Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: umeMhzMjty6LjRsdx0WyojzrHRzfsrn3EEfO/VjZ/7I=
Subject key identifier: 30:FC:73:65:C2:61:B2:53:72:C1:A6:E2:B1:55:2C:67:95:36:AE:1E
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 01A0DBDFAAEE649E639D79E140C72D878B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 14FC
Signing time: Sat 26 Sep 2026 04:01:03 +0000
Manifest this update: Sat 26 Sep 2026 04:01:03 +0000
Manifest next update: Sun 27 Sep 2026 04:01:03 +0000
Files and hashes: 1: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (hash: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY=)
2: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: 0bEY37Olh9lRdfCDlW34JidJrPxH9tnnIUJ6xO589Rg=)
3: MUCGMyUzZSrYs0HfPvn9wE8K0Vs.roa (hash: AJPgOXLo9blCFV8x9Zk5FOB9xhjaDRBtGEHIixQGenA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:aa:ee:64:9e:63:9d:79:e1:40:c7:2d:87:8b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Sep 26 04:01:03 2026 GMT
Not After : Sep 27 04:01:03 2026 GMT
Subject: CN=30fc7365c261b25372c1a6e2b1552c679536ae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:84:48:5c:df:06:cd:1c:34:76:58:ee:7b:
22:19:0a:34:cd:43:1b:28:1b:ab:a7:67:3b:90:12:
7e:31:e7:ec:35:6d:ae:b3:06:c6:f5:9e:ea:84:94:
0f:5e:c3:3a:d8:a6:eb:d2:50:de:4b:05:58:9f:b3:
62:3f:b6:80:f6:94:55:69:73:e2:34:0b:fe:cb:4a:
5b:cf:fd:23:2a:d1:97:28:76:94:48:1f:ab:c3:ee:
a2:fa:d1:e1:e1:d7:07:27:6d:f9:b7:4b:b0:31:90:
b3:81:eb:37:62:64:2d:e3:5e:27:10:ea:63:72:d8:
6a:a5:de:ac:0a:f1:d4:26:c0:7a:a9:51:c8:41:6b:
0b:7e:0c:64:d4:b4:83:9d:ae:91:b6:1c:36:56:34:
90:8b:a6:1d:ac:5a:6e:5f:9b:ae:1f:a9:98:04:f0:
05:13:26:c7:21:78:d6:5e:d9:3e:f9:2e:a4:02:df:
bc:1f:80:17:c5:f6:78:7d:8c:f1:79:75:f8:90:42:
c4:c3:7a:d6:5d:9f:cd:da:e3:14:4a:8d:aa:cf:7c:
33:8a:1c:6e:ba:b0:94:89:e5:cf:da:74:5f:bb:cc:
bd:15:8e:5d:03:18:91:05:72:1c:1e:51:a5:30:23:
fc:54:ba:ff:4f:7d:21:4d:41:3d:ac:42:04:ca:91:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FC:73:65:C2:61:B2:53:72:C1:A6:E2:B1:55:2C:67:95:36:AE:1E
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4f:69:ef:eb:f8:61:b3:dd:53:69:c5:c1:ec:a9:1c:39:d1:
1c:6f:ab:b9:fd:00:1e:24:a6:11:1e:62:df:ef:39:04:68:9d:
ea:9b:a1:06:3f:2d:c2:63:2f:dc:7a:6d:c6:ab:85:1b:96:6d:
06:e7:1a:3e:8d:a3:02:59:70:07:e4:19:55:d2:f7:fa:96:c3:
c7:52:1f:66:5d:a2:23:1d:80:02:6c:f4:9e:44:44:7b:f1:ad:
77:bd:da:d1:a6:0a:e2:9e:3c:12:79:80:6a:d9:ff:bd:cd:ae:
d8:0d:75:80:26:ec:bb:3c:e3:6b:30:29:9e:ba:69:07:32:8f:
27:28:e1:4e:02:06:cc:05:9b:c3:bc:21:79:03:da:b9:cf:b6:
93:7b:ef:00:7c:0d:df:9b:61:14:8f:65:69:ff:fb:fc:bc:db:
4a:54:ee:9a:4b:2c:39:29:4a:6d:ca:8b:76:54:bc:cd:44:bd:
52:9c:9d:74:28:2f:27:be:e3:2c:7a:30:06:ec:9e:01:68:bd:
44:ca:a0:70:59:9b:4c:68:80:52:93:a1:9d:a0:ca:5c:1e:99:
b2:29:39:9b:7a:c6:58:df:a4:20:8f:11:6f:ee:af:2b:c2:d4:
3a:95:ec:60:f2:4b:0d:8b:e6:6d:1e:2f:4c:5f:9a:c5:33:90:
f1:e2:4d:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDb36ruZJ5jnXnhQMcth4uQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZWViMjQyZmIwYWZhYTAzN2Q5Y2FmNTYwNGM2NTg3ZTQw
ZGUzYjUwHhcNMjYwOTI2MDQwMTAzWhcNMjYwOTI3MDQwMTAzWjAzMTEwLwYDVQQD
EygzMGZjNzM2NWMyNjFiMjUzNzJjMWE2ZTJiMTU1MmM2Nzk1MzZhZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGuESFzfBs0cNHZY7nsiGQo0zUMb
KBurp2c7kBJ+MefsNW2uswbG9Z7qhJQPXsM62Kbr0lDeSwVYn7NiP7aA9pRVaXPi
NAv+y0pbz/0jKtGXKHaUSB+rw+6i+tHh4dcHJ235t0uwMZCzges3YmQt414nEOpj
cthqpd6sCvHUJsB6qVHIQWsLfgxk1LSDna6Rthw2VjSQi6YdrFpuX5uuH6mYBPAF
EybHIXjWXtk++S6kAt+8H4AXxfZ4fYzxeXX4kELEw3rWXZ/N2uMUSo2qz3wzihxu
urCUieXP2nRfu8y9FY5dAxiRBXIcHlGlMCP8VLr/T30hTUE9rEIEypEpVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD8c2XCYbJTcsGm4rFVLGeVNq4eMB8GA1UdIwQY
MBaAFCLuskL7CvqgN9nK9WBMZYfkDeO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYt
MjUxNTYyZjAwZmM1LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYtMjUxNTYyZjAwZmM1
LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk9p7+v4
YbPdU2nFweypHDnRHG+ruf0AHiSmER5i3+85BGid6puhBj8twmMv3HptxquFG5Zt
BucaPo2jAllwB+QZVdL3+pbDx1IfZl2iIx2AAmz0nkREe/Gtd73a0aYK4p48EnmA
atn/vc2u2A11gCbsuzzjazApnrppBzKPJyjhTgIGzAWbw7wheQPauc+2k3vvAHwN
35thFI9laf/7/LzbSlTumkssOSlKbcqLdlS8zUS9UpyddCgvJ77jLHowBuyeAWi9
RMqgcFmbTGiAUpOhnaDKXB6Zsik5m3rGWN+kII8Rb+6vK8LUOpXsYPJLDYvmbR4v
TF+axTOQ8eJN0w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:47:58 2026 by rpki-client