Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier: Dp99TEoytwVXBVcpJDq+ceyFt16XocgI0RA9KjVe/gk=
Subject key identifier: C2:0E:AF:5A:4E:40:11:66:46:09:44:DB:C6:75:67:FF:26:57:B5:8B
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial: 01A0EA4002DD6C933DA1002156075769A39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number: 1A0B
Signing time: Mon 28 Sep 2026 23:00:58 +0000
Manifest this update: Mon 28 Sep 2026 23:00:58 +0000
Manifest next update: Tue 29 Sep 2026 23:00:58 +0000
Files and hashes: 1: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: kvgKYUQIfiowuKiYXWmw3ffUowBbzy/bA7uMUjZwek0=)
2: uuyf9SL1IzQsxC4GwsHv2Aqvi6I.roa (hash: bWBF8Lzkc1fXhVOcL+v1lM3xBjFclLxIjyc/HWhj0fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:02:dd:6c:93:3d:a1:00:21:56:07:57:69:a3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Validity
Not Before: Sep 28 23:00:58 2026 GMT
Not After : Sep 29 23:00:58 2026 GMT
Subject: CN=c20eaf5a4e401166460944dbc67567ff2657b58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:8f:5e:81:c7:df:5c:67:fc:0a:99:03:d9:
35:14:6e:13:ea:2e:02:d5:c6:f3:2b:20:22:32:15:
56:af:c9:ac:cb:ff:89:ab:03:e4:12:72:c9:6e:48:
af:c2:c6:51:b9:48:d9:e3:fa:8f:8a:5f:87:a6:29:
d5:97:a2:64:dc:55:1a:63:29:1d:0c:b5:1c:90:b3:
c6:1e:4a:61:2b:50:29:34:11:51:af:e8:cc:a8:ac:
b0:a1:b5:04:79:19:d3:6c:12:98:df:cb:e7:f1:7f:
d1:c6:de:46:09:97:69:48:58:41:a8:1e:35:74:2d:
91:3a:43:b4:db:fa:c5:54:38:b0:34:3f:32:1e:b8:
d7:2a:fa:b6:b5:fd:6f:c1:75:4f:c1:0d:29:74:f3:
dc:76:91:c9:d2:be:39:a7:00:c0:f8:d1:29:51:17:
de:91:57:37:31:66:2c:fd:85:fc:07:11:2b:4a:2a:
d9:91:78:5c:24:85:f2:5a:ec:40:05:33:f3:13:51:
57:2c:5d:ef:26:e4:3c:af:e1:15:63:d4:e5:71:41:
ea:e2:29:24:8f:24:94:26:92:4b:89:bf:16:02:25:
60:16:d1:7e:2f:3c:20:62:17:a3:70:62:e2:1b:32:
ea:d4:27:ea:b8:6d:a4:e1:78:60:67:f8:fa:d0:27:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0E:AF:5A:4E:40:11:66:46:09:44:DB:C6:75:67:FF:26:57:B5:8B
X509v3 Authority Key Identifier:
keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1b:b8:49:52:21:55:94:2d:f2:c8:62:2b:67:4c:7e:37:91:
0f:e3:0e:4a:9b:4f:cc:c8:a9:16:02:e0:b4:a1:91:76:e3:fb:
e3:25:d1:64:f6:d3:8d:16:e8:7a:75:ca:c7:5b:93:ca:ac:05:
cf:b5:18:68:af:99:b8:6f:68:84:c2:90:3b:ca:f5:26:d9:38:
44:b8:26:65:f4:3a:d7:a0:0e:8e:1a:b8:24:11:4e:f2:f1:73:
33:e3:80:c2:ea:73:44:97:e7:ea:3b:58:c7:c1:03:6a:9f:95:
c1:18:c6:5a:16:d0:08:49:ce:70:86:28:28:72:8c:90:33:1c:
31:1b:03:bd:7a:f7:66:63:0d:39:b8:f5:52:3a:17:eb:5f:ee:
a7:69:42:04:ca:a2:d0:9c:64:f7:c2:42:44:f7:d3:2b:9c:96:
88:2f:16:09:7c:12:28:ea:98:4c:20:e0:b9:29:1a:2f:81:81:
38:fc:0a:8a:49:21:fd:10:ab:7f:74:0a:d0:b2:63:30:53:8e:
26:4a:52:22:a4:f3:69:16:2b:26:ba:79:37:63:2a:3c:f8:75:
09:ee:df:24:96:b9:2d:41:9b:0d:d9:e2:26:8e:cf:db:5f:16:
bc:ed:16:6c:45:b2:36:2e:74:01:a4:45:ca:a2:b1:69:b4:89:
22:92:8a:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqQALdbJM9oQAhVgdXaaOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDFhNWQ5MGRjM2E4MzZjZWI2MzgxZWZjNzUzNGUxMjlm
NDNhNGMwHhcNMjYwOTI4MjMwMDU4WhcNMjYwOTI5MjMwMDU4WjAzMTEwLwYDVQQD
EyhjMjBlYWY1YTRlNDAxMTY2NDYwOTQ0ZGJjNjc1NjdmZjI2NTdiNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLiPXoHH31xn/AqZA9k1FG4T6i4C
1cbzKyAiMhVWr8msy/+JqwPkEnLJbkivwsZRuUjZ4/qPil+HpinVl6Jk3FUaYykd
DLUckLPGHkphK1ApNBFRr+jMqKywobUEeRnTbBKY38vn8X/Rxt5GCZdpSFhBqB41
dC2ROkO02/rFVDiwND8yHrjXKvq2tf1vwXVPwQ0pdPPcdpHJ0r45pwDA+NEpURfe
kVc3MWYs/YX8BxErSirZkXhcJIXyWuxABTPzE1FXLF3vJuQ8r+EVY9TlcUHq4ikk
jySUJpJLib8WAiVgFtF+LzwgYhejcGLiGzLq1CfquG2k4XhgZ/j60Ce2gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIOr1pOQBFmRglE28Z1Z/8mV7WLMB8GA1UdIwQY
MBaAFH0BpdkNw6g2zrY4Hvx1NOEp9DpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWIwMDctYTA4Ni00MzEyLTlkMjMt
NjJmNjY2NDczYjIxLzEvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yMWIwMDctYTA4Ni00MzEyLTlkMjMtNjJmNjY2NDczYjIx
LzEvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRu4SVIh
VZQt8shiK2dMfjeRD+MOSptPzMipFgLgtKGRduP74yXRZPbTjRboenXKx1uTyqwF
z7UYaK+ZuG9ohMKQO8r1Jtk4RLgmZfQ616AOjhq4JBFO8vFzM+OAwupzRJfn6jtY
x8EDap+VwRjGWhbQCEnOcIYoKHKMkDMcMRsDvXr3ZmMNObj1UjoX61/up2lCBMqi
0Jxk98JCRPfTK5yWiC8WCXwSKOqYTCDguSkaL4GBOPwKikkh/RCrf3QK0LJjMFOO
JkpSIqTzaRYrJrp5N2MqPPh1Ce7fJJa5LUGbDdniJo7P218WvO0WbEWyNi50AaRF
yqKxabSJIpKKcw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 03:38:03 2026 by rpki-client