Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier: 9keGaD/msBcwR/v8/uWitw4+1FdHDdwbgXvTGgY0VBI=
Subject key identifier: D6:78:92:0E:07:02:9B:C4:57:54:D2:B0:01:C9:EC:E3:94:5B:37:F3
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 01A0C557971BC696A39BAF3F0D3C8066A257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number: 1203
Signing time: Mon 21 Sep 2026 19:00:46 +0000
Manifest this update: Mon 21 Sep 2026 19:00:46 +0000
Manifest next update: Tue 22 Sep 2026 19:00:46 +0000
Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: 3D6nmqQRuRtFZCHvav7rgT+2NEpW5UEd2pvXvLa38N0=)
2: tauHtMalszupNYYuBs8Guj0KLFg.roa (hash: gc2v8u+MqnwJxcknut+JafkulUVpld8Kb67/cVdhhLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:97:1b:c6:96:a3:9b:af:3f:0d:3c:80:66:a2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Sep 21 19:00:46 2026 GMT
Not After : Sep 22 19:00:46 2026 GMT
Subject: CN=d678920e07029bc45754d2b001c9ece3945b37f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:35:55:b5:9b:06:62:7f:78:66:c0:dc:cb:
a7:89:f2:94:9d:fb:a6:65:fd:e2:da:93:80:e2:e0:
20:56:d9:52:df:cd:c4:5a:e5:1b:f4:eb:28:e8:62:
02:82:b6:ad:5f:6c:d7:48:1a:67:1d:10:61:0e:2a:
67:13:e1:20:2a:aa:5c:4d:dd:dd:75:30:99:a3:b4:
52:36:70:52:58:ec:16:0b:c8:d4:8c:e3:29:28:ec:
36:9c:04:27:fc:47:16:2e:78:7d:67:1f:44:72:23:
a5:14:ff:2b:60:11:b7:ef:16:04:67:94:2e:e7:ef:
08:00:d1:72:83:af:d5:8e:8a:41:68:e4:ef:92:7c:
de:f2:d6:56:1d:e2:2e:77:33:ff:9d:22:bf:2a:d9:
3d:14:ba:d1:66:83:8f:d9:f1:27:6a:6d:c9:54:7a:
89:9c:37:4c:79:ca:57:b4:0a:dc:48:79:5c:b9:02:
73:12:9d:3c:0b:0f:29:24:95:1f:2e:e0:24:83:1c:
45:58:44:d0:bf:05:cd:82:00:b4:64:90:38:c8:73:
21:fe:61:25:bd:50:0c:61:5d:9a:fc:f3:b3:69:a6:
43:1b:06:7d:c0:93:f2:a6:2a:31:80:0d:3c:98:d0:
f0:47:13:03:29:ea:40:e5:46:a9:79:8d:ef:e5:f3:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:78:92:0E:07:02:9B:C4:57:54:D2:B0:01:C9:EC:E3:94:5B:37:F3
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9f:84:b9:a9:2e:85:85:cf:15:0e:f3:e0:13:e7:ce:1e:16:
52:8e:7f:7a:3f:c3:0f:e2:dc:f5:d7:17:a3:8c:e6:41:86:c9:
1d:53:a6:07:3d:8d:42:a3:1d:93:a3:92:a2:71:cd:11:dc:38:
9d:bb:c1:e8:fc:9e:7c:bc:30:d8:11:95:c7:53:3d:92:72:de:
ec:dc:57:c5:5d:80:c2:47:7b:5e:61:dc:30:a2:12:e0:3e:6a:
a6:6d:23:df:9f:99:af:17:ea:87:88:ed:75:54:e2:7e:47:20:
0a:ed:f8:6f:6f:78:02:98:25:4a:86:6f:a5:c6:23:d3:e8:71:
c2:75:6b:13:b4:28:6c:18:33:28:d0:25:6c:78:ad:4a:1a:a3:
cb:22:13:70:37:93:88:3b:cd:77:51:84:de:34:e7:20:b4:29:
05:65:50:e4:93:09:91:c0:fd:36:bd:07:e8:29:33:f6:ad:19:
de:ed:cf:22:ce:97:1e:a1:9e:79:63:c6:a0:ff:7c:27:bb:d5:
43:f5:c8:c8:fc:d2:f5:27:66:dc:40:52:e4:be:ad:7f:7b:fb:
b2:e0:53:2c:1f:a0:35:a2:43:4f:40:dc:95:d5:37:85:bf:05:
84:54:54:af:18:4b:f7:23:5d:03:61:ca:69:ff:f5:bd:b0:5b:
c7:5f:7e:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV5cbxpajm68/DTyAZqJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNDJkMjdjMjFkYTg2YzdlOWZiZjQ0YWUwZTU2Yzk4ZjNk
MmY4MGIwHhcNMjYwOTIxMTkwMDQ2WhcNMjYwOTIyMTkwMDQ2WjAzMTEwLwYDVQQD
EyhkNjc4OTIwZTA3MDI5YmM0NTc1NGQyYjAwMWM5ZWNlMzk0NWIzN2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwc1VbWbBmJ/eGbA3MunifKUnfum
Zf3i2pOA4uAgVtlS383EWuUb9Oso6GICgratX2zXSBpnHRBhDipnE+EgKqpcTd3d
dTCZo7RSNnBSWOwWC8jUjOMpKOw2nAQn/EcWLnh9Zx9EciOlFP8rYBG37xYEZ5Qu
5+8IANFyg6/VjopBaOTvknze8tZWHeIudzP/nSK/Ktk9FLrRZoOP2fEnam3JVHqJ
nDdMecpXtArcSHlcuQJzEp08Cw8pJJUfLuAkgxxFWETQvwXNggC0ZJA4yHMh/mEl
vVAMYV2a/POzaaZDGwZ9wJPypioxgA08mNDwRxMDKepA5UapeY3v5fOzyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZ4kg4HApvEV1TSsAHJ7OOUWzfzMB8GA1UdIwQY
MBaAFH9C0nwh2obH6fv0SuDlbJjz0vgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTkt
MGFmYjdjM2ZiZjMwLzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTktMGFmYjdjM2ZiZjMw
LzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJ+Euaku
hYXPFQ7z4BPnzh4WUo5/ej/DD+Lc9dcXo4zmQYbJHVOmBz2NQqMdk6OSonHNEdw4
nbvB6PyefLww2BGVx1M9knLe7NxXxV2Awkd7XmHcMKIS4D5qpm0j35+Zrxfqh4jt
dVTifkcgCu34b294ApglSoZvpcYj0+hxwnVrE7QobBgzKNAlbHitShqjyyITcDeT
iDvNd1GE3jTnILQpBWVQ5JMJkcD9Nr0H6Ckz9q0Z3u3PIs6XHqGeeWPGoP98J7vV
Q/XIyPzS9Sdm3EBS5L6tf3v7suBTLB+gNaJDT0DcldU3hb8FhFRUrxhL9yNdA2HK
af/1vbBbx19+rA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:51:59 2026 by rpki-client