Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
File: fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json)
Hash identifier: 7T1+PJJ2nJmOKIGv3w70jBoLKAcZk3dwRUFJUSSYXb0=
Subject key identifier: CA:EE:F5:95:A3:C6:0A:3E:D3:64:FA:33:C4:7E:D4:8E:D7:63:B1:BD
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Certificate issuer: /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial: 01A0CE911A1DB4BD53A1B3B2E5EDA088F3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
Manifest number: 17AB
Signing time: Wed 23 Sep 2026 14:00:10 +0000
Manifest this update: Wed 23 Sep 2026 14:00:10 +0000
Manifest next update: Thu 24 Sep 2026 14:00:10 +0000
Files and hashes: 1: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: YEI7efGRtsxrDNT8UyzrekPAgrZBRJ0fuUwi4uOtt9A=)
2: iS8uMVcfTxV4oFRPmDdhbpSZpws.roa (hash: MP/qvCm1sWW7tlIkjuMYgAfGTXxSGhkZeUhVHpOpueU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:1a:1d:b4:bd:53:a1:b3:b2:e5:ed:a0:88:f3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Validity
Not Before: Sep 23 14:00:10 2026 GMT
Not After : Sep 24 14:00:10 2026 GMT
Subject: CN=caeef595a3c60a3ed364fa33c47ed48ed763b1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6b:8e:bb:da:97:60:52:47:07:a8:66:ba:27:
96:48:7d:6c:e0:23:44:16:85:a5:2d:b9:0e:74:e4:
2c:80:c1:04:5e:22:f4:0a:6f:ca:71:1d:c6:f6:ec:
a8:a4:83:eb:67:b7:52:b0:d1:04:61:a2:95:42:72:
57:ff:67:73:4e:92:11:00:79:f6:c2:4d:16:b5:e4:
dc:58:1a:c7:c4:c1:50:2c:61:21:c8:50:11:2e:a2:
8f:a1:64:f5:6f:02:66:a4:82:6f:1c:28:c3:c5:bc:
04:06:66:65:f8:d2:b3:22:c4:df:fc:02:48:15:aa:
05:e9:c7:01:f7:f3:ca:04:e7:de:c3:54:98:46:cb:
1c:13:2b:d8:b7:74:6d:77:a6:92:60:8c:bc:df:4d:
fd:6f:d8:36:fb:a1:a3:5e:2b:3e:0b:7e:4d:48:75:
19:55:0e:c3:34:d6:c4:c6:97:88:a5:98:81:bc:be:
36:c8:94:9b:29:52:f1:a0:fa:98:36:35:b1:ec:09:
f5:c1:97:11:f8:b9:04:8b:af:de:a9:98:89:00:02:
7a:00:17:04:d8:a2:ff:4b:a2:90:99:05:34:2e:10:
e6:c8:2e:33:98:45:64:82:bc:4f:68:e7:33:fd:11:
0f:80:fa:8f:42:f1:16:36:c9:a5:d1:a5:f9:66:47:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:F5:95:A3:C6:0A:3E:D3:64:FA:33:C4:7E:D4:8E:D7:63:B1:BD
X509v3 Authority Key Identifier:
keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6b:b4:f1:a9:a4:d8:76:c9:fc:8c:ad:eb:d0:0a:55:7b:dc:
1d:af:09:6e:09:1c:28:a6:f8:f3:7e:72:90:b6:c5:4b:26:2a:
04:9b:4d:57:b0:04:33:d1:a7:f0:cc:fc:31:18:70:b0:28:fe:
20:fe:ea:4d:4a:29:eb:05:59:fa:01:f3:96:7c:ec:00:a4:28:
90:cc:a7:b8:d7:7b:5c:e3:d7:a2:52:9c:34:ed:45:89:90:e4:
e1:93:be:7d:41:45:b9:7a:24:27:2c:96:89:db:bb:c5:e2:20:
9a:fb:42:98:c1:70:6b:ea:7f:c9:54:0e:53:97:ee:ac:c1:94:
d9:e0:f9:2b:81:85:11:c5:e4:ef:bc:ce:44:0f:b4:db:be:f4:
84:32:54:6e:2b:af:76:ec:46:3b:c2:48:ed:6f:a3:05:f1:2a:
7f:dd:3b:22:94:78:8a:0a:ef:93:5e:06:ab:2e:d4:54:df:b9:
6f:e9:df:34:9e:89:b7:7b:8f:aa:2e:41:41:e2:0f:f5:ea:a4:
c1:35:a0:f4:fd:78:05:6a:2e:bb:fa:d6:a5:e7:46:25:2b:19:
28:2b:7c:40:ab:3e:ec:0f:d4:62:be:a5:07:cd:35:58:33:a6:
82:4a:54:1f:55:38:0a:1b:e3:31:c5:fc:de:50:a2:16:06:71:
b8:70:71:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkRodtL1TobOy5e2giPP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMWJjNThhZDk1ZGE3ODQ5MmI0MmQ4ODYzZDQ1ZThmNmFh
NmFhMjQwHhcNMjYwOTIzMTQwMDEwWhcNMjYwOTI0MTQwMDEwWjAzMTEwLwYDVQQD
EyhjYWVlZjU5NWEzYzYwYTNlZDM2NGZhMzNjNDdlZDQ4ZWQ3NjNiMWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GuOu9qXYFJHB6hmuieWSH1s4CNE
FoWlLbkOdOQsgMEEXiL0Cm/KcR3G9uyopIPrZ7dSsNEEYaKVQnJX/2dzTpIRAHn2
wk0WteTcWBrHxMFQLGEhyFARLqKPoWT1bwJmpIJvHCjDxbwEBmZl+NKzIsTf/AJI
FaoF6ccB9/PKBOfew1SYRsscEyvYt3Rtd6aSYIy83039b9g2+6GjXis+C35NSHUZ
VQ7DNNbExpeIpZiBvL42yJSbKVLxoPqYNjWx7An1wZcR+LkEi6/eqZiJAAJ6ABcE
2KL/S6KQmQU0LhDmyC4zmEVkgrxPaOcz/REPgPqPQvEWNsml0aX5ZkfoawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMru9ZWjxgo+02T6M8R+1I7XY7G9MB8GA1UdIwQY
MBaAFHwbxYrZXaeEkrQtiGPUXo9qpqokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQt
NTE3ZjZmZjNlNGY5LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQtNTE3ZjZmZjNlNGY5
LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2u08amk
2HbJ/Iyt69AKVXvcHa8JbgkcKKb4835ykLbFSyYqBJtNV7AEM9Gn8Mz8MRhwsCj+
IP7qTUop6wVZ+gHzlnzsAKQokMynuNd7XOPXolKcNO1FiZDk4ZO+fUFFuXokJyyW
idu7xeIgmvtCmMFwa+p/yVQOU5furMGU2eD5K4GFEcXk77zORA+02770hDJUbiuv
duxGO8JI7W+jBfEqf907IpR4igrvk14Gqy7UVN+5b+nfNJ6Jt3uPqi5BQeIP9eqk
wTWg9P14BWouu/rWpedGJSsZKCt8QKs+7A/UYr6lB801WDOmgkpUH1U4ChvjMcX8
3lCiFgZxuHBxGw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:21:12 2026 by rpki-client