a:af:c4:0d:d3:ad:07:77:03:
1c:16:c2:bd:1b:2d:0d:fa:e9:20:48:63:15:b0:24:
34:3c:25:19:bd:39:90:04:7d:6d:e8:43:97:a2:06:
78:8e:5c:9a:fc:c1:f7:0d:5f:66:2b:ee:3d:62:5e:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:17:C6:B4:94:69:E7:9B:15:8F:07:CE:EB:9E:51:3C:92:01:8E:5E
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2d:e5:80:b8:f8:f7:91:cc:ab:2a:64:aa:49:cc:95:00:45:
34:38:55:51:5d:91:05:cf:a5:a6:54:8d:93:12:3b:b7:7e:d1:
38:ce:1b:b7:fb:cc:d2:b5:c9:49:ea:3f:0f:47:e9:07:6f:d8:
22:92:9f:25:d0:3e:09:f7:ed:23:98:f9:fb:6e:82:11:93:a7:
78:d0:7d:a6:c7:78:9a:2d:71:16:84:42:4c:72:d4:a2:8c:50:
2a:0a:2b:99:11:35:5e:fb:41:e4:2b:3f:03:4d:11:26:99:83:
5d:51:4e:73:7b:66:38:3d:11:cc:38:62:a9:34:e0:c0:6a:e8:
30:b7:eb:89:db:e5:87:9c:10:c1:ae:f7:51:2f:ba:1b:67:d8:
42:92:be:da:e9:46:a7:2f:6e:10:7d:d2:7c:a5:42:05:92:2b:
e9:0f:90:6b:0b:f0:21:23:3e:21:16:ab:28:a7:72:3d:33:db:
59:48:2e:67:c2:8a:88:64:07:a8:32:e4:6a:25:f1:2b:e0:d4:
85:e2:a4:22:da:c3:79:99:ca:e5:74:39:14:90:5e:06:f8:20:
07:2e:45:75:19:b7:54:b3:7e:24:b7:e1:a2:f0:cf:a7:ef:76:
30:d7:69:a0:4b:a9:cb:37:c0:12:18:59:3a:47:97:4d:5b:1e:
d8:1c:d6:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFcaAc4m2oDQiMGx7II0s4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjZkMTllNTM4OGYxMmMxZDI4YTE2YzMyOGQ4NmMzNjRl
OWNjNzkwHhcNMjYxMDIxMDMwMTIzWhcNMjYxMDIyMDMwMTIzWjAzMTEwLwYDVQQD
EyhmMDE3YzZiNDk0NjllNzliMTU4ZjA3Y2VlYjllNTEzYzkyMDE4ZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUCcs5fSbDN43/pI9oKRm/M66gbA
G7Ggh37kNTv2PPOFbgy1nRrhtcErlEPe+SkXPcTfk6RyeXeE4Udm77E0FZiToeqJ
xMc1B534P7rSwUAvRVvWB0snOBFz5nK1pl6TwWz9+twEiUYDdFdktYwZ4DAcGKg9
lENb37l2rhOxpk0otXHi5DlF2U893uhkIsa9J3m6+VsVoGegFP11lmyWxjOyG9f3
nPVN/3OXU825Ykv+5RgGEUTN8DA3w+rWapzR7JF1i52ESOAqr8QN060HdwMcFsK9
Gy0N+ukgSGMVsCQ0PCUZvTmQBH1t6EOXogZ4jlya/MH3DV9mK+49Yl45UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAXxrSUaeebFY8HzuueUTySAY5eMB8GA1UdIwQY
MBaAFH1m0Z5TiPEsHSihbDKNhsNk6cx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQt
ZjBkMDc1YTQzN2YxLzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQtZjBkMDc1YTQzN2Yx
LzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAey3lgLj4
95HMqypkqknMlQBFNDhVUV2RBc+lplSNkxI7t37ROM4bt/vM0rXJSeo/D0fpB2/Y
IpKfJdA+CfftI5j5+26CEZOneNB9psd4mi1xFoRCTHLUooxQKgormRE1XvtB5Cs/
A00RJpmDXVFOc3tmOD0RzDhiqTTgwGroMLfridvlh5wQwa73US+6G2fYQpK+2ulG
py9uEH3SfKVCBZIr6Q+QawvwISM+IRarKKdyPTPbWUguZ8KKiGQHqDLkaiXxK+DU
heKkItrDeZnK5XQ5FJBeBvggBy5FdRm3VLN+JLfhovDPp+92MNdpoEupyzfAEhhZ
OkeXTVse2BzWZg==
-----END CERTIFICATE-----
Generated at Wed Oct 21 05:43:28 2026 by rpki-client