Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
File: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft (raw, json)
Hash identifier: x4QQpBhNYHM1z5paQV9XRJlMcgmazhOOryOhXo1o06g=
Subject key identifier: 40:FA:26:A8:F5:B6:4D:7A:DF:4D:00:79:9C:0A:AE:5A:D0:FC:E6:E6
Authority key identifier: 15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
Certificate issuer: /CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Certificate serial: 01A0C2202201E4FE977DDC9071504CAA46BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 04:01:20 +0000
Manifest this update: Mon 21 Sep 2026 04:01:20 +0000
Manifest next update: Tue 22 Sep 2026 04:01:20 +0000
Files and hashes: 1: FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl (hash: ITpPFO9a15ic4vfG4ZEwbXQ3GVDs2rUZd7OxWJ5JqiQ=)
2: SoqrwvBIu0WD7xvFCRrQj5ER8Ck.roa (hash: u3RjjkaVFf/cQV+4yoRBPleDxt+ksRUQRSNCbsoYFqU=)
3: o2BsiGmifOXsbzzselyesyO7SIE.roa (hash: iLy0PC6zZs7wpX+RqnK0/QjsSwHsSWbMfjlQkWuiJ5w=)
4: rSs3oBRQGKpWvbw6FOXRc6TOFLk.roa (hash: n8/JUrk12IuY4WimjIBxh1VJWwxTjOVeSQL6bKZGVyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:20:22:01:e4:fe:97:7d:dc:90:71:50:4c:aa:46:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1517d4f58af84f50ce42f13293ede4aff12d173f
Validity
Not Before: Sep 21 04:01:20 2026 GMT
Not After : Sep 22 04:01:20 2026 GMT
Subject: CN=40fa26a8f5b64d7adf4d00799c0aae5ad0fce6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:1a:9f:0d:9a:12:d8:09:d4:1b:f2:0b:2f:
29:ca:81:3f:db:77:da:49:24:6f:55:74:d1:17:22:
d2:9b:64:b6:fe:f5:12:42:46:e2:6f:4b:f2:68:9d:
79:33:a4:ce:ef:73:8c:37:a5:33:ac:89:eb:6a:cf:
df:89:5a:ce:46:d2:78:d5:2a:36:d5:67:2c:ad:ec:
3f:d1:1f:98:48:b2:d1:db:db:17:1b:52:62:de:31:
a9:9a:59:82:24:b9:b3:c0:72:ce:d6:c3:07:cd:73:
dc:e8:0d:96:99:ce:a8:5d:8c:f0:63:02:7d:eb:96:
ed:ca:d8:fa:a0:bd:f0:80:3f:ae:c9:d4:62:a7:0c:
a5:77:ac:8c:c6:7f:13:9b:0f:88:99:c9:2f:be:f4:
e0:a8:6e:d1:45:31:07:3a:9e:2f:11:4f:ef:55:e1:
6b:c0:54:46:d0:fe:05:61:a6:0e:c6:eb:9b:b0:99:
50:a9:19:ad:82:96:48:b9:83:aa:7e:1a:b3:77:44:
b8:e6:ae:64:76:8c:8c:10:98:12:23:90:4b:46:0a:
60:09:51:58:2d:d5:fe:31:82:e2:4c:47:28:02:77:
ad:02:7f:a1:8a:ee:9e:17:a9:0d:27:35:d6:36:61:
ca:0f:3d:40:53:cb:a2:a7:c3:14:15:d6:62:9a:48:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FA:26:A8:F5:B6:4D:7A:DF:4D:00:79:9C:0A:AE:5A:D0:FC:E6:E6
X509v3 Authority Key Identifier:
keyid:15:17:D4:F5:8A:F8:4F:50:CE:42:F1:32:93:ED:E4:AF:F1:2D:17:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c4f80c-7b69-4fec-aa54-e5f98ddafc98/1/FRfU9Yr4T1DOQvEyk-3kr_EtFz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5c:26:af:77:a3:af:f0:b3:48:d9:82:84:8f:3f:93:d8:71:
58:26:69:27:5c:5f:ae:b7:f8:dc:76:c2:87:ed:bf:3c:a3:d8:
05:92:e9:76:d7:ef:d4:44:8c:80:d4:a3:09:a5:dd:38:5f:7b:
8c:0c:cf:d7:1b:62:6a:7a:99:36:c9:d9:55:8a:b4:db:f9:9f:
45:4e:fe:62:d3:97:7f:e5:f2:a6:9c:18:2e:5d:43:ac:7d:d8:
15:18:99:40:b7:2c:79:7d:72:ee:b9:9c:7a:aa:0a:9f:f7:ef:
5d:e8:71:ff:a9:1d:34:c5:2a:23:bd:cc:ad:58:75:9d:a7:13:
bd:89:e0:ba:e7:d8:d3:f3:81:42:38:15:8d:99:2a:de:f1:5d:
f9:8f:d8:cb:9d:89:17:1a:0b:c9:90:17:11:dd:d9:56:cd:d4:
f0:e9:97:ba:bb:04:6e:18:fd:02:23:74:c3:01:76:67:12:5c:
27:1c:5b:6a:cf:b1:a0:07:25:08:cb:12:fa:ca:4f:e8:98:5e:
4a:41:cb:d2:30:29:e4:28:c9:36:5b:27:76:7b:01:f8:aa:78:
57:88:17:8e:d4:29:4a:a0:d5:0b:e5:d8:25:e2:70:c3:16:46:
69:0a:e8:7d:4d:2b:a0:88:55:f2:02:b9:aa:7b:4f:1e:fb:2e:
d5:b2:d3:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCICIB5P6XfdyQcVBMqka8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTdkNGY1OGFmODRmNTBjZTQyZjEzMjkzZWRlNGFmZjEy
ZDE3M2YwHhcNMjYwOTIxMDQwMTIwWhcNMjYwOTIyMDQwMTIwWjAzMTEwLwYDVQQD
Eyg0MGZhMjZhOGY1YjY0ZDdhZGY0ZDAwNzk5YzBhYWU1YWQwZmNlNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8kanw2aEtgJ1BvyCy8pyoE/23fa
SSRvVXTRFyLSm2S2/vUSQkbib0vyaJ15M6TO73OMN6UzrInras/fiVrORtJ41So2
1Wcsrew/0R+YSLLR29sXG1Ji3jGpmlmCJLmzwHLO1sMHzXPc6A2Wmc6oXYzwYwJ9
65btytj6oL3wgD+uydRipwyld6yMxn8Tmw+ImckvvvTgqG7RRTEHOp4vEU/vVeFr
wFRG0P4FYaYOxuubsJlQqRmtgpZIuYOqfhqzd0S45q5kdoyMEJgSI5BLRgpgCVFY
LdX+MYLiTEcoAnetAn+hiu6eF6kNJzXWNmHKDz1AU8uip8MUFdZimkhSLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED6Jqj1tk16300AeZwKrlrQ/ObmMB8GA1UdIwQY
MBaAFBUX1PWK+E9QzkLxMpPt5K/xLRc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQt
ZTVmOThkZGFmYzk4LzEvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jNGY4MGMtN2I2OS00ZmVjLWFhNTQtZTVmOThkZGFmYzk4
LzEvRlJmVTlZcjRUMURPUXZFeWstM2tyX0V0Rno4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1wmr3ej
r/CzSNmChI8/k9hxWCZpJ1xfrrf43HbCh+2/PKPYBZLpdtfv1ESMgNSjCaXdOF97
jAzP1xtianqZNsnZVYq02/mfRU7+YtOXf+XyppwYLl1DrH3YFRiZQLcseX1y7rmc
eqoKn/fvXehx/6kdNMUqI73MrVh1nacTvYnguufY0/OBQjgVjZkq3vFd+Y/Yy52J
FxoLyZAXEd3ZVs3U8OmXursEbhj9AiN0wwF2ZxJcJxxbas+xoAclCMsS+spP6Jhe
SkHL0jAp5CjJNlsndnsB+Kp4V4gXjtQpSqDVC+XYJeJwwxZGaQrofU0roIhV8gK5
qntPHvsu1bLTPg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:32:42 2026 by rpki-client