Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: gQIWWMYwwTYWpTMivpNmeImuPvHq1fifqyPRPjvEjV4=
Subject key identifier: 3D:E4:18:D4:56:A4:CA:F3:9E:60:9C:F7:42:82:E6:42:AB:07:49:24
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 01A0CB90BF96C77FA0A41C006D41DB60C93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 1A31
Signing time: Wed 23 Sep 2026 00:00:56 +0000
Manifest this update: Wed 23 Sep 2026 00:00:56 +0000
Manifest next update: Thu 24 Sep 2026 00:00:56 +0000
Files and hashes: 1: AhIhHW2MibgaDu_QaZSY4Wn14lA.roa (hash: xbB2zeoDRQ7gNZ/Ox/bptd6ot/c5+mbp2c7ngkO2m1M=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: Fgs/4fTKQRvcStAXyADC6LnMl4lPDZS0qqS09A5q7UM=)
3: cunetuj50zVdetbLOO7PDcDuLxQ.roa (hash: CwPj/a3y+H12p6L10ZWScjrKIYWmCx+U7Hr8zx98Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:bf:96:c7:7f:a0:a4:1c:00:6d:41:db:60:c9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Sep 23 00:00:56 2026 GMT
Not After : Sep 24 00:00:56 2026 GMT
Subject: CN=3de418d456a4caf39e609cf74282e642ab074924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:42:0b:d8:06:f2:4b:c2:f9:d7:30:41:01:
46:db:76:e5:5e:50:ab:ac:52:ef:21:7a:f5:9b:a4:
a2:31:03:5d:69:d8:5e:2e:b4:21:db:dd:21:2d:20:
41:ce:ff:1f:6c:6f:a3:7a:27:d6:7e:d9:90:1b:da:
cf:36:be:3d:aa:46:ee:7b:21:8a:fa:8e:f7:6f:15:
41:d4:32:34:64:94:50:f5:3b:1d:21:35:13:bf:88:
24:4d:59:d8:3d:99:8a:ef:56:db:41:73:81:db:3d:
48:82:f4:c7:b4:91:15:f6:8d:a7:ea:19:ae:1f:39:
06:4e:08:d7:37:bb:9b:b4:50:4f:a2:0f:c3:c6:11:
d3:7b:53:89:0b:76:2c:0c:d2:14:f0:f0:17:8b:94:
a8:1c:e0:56:09:f0:14:bb:e6:cb:99:85:d5:1f:2c:
13:9b:af:5b:f3:a6:ba:83:3b:b5:fa:86:34:1d:5a:
70:d6:02:5a:ec:b9:b6:88:c4:95:8d:7e:0c:a3:3f:
45:36:fa:d9:a9:3a:69:e1:85:bc:10:58:ff:b1:d9:
ba:25:d3:5a:bb:9b:22:4a:ad:10:08:18:82:c8:00:
f3:5b:0b:50:47:d8:68:e7:b8:18:70:1e:ec:34:32:
e3:fe:c2:ed:70:5d:bc:59:61:e8:8c:19:f5:a3:1c:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E4:18:D4:56:A4:CA:F3:9E:60:9C:F7:42:82:E6:42:AB:07:49:24
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:58:dd:45:36:4a:bf:45:92:68:d2:5a:9b:9d:83:97:f2:97:
97:21:55:6e:c2:33:8e:9c:0d:77:45:61:52:aa:10:75:cc:72:
44:06:18:47:50:e2:a2:61:4f:2e:b6:76:d1:db:cf:e7:62:34:
ee:fe:c8:2e:62:c8:06:14:37:e7:83:24:15:92:3e:7a:42:76:
d8:04:86:fe:e8:4b:bc:28:fc:3a:ea:86:df:75:52:01:93:59:
65:07:62:7b:ec:71:fe:a2:07:25:22:e8:07:cf:69:3f:b2:f2:
e6:14:c3:78:1d:cd:81:ca:22:6b:68:52:3b:c3:d9:31:56:06:
c7:96:67:3e:7c:0f:9b:04:90:22:5c:13:a7:74:b8:41:5d:d6:
a8:5c:5e:d5:90:ad:5e:1a:5e:44:91:a6:a5:36:a2:ac:06:b1:
d1:48:f7:ed:fc:90:60:ee:3b:2e:eb:ec:3b:58:71:7e:9e:52:
86:de:61:42:53:99:13:cd:ba:a0:52:39:dd:42:8b:49:25:81:
04:65:ae:04:43:28:bb:50:dc:2b:fd:37:96:3f:94:c7:3c:11:
3d:d0:a5:d3:98:d7:e8:69:b9:04:d1:85:66:4b:78:79:36:61:
23:0c:01:1d:04:56:6f:32:da:99:28:83:9b:4e:99:85:f6:f8:
85:6c:47:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLkL+Wx3+gpBwAbUHbYMk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTk4YjFkMGVjY2NjNGY2ZmYxYTdlN2RiODRiNGJiMmY1
NWIwOGQwHhcNMjYwOTIzMDAwMDU2WhcNMjYwOTI0MDAwMDU2WjAzMTEwLwYDVQQD
EygzZGU0MThkNDU2YTRjYWYzOWU2MDljZjc0MjgyZTY0MmFiMDc0OTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrZCC9gG8kvC+dcwQQFG23blXlCr
rFLvIXr1m6SiMQNdadheLrQh290hLSBBzv8fbG+jeifWftmQG9rPNr49qkbueyGK
+o73bxVB1DI0ZJRQ9TsdITUTv4gkTVnYPZmK71bbQXOB2z1IgvTHtJEV9o2n6hmu
HzkGTgjXN7ubtFBPog/DxhHTe1OJC3YsDNIU8PAXi5SoHOBWCfAUu+bLmYXVHywT
m69b86a6gzu1+oY0HVpw1gJa7Lm2iMSVjX4Moz9FNvrZqTpp4YW8EFj/sdm6JdNa
u5siSq0QCBiCyADzWwtQR9ho57gYcB7sNDLj/sLtcF28WWHojBn1oxwJewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3kGNRWpMrznmCc90KC5kKrB0kkMB8GA1UdIwQY
MBaAFPypix0OzMxPb/Gn59uEtLsvVbCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzIt
NThmMGYzMjVjMmI4LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzItNThmMGYzMjVjMmI4
LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1jdRTZK
v0WSaNJam52Dl/KXlyFVbsIzjpwNd0VhUqoQdcxyRAYYR1DiomFPLrZ20dvP52I0
7v7ILmLIBhQ354MkFZI+ekJ22ASG/uhLvCj8OuqG33VSAZNZZQdie+xx/qIHJSLo
B89pP7Ly5hTDeB3Ngcoia2hSO8PZMVYGx5ZnPnwPmwSQIlwTp3S4QV3WqFxe1ZCt
XhpeRJGmpTairAax0Uj37fyQYO47LuvsO1hxfp5Sht5hQlOZE826oFI53UKLSSWB
BGWuBEMou1DcK/03lj+UxzwRPdCl05jX6Gm5BNGFZkt4eTZhIwwBHQRWbzLamSiD
m06Zhfb4hWxHFQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:27:48 2026 by rpki-client