
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: PJAPrwsS56Q15ZZ5Lrq9iU8f1JdYUxa8WrVEGwpvCX8=
Subject key identifier: 79:1B:4D:37:59:EF:61:56:0D:69:21:A8:99:13:1E:80:BD:4B:A2:0C
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 01A0C9A1C6D25F4BB5A5D99FEA1A08C6B73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0DCA
Signing time: Tue 22 Sep 2026 15:00:17 +0000
Manifest this update: Tue 22 Sep 2026 15:00:17 +0000
Manifest next update: Wed 23 Sep 2026 15:00:17 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: zw4N7g7dad+L8YV24xpke/F1bGOmZGwnBhgpttXEmKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:c6:d2:5f:4b:b5:a5:d9:9f:ea:1a:08:c6:b7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Sep 22 15:00:17 2026 GMT
Not After : Sep 23 15:00:17 2026 GMT
Subject: CN=791b4d3759ef61560d6921a899131e80bd4ba20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d4:91:ed:8e:ca:39:f6:0b:b9:ca:06:55:ae:
24:9c:ce:0a:41:79:aa:ad:76:d9:59:cb:e8:56:1e:
e3:1a:41:60:27:53:b8:31:5b:7f:2a:72:07:95:ef:
fb:2c:89:25:13:72:b1:a7:95:ac:e4:b3:8d:d5:e6:
5f:04:8f:3c:bb:00:e3:36:42:52:f2:ca:3d:82:da:
ac:c8:bb:1a:c2:60:b2:92:53:51:f2:9f:e2:43:04:
f0:10:d6:5e:fd:6b:c0:ad:89:db:9b:80:03:97:dc:
1a:ec:2a:99:dc:61:b5:79:f1:bf:27:99:90:73:b3:
a7:fe:e6:19:8a:95:72:1d:7c:95:a1:66:e5:8e:cb:
33:cf:3c:10:19:ab:21:f2:b0:d7:25:3a:d8:7e:10:
78:ca:66:b7:f3:32:99:37:75:f9:52:70:7a:44:50:
d2:bb:27:77:83:cf:3a:d9:c8:c5:bc:cf:d7:78:d5:
fc:e8:9c:75:a0:2b:25:e8:9d:e9:29:f5:a1:f9:8c:
91:ab:ce:3a:3c:28:10:f5:6e:1b:41:e1:28:cd:05:
ad:57:c0:6f:c5:2f:a4:da:76:f3:d8:2b:f9:e5:f4:
06:e4:23:d5:12:15:7c:0b:ed:d4:00:68:c5:65:76:
db:3d:d8:de:19:7e:c2:ef:e9:17:a3:10:66:a9:52:
5d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1B:4D:37:59:EF:61:56:0D:69:21:A8:99:13:1E:80:BD:4B:A2:0C
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b0:69:5b:bc:77:cc:d0:55:d6:15:9e:79:8b:81:eb:71:e6:
a4:b9:81:b1:5b:23:ba:22:a6:32:a1:d5:c9:d9:a4:a2:6b:56:
3a:b8:4a:5e:86:d5:e7:15:f5:dd:de:af:33:08:25:d6:c7:31:
ae:b3:e1:f5:05:13:82:08:04:d7:f3:07:34:e3:ec:9e:c5:2b:
be:54:cc:ba:01:5c:bf:9e:e8:6a:ee:51:ea:93:46:d0:82:9b:
20:43:48:da:64:23:5a:37:86:2a:0e:44:94:9c:66:43:05:f5:
5c:dc:6f:8e:50:a4:83:93:5a:d2:a4:b3:99:b2:f4:d8:ad:6b:
18:39:e4:d5:0e:1e:52:c3:7d:2e:d9:21:09:9d:29:e9:bf:6f:
29:3d:ad:be:89:66:b7:ee:48:74:b2:2e:2e:a9:3b:7b:00:bd:
10:89:24:02:0e:4c:fd:bb:40:c8:18:f0:7e:bf:6a:e3:e6:b4:
ce:76:98:71:68:2c:9a:4f:0f:1c:96:85:7a:78:1c:b5:c8:40:
d8:65:72:87:e1:55:03:92:2e:ad:7f:ec:76:b3:33:54:f5:17:
de:bb:d1:3a:bf:bc:a4:cf:8c:3a:ce:1f:99:f9:67:0e:78:2c:
5e:54:09:c0:b5:b7:6e:55:60:17:23:2c:1f:4f:8b:68:73:02:
ca:03:02:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJocbSX0u1pdmf6hoIxrc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzJkZWRhMzFmZThlYWZjZGFkNmUyYTA2ZmRlMjM2ZTdk
MTFkNjEwHhcNMjYwOTIyMTUwMDE3WhcNMjYwOTIzMTUwMDE3WjAzMTEwLwYDVQQD
Eyg3OTFiNGQzNzU5ZWY2MTU2MGQ2OTIxYTg5OTEzMWU4MGJkNGJhMjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tSR7Y7KOfYLucoGVa4knM4KQXmq
rXbZWcvoVh7jGkFgJ1O4MVt/KnIHle/7LIklE3Kxp5Ws5LON1eZfBI88uwDjNkJS
8so9gtqsyLsawmCyklNR8p/iQwTwENZe/WvArYnbm4ADl9wa7CqZ3GG1efG/J5mQ
c7On/uYZipVyHXyVoWbljsszzzwQGash8rDXJTrYfhB4yma38zKZN3X5UnB6RFDS
uyd3g8862cjFvM/XeNX86Jx1oCsl6J3pKfWh+YyRq846PCgQ9W4bQeEozQWtV8Bv
xS+k2nbz2Cv55fQG5CPVEhV8C+3UAGjFZXbbPdjeGX7C7+kXoxBmqVJdowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkbTTdZ72FWDWkhqJkTHoC9S6IMMB8GA1UdIwQY
MBaAFH0y3tox/o6vza1uKgb94jbn0R1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgt
NTNmYjAxOGE4YzBlLzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgtNTNmYjAxOGE4YzBl
LzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLBpW7x3
zNBV1hWeeYuB63HmpLmBsVsjuiKmMqHVydmkomtWOrhKXobV5xX13d6vMwgl1scx
rrPh9QUTgggE1/MHNOPsnsUrvlTMugFcv57oau5R6pNG0IKbIENI2mQjWjeGKg5E
lJxmQwX1XNxvjlCkg5Na0qSzmbL02K1rGDnk1Q4eUsN9LtkhCZ0p6b9vKT2tvolm
t+5IdLIuLqk7ewC9EIkkAg5M/btAyBjwfr9q4+a0znaYcWgsmk8PHJaFengctchA
2GVyh+FVA5IurX/sdrMzVPUX3rvROr+8pM+MOs4fmflnDngsXlQJwLW3blVgFyMs
H0+LaHMCygMCWQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:23:46 2026 by rpki-client