Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: OCOc0kHCmSARe6DUV5I8i2aRZXdVuLYk+Vm9WSVNO0o=
Subject key identifier: DE:F4:C7:3C:08:01:9A:5B:B1:2F:D1:9B:19:C9:2B:DB:35:5D:54:51
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 01A0CEFFBFA5E1AED21E95ECC8A9F3DDB2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 16:01:02 +0000
Manifest this update: Wed 23 Sep 2026 16:01:02 +0000
Manifest next update: Thu 24 Sep 2026 16:01:02 +0000
Files and hashes: 1: D76OthKlE46ZLM9sdNaSig1Ng6I.roa (hash: pYj/tdJI8tEjZZC6XXCFhJYt0bHwBpZtynKtpFqoszk=)
2: PTI5qNiMxJTaYsRviRjCASyPtOI.roa (hash: PgMrdxB9fQmJxz2ju9KDJjW/D8w0BstDoOfXkw+BC8M=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: VcJBBT2pBSQkytBJ02+Cc3DLWeNmgPYZrKyM+d+3Qpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:bf:a5:e1:ae:d2:1e:95:ec:c8:a9:f3:dd:b2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Sep 23 16:01:02 2026 GMT
Not After : Sep 24 16:01:02 2026 GMT
Subject: CN=def4c73c08019a5bb12fd19b19c92bdb355d5451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:cf:22:01:58:59:66:62:62:36:23:b1:3d:
8e:0c:65:5e:d6:7b:19:43:10:f8:89:72:71:f6:0d:
cd:38:1f:04:47:11:db:fa:4e:94:61:92:3e:bb:d5:
f7:d6:be:5f:bb:e7:57:d4:84:20:e6:09:7b:fd:ab:
48:e6:c0:f9:76:9d:f0:23:d5:d4:83:11:ec:a4:92:
bf:53:5f:a3:86:8d:c5:aa:1f:78:12:bf:19:da:54:
7c:39:ea:2d:43:c9:72:48:c5:52:88:e1:62:e5:6a:
8b:42:7e:83:e1:0f:28:3c:1e:64:25:54:f3:07:cd:
8c:94:6f:05:92:6e:f2:d8:a9:eb:b2:fe:e2:b0:62:
29:ee:34:b4:87:d1:30:54:5d:cd:e6:76:14:9e:f8:
a1:28:3a:66:33:0b:0c:f5:04:33:b5:ee:b7:7f:15:
24:f1:c1:a4:51:c4:e4:d1:c0:32:7e:73:25:fa:6a:
c1:ba:c6:47:f2:24:26:48:1a:da:cf:e6:f8:cf:d1:
7e:b6:6f:01:00:21:07:3d:ce:42:15:ca:44:53:4a:
5f:81:cb:25:5c:8a:07:02:c8:89:e1:a6:97:e3:cb:
b9:5c:1e:7a:20:0d:43:fd:0c:a9:61:5f:22:a8:3b:
4e:83:0a:a0:a1:31:15:99:07:42:02:b9:41:d2:8c:
6e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F4:C7:3C:08:01:9A:5B:B1:2F:D1:9B:19:C9:2B:DB:35:5D:54:51
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ee:bd:f9:bd:c5:83:64:40:f2:d1:72:ae:56:40:06:48:1a:
8d:a2:fe:5b:f8:1e:2a:4c:5b:8a:d4:e3:93:6c:c7:9d:9d:71:
25:b7:78:39:67:6d:52:b0:0f:74:40:eb:41:96:0e:c2:dd:0e:
a4:84:0d:8f:38:cf:6b:6e:06:80:63:86:d2:8f:3c:4f:49:ee:
1e:06:94:35:7f:e0:14:ed:37:04:f2:e6:63:74:25:a6:44:1a:
e6:28:47:5c:dd:5b:ce:80:98:54:aa:31:19:88:79:8b:17:4f:
1d:d4:3b:c7:50:9d:54:41:ec:a2:9e:0a:7d:b1:7d:b5:12:54:
bb:56:6b:9d:4f:66:eb:f4:e6:01:05:75:d3:21:00:ef:d3:07:
40:7d:ab:67:bf:b1:c5:7a:f6:ad:62:9e:da:c2:b7:2c:aa:c1:
0f:34:df:9b:08:78:04:f5:5f:24:07:7c:08:8d:7d:86:2e:2a:
f1:ca:53:28:c3:8a:1a:55:19:af:fb:ad:fc:2e:84:88:4c:4b:
19:38:6b:50:55:76:e7:42:6a:41:59:f1:62:34:44:ec:45:21:
29:1b:ae:c3:d2:10:bb:e9:d4:7d:97:c4:74:cd:b1:3a:07:ae:
90:e0:4b:90:7a:e2:fa:f3:3e:6e:a6:ec:4d:14:c3:00:02:ca:
22:35:85:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/7+l4a7SHpXsyKnz3bK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTA0Y2M2N2VmOTZkOTAyMmYzZDBiZmM1MWVhZGI0YTRi
NjNlZTYwHhcNMjYwOTIzMTYwMTAyWhcNMjYwOTI0MTYwMTAyWjAzMTEwLwYDVQQD
EyhkZWY0YzczYzA4MDE5YTViYjEyZmQxOWIxOWM5MmJkYjM1NWQ1NDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou3PIgFYWWZiYjYjsT2ODGVe1nsZ
QxD4iXJx9g3NOB8ERxHb+k6UYZI+u9X31r5fu+dX1IQg5gl7/atI5sD5dp3wI9XU
gxHspJK/U1+jho3Fqh94Er8Z2lR8OeotQ8lySMVSiOFi5WqLQn6D4Q8oPB5kJVTz
B82MlG8Fkm7y2Knrsv7isGIp7jS0h9EwVF3N5nYUnvihKDpmMwsM9QQzte63fxUk
8cGkUcTk0cAyfnMl+mrBusZH8iQmSBraz+b4z9F+tm8BACEHPc5CFcpEU0pfgcsl
XIoHAsiJ4aaX48u5XB56IA1D/QypYV8iqDtOgwqgoTEVmQdCArlB0oxudwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN70xzwIAZpbsS/RmxnJK9s1XVRRMB8GA1UdIwQY
MBaAFHygTMZ++W2QIvPQv8UerbSktj7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEt
YTU1NjhlMGZiYjZkLzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEtYTU1NjhlMGZiYjZk
LzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMe69+b3F
g2RA8tFyrlZABkgajaL+W/geKkxbitTjk2zHnZ1xJbd4OWdtUrAPdEDrQZYOwt0O
pIQNjzjPa24GgGOG0o88T0nuHgaUNX/gFO03BPLmY3QlpkQa5ihHXN1bzoCYVKox
GYh5ixdPHdQ7x1CdVEHsop4KfbF9tRJUu1ZrnU9m6/TmAQV10yEA79MHQH2rZ7+x
xXr2rWKe2sK3LKrBDzTfmwh4BPVfJAd8CI19hi4q8cpTKMOKGlUZr/ut/C6EiExL
GThrUFV250JqQVnxYjRE7EUhKRuuw9IQu+nUfZfEdM2xOgeukOBLkHri+vM+bqbs
TRTDAALKIjWF2Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:04:07 2026 by rpki-client