Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
File: fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json)
Hash identifier: dxPjBOdGx4NP7fMXVjV0ntzmDstcqSSpqzGtb1wZ728=
Subject key identifier: 83:53:42:F0:EE:3A:DE:1C:55:BF:23:80:FA:9F:BC:A5:AF:D8:D7:6A
Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Certificate serial: 019EC06D7AC09659678FADE289AA34EF66B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
Manifest number: 0343
Signing time: Sat 13 Jun 2026 10:01:00 +0000
Manifest this update: Sat 13 Jun 2026 10:01:00 +0000
Manifest next update: Sun 14 Jun 2026 10:01:00 +0000
Files and hashes: 1: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: bl7Dj8BHS0PAQGbjZsqC4IfoKquhk8BBhIuw0yXk2YU=)
2: hhYndYmrtj6UVK4MXLjISC5kjY8.roa (hash: Hp6kG7ylNYSrFI+JCOb5ieLSxf03lMDks7YDXEs5v7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:7a:c0:96:59:67:8f:ad:e2:89:aa:34:ef:66:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Validity
Not Before: Jun 13 10:01:00 2026 GMT
Not After : Jun 14 10:01:00 2026 GMT
Subject: CN=835342f0ee3ade1c55bf2380fa9fbca5afd8d76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:b7:e9:0e:4f:c1:33:0b:89:1a:e0:d3:17:
37:6c:5e:07:63:8f:27:3d:46:ed:01:ed:49:d9:30:
3f:70:72:4b:85:ad:ba:0c:24:fa:ff:76:6d:a5:35:
56:34:d8:d4:ff:2f:36:e5:51:b5:71:dc:2c:57:54:
f1:a8:4a:06:91:d8:4f:f9:18:64:81:74:e4:c5:ca:
c3:01:fa:22:df:2c:49:1c:35:fa:64:d0:40:9d:76:
75:a3:e3:5a:cf:36:da:8f:22:04:f2:95:42:24:84:
c1:54:40:3e:57:55:77:cb:57:64:9f:62:02:db:8f:
9e:99:fb:7a:5d:9f:f3:fd:df:9c:2e:58:d5:88:5b:
c7:0f:f5:51:ff:57:0b:f9:39:62:14:eb:e0:8f:94:
9d:c0:da:d7:30:f6:87:a2:09:dc:cd:7d:e3:07:79:
5e:d1:60:96:04:97:7d:d8:36:e7:24:28:f1:1b:48:
91:03:51:32:ae:03:36:01:6c:0b:c7:bb:20:31:a7:
22:15:9d:2e:b0:9a:2e:63:aa:70:d7:01:26:fe:a2:
28:01:08:48:f9:89:99:4d:ca:cb:80:ab:01:e3:ff:
11:ec:06:65:93:99:17:5d:89:11:31:65:f4:86:b8:
22:54:93:24:cb:02:92:01:78:02:6d:8a:97:8c:e8:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:53:42:F0:EE:3A:DE:1C:55:BF:23:80:FA:9F:BC:A5:AF:D8:D7:6A
X509v3 Authority Key Identifier:
keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:37:ba:5e:03:a2:df:4f:fd:53:bb:d6:9d:d6:c0:e5:86:12:
e5:48:13:9b:1c:9c:5a:c5:7b:aa:a2:a2:0b:90:e4:19:ff:da:
da:26:9b:33:a2:e3:06:d2:6a:fd:9d:e9:99:84:d2:30:c1:77:
4a:06:48:4b:5d:c3:ca:0f:8e:61:01:59:cc:08:7a:89:47:16:
f7:7f:99:df:14:ba:3a:b4:f1:07:67:03:09:a4:e8:29:c7:c9:
cb:20:e4:ed:d3:9a:cc:a8:ac:f8:2d:ed:cb:c3:4e:9e:c4:a9:
0b:c6:3e:a0:0f:5c:67:60:3e:d7:78:c5:8c:ea:cf:2e:74:a8:
87:35:6d:9c:ab:ca:3a:07:6b:49:d1:5a:46:1f:83:ad:12:05:
5f:d0:dd:c7:b9:92:c4:d2:b9:05:86:45:1f:71:7c:2e:9c:1a:
41:d4:2f:30:96:45:28:d8:7d:95:1e:35:54:7c:32:4c:04:51:
a1:a7:39:7f:85:87:04:45:36:5b:7f:8c:39:fb:d9:dd:31:57:
b0:6b:d9:6e:eb:52:58:80:ef:dd:ac:6c:82:5f:b6:e7:c3:be:
bd:5f:77:5a:3a:b6:f9:f9:bb:4e:69:6b:60:89:c4:0a:7c:b8:
da:21:9e:f7:88:cc:61:cd:7f:fa:1e:5d:e3:b8:96:2e:0a:30:
b5:81:fb:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbXrAlllnj63iiao072a1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZDFiYzcwMDkwNWQxYWM2ZDc3MzNhZWJjMzI2M2U2YWU3
NmZhOTcwHhcNMjYwNjEzMTAwMTAwWhcNMjYwNjE0MTAwMTAwWjAzMTEwLwYDVQQD
Eyg4MzUzNDJmMGVlM2FkZTFjNTViZjIzODBmYTlmYmNhNWFmZDhkNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvu36Q5PwTMLiRrg0xc3bF4HY48n
PUbtAe1J2TA/cHJLha26DCT6/3ZtpTVWNNjU/y825VG1cdwsV1TxqEoGkdhP+Rhk
gXTkxcrDAfoi3yxJHDX6ZNBAnXZ1o+NazzbajyIE8pVCJITBVEA+V1V3y1dkn2IC
24+emft6XZ/z/d+cLljViFvHD/VR/1cL+TliFOvgj5SdwNrXMPaHognczX3jB3le
0WCWBJd92DbnJCjxG0iRA1EyrgM2AWwLx7sgMaciFZ0usJouY6pw1wEm/qIoAQhI
+YmZTcrLgKsB4/8R7AZlk5kXXYkRMWX0hrgiVJMkywKSAXgCbYqXjOhR9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINTQvDuOt4cVb8jgPqfvKWv2NdqMB8GA1UdIwQY
MBaAFHzRvHAJBdGsbXczrrwyY+audvqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYt
ZmNlOWUyYmY0ZWY5LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYtZmNlOWUyYmY0ZWY5
LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaze6XgOi
30/9U7vWndbA5YYS5UgTmxycWsV7qqKiC5DkGf/a2iabM6LjBtJq/Z3pmYTSMMF3
SgZIS13Dyg+OYQFZzAh6iUcW93+Z3xS6OrTxB2cDCaToKcfJyyDk7dOazKis+C3t
y8NOnsSpC8Y+oA9cZ2A+13jFjOrPLnSohzVtnKvKOgdrSdFaRh+DrRIFX9Ddx7mS
xNK5BYZFH3F8LpwaQdQvMJZFKNh9lR41VHwyTARRoac5f4WHBEU2W3+MOfvZ3TFX
sGvZbutSWIDv3axsgl+258O+vV93Wjq2+fm7TmlrYInECny42iGe94jMYc1/+h5d
47iWLgowtYH7Eg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:52 2026 by rpki-client