Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File: fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier: k0gY9Vb42YpkAUTZT+2LGgA1fS4SYoEhmydaqvkfdH8=
Subject key identifier: 5E:16:7B:2D:CB:F3:AA:49:42:F8:A6:25:02:AC:25:27:35:B0:27:34
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial: 01A1291F68E2E33C3B51C93E56DBA9D441C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number: 1AAE
Signing time: Sun 11 Oct 2026 04:01:26 +0000
Manifest this update: Sun 11 Oct 2026 04:01:26 +0000
Manifest next update: Mon 12 Oct 2026 04:01:26 +0000
Files and hashes: 1: cE-3JlgsaW1G6uxzWM25DW-c8rQ.roa (hash: M9oUYIkckIDsB1IKjs8KpGweqbN0nhGBpxFT1OmCdQY=)
2: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: M1+9xqCjInX8e4Lncb9aAyarMHJfBx59f20Ay19l83I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1f:68:e2:e3:3c:3b:51:c9:3e:56:db:a9:d4:41:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Validity
Not Before: Oct 11 04:01:26 2026 GMT
Not After : Oct 12 04:01:26 2026 GMT
Subject: CN=5e167b2dcbf3aa4942f8a62502ac252735b02734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:71:fc:e1:34:f7:4f:9b:0b:68:e2:25:c6:
1c:14:13:4f:1f:b2:6a:c5:9f:12:6c:68:ab:71:3e:
c1:63:2f:2a:55:c3:10:4e:fe:f2:f6:3a:c0:4e:1d:
89:bb:22:e5:e7:1d:25:20:47:7f:70:12:7e:38:09:
51:d0:7d:50:5d:62:64:2c:74:f5:40:3e:ba:0a:1b:
92:ae:38:dd:4d:1c:07:d2:53:c0:46:dd:24:5f:f5:
4e:74:99:41:8a:d2:45:f4:d8:13:2b:a4:9d:ff:a5:
04:a2:e4:4b:29:55:bd:b9:d1:4d:2a:4e:3c:4e:77:
78:78:3d:d4:1d:41:1a:6a:4d:03:cb:96:40:82:8b:
13:d3:28:2b:03:6e:b5:59:d7:95:7e:62:ad:2b:a6:
53:12:d4:34:95:78:c8:b2:44:fc:74:27:30:8f:f0:
fc:ce:c9:ff:65:13:dc:73:84:da:42:e7:ad:20:4e:
be:8f:fa:2e:b0:17:91:e5:66:62:52:c3:16:8b:93:
25:7e:74:4a:7c:3f:dc:0f:b5:17:82:60:85:4c:13:
3e:7d:5a:1c:7b:c3:ab:04:1d:78:da:09:be:75:85:
5c:72:25:60:16:d0:f2:34:e3:14:da:fd:07:50:5c:
61:9a:d4:38:b0:96:8c:39:da:89:40:3e:d0:55:91:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:16:7B:2D:CB:F3:AA:49:42:F8:A6:25:02:AC:25:27:35:B0:27:34
X509v3 Authority Key Identifier:
keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:67:20:e1:17:f0:9f:88:7b:ef:3d:82:ab:82:3d:98:c2:de:
16:06:aa:9d:d9:07:d0:8b:49:da:cf:bd:7c:a6:7d:80:4c:f5:
20:e4:76:ca:06:e4:80:05:a7:68:55:99:4f:09:ac:8b:d5:3f:
a2:90:04:10:9f:25:fd:f1:df:e4:4b:b0:95:c6:f9:cd:6e:ab:
90:7b:ca:01:2e:63:86:b5:17:4f:59:6a:1c:a3:76:bb:79:59:
a9:38:ce:09:14:e6:7a:8f:97:04:0c:c2:69:a2:72:b6:71:05:
fd:99:51:e4:c3:57:72:41:13:65:89:03:be:92:38:54:2b:20:
98:bd:da:f1:ba:d5:32:4f:aa:01:ae:63:04:8a:aa:53:6f:46:
54:7f:16:03:d8:b9:84:01:8e:d9:4a:f2:cd:54:4c:77:5f:ff:
16:bf:05:35:6c:dc:ff:cf:65:a2:f3:12:0d:81:b7:e6:e3:0d:
1a:a9:8a:55:ec:01:61:d0:b1:d0:f4:2a:53:8a:7e:c4:d3:69:
5c:98:b3:b0:da:76:f9:52:86:d6:23:2d:d7:d7:9f:c5:66:72:
1c:18:d6:ba:83:f5:d9:69:39:8d:42:28:bb:20:e8:81:19:09:
05:ae:d2:b8:72:37:14:03:5e:a2:20:b5:fd:b3:69:ad:47:94:
54:07:5d:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpH2ji4zw7Uck+Vtup1EHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjFiODM3OGU4ZjM2OGFlNDk5OGQ1MWMzYTlhY2U2NDE0
OGQ2Y2QwHhcNMjYxMDExMDQwMTI2WhcNMjYxMDEyMDQwMTI2WjAzMTEwLwYDVQQD
Eyg1ZTE2N2IyZGNiZjNhYTQ5NDJmOGE2MjUwMmFjMjUyNzM1YjAyNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHhx/OE090+bC2jiJcYcFBNPH7Jq
xZ8SbGircT7BYy8qVcMQTv7y9jrATh2JuyLl5x0lIEd/cBJ+OAlR0H1QXWJkLHT1
QD66ChuSrjjdTRwH0lPARt0kX/VOdJlBitJF9NgTK6Sd/6UEouRLKVW9udFNKk48
Tnd4eD3UHUEaak0Dy5ZAgosT0ygrA261WdeVfmKtK6ZTEtQ0lXjIskT8dCcwj/D8
zsn/ZRPcc4TaQuetIE6+j/ousBeR5WZiUsMWi5MlfnRKfD/cD7UXgmCFTBM+fVoc
e8OrBB142gm+dYVcciVgFtDyNOMU2v0HUFxhmtQ4sJaMOdqJQD7QVZFw4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4Wey3L86pJQvimJQKsJSc1sCc0MB8GA1UdIwQY
MBaAFH1huDeOjzaK5JmNUcOprOZBSNbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZDgyMWItMzQ1Mi00MjdhLThlNDQt
ZDE2ZTRhZTYxZjgwLzEvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZDgyMWItMzQ1Mi00MjdhLThlNDQtZDE2ZTRhZTYxZjgw
LzEvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmcg4Rfw
n4h77z2Cq4I9mMLeFgaqndkH0ItJ2s+9fKZ9gEz1IOR2ygbkgAWnaFWZTwmsi9U/
opAEEJ8l/fHf5Euwlcb5zW6rkHvKAS5jhrUXT1lqHKN2u3lZqTjOCRTmeo+XBAzC
aaJytnEF/ZlR5MNXckETZYkDvpI4VCsgmL3a8brVMk+qAa5jBIqqU29GVH8WA9i5
hAGO2UryzVRMd1//Fr8FNWzc/89lovMSDYG35uMNGqmKVewBYdCx0PQqU4p+xNNp
XJizsNp2+VKG1iMt19efxWZyHBjWuoP12Wk5jUIouyDogRkJBa7SuHI3FANeoiC1
/bNprUeUVAddXQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 14:11:47 2026 by rpki-client