Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
File: fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft (raw, json)
Hash identifier: ePfEhv1al+0wSHhoMMjASDEnVv2K2jKzHgjRYCJc38A=
Subject key identifier: 0A:CF:53:40:1E:9C:AF:7A:4D:96:73:AB:2F:C4:B2:B4:6E:3F:61:B4
Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
Certificate issuer: /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Certificate serial: 01A17EF3A27545B533DCAF5FEEDD72BA810D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 20:00:58 +0000
Manifest this update: Tue 27 Oct 2026 20:00:58 +0000
Manifest next update: Wed 28 Oct 2026 20:00:58 +0000
Files and hashes: 1: XeLe21TCUgGgtYtOHlBkAyxb588.roa (hash: xiA/Defg/C+SjF26EFCXyw3Y0ZfZkMB+IPbJcwNxla4=)
2: fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl (hash: mXDjwat0fa66VDxqt+RL6pSYcChdkgYYIeBg9EKt754=)
3: hJe2L7yijxhtLxWKyzVN_7iImAs.roa (hash: 6hCERIoNHi1oFb4UNguFbE1ZuB0au7wNYdl68ZyA7vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:a2:75:45:b5:33:dc:af:5f:ee:dd:72:ba:81:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d
Validity
Not Before: Oct 27 20:00:58 2026 GMT
Not After : Oct 28 20:00:58 2026 GMT
Subject: CN=0acf53401e9caf7a4d9673ab2fc4b2b46e3f61b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:21:94:18:14:d6:cb:7d:1b:ea:14:0b:aa:
d1:53:2d:08:bc:d1:56:86:26:d0:30:20:40:c7:36:
ee:8d:0e:12:6a:c1:05:17:80:cb:18:12:45:1e:b4:
b1:f1:d2:be:70:db:40:10:d7:63:ff:27:6c:92:35:
fa:db:53:53:98:7e:1f:98:00:e0:09:b1:04:16:d9:
06:85:f9:4e:d4:09:d1:cb:23:3d:0c:ef:75:89:3e:
44:e0:50:d9:1b:a1:5d:1a:75:84:f7:e2:ca:2f:91:
e0:03:9d:4a:a2:ca:58:15:0f:f5:e2:60:2e:4e:26:
61:d1:f8:36:6b:a8:b2:52:ed:13:fe:f4:3c:2e:5f:
e1:85:f1:24:fe:b3:bc:7b:7c:b2:d6:66:e1:1d:7d:
45:25:31:0d:d9:48:49:70:b7:d7:44:08:d0:fb:20:
52:eb:33:48:26:6a:03:c4:02:2e:9b:5f:ac:25:54:
42:ed:1e:e8:9b:b5:3e:9b:80:51:ae:de:71:9c:6b:
49:7c:a5:d7:63:2e:c7:54:26:37:0c:64:a3:7e:2c:
64:2f:ef:63:65:2c:be:1c:94:46:92:d6:38:8e:8a:
e8:66:6d:40:14:94:8a:df:a5:da:fa:f5:ec:2e:f0:
40:30:e9:b6:7c:8e:5a:29:97:86:1f:31:30:d1:51:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:53:40:1E:9C:AF:7A:4D:96:73:AB:2F:C4:B2:B4:6E:3F:61:B4
X509v3 Authority Key Identifier:
keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:96:5e:18:9d:81:d3:bd:fa:17:71:e8:07:4e:cb:c9:ba:bb:
53:66:85:c1:21:0b:49:47:61:e2:66:22:4e:a8:50:90:5c:a4:
3a:27:3a:e2:90:d8:a9:66:27:ea:b1:20:3a:09:17:43:70:f3:
e3:9b:73:bf:38:0c:6e:cc:dc:ae:c0:90:7a:92:1f:ad:8b:95:
2e:b4:90:10:a9:5c:0e:6c:38:4c:6c:9f:80:54:ed:b2:65:1d:
e0:1a:d9:94:d8:2e:1c:9c:ef:c9:c9:e9:1f:82:55:89:62:f3:
1c:39:c4:a6:b3:06:0a:d0:e9:f5:f2:fa:57:ae:4b:00:f3:f4:
ad:cd:f6:36:c6:11:e9:12:36:95:94:0d:f7:10:9e:a7:03:6f:
54:77:da:89:ef:98:75:14:18:4b:f7:6b:aa:33:ee:50:a8:a5:
37:68:7d:96:c3:63:00:36:ea:d4:28:5d:c2:ef:46:60:67:fb:
9a:c8:67:1d:3c:fb:a6:44:75:a6:33:11:ca:95:81:41:ff:0c:
4e:dd:73:e5:cb:d2:a0:ab:23:06:71:23:41:ea:7f:f4:69:9c:
64:c8:2f:8a:fa:e1:ec:bc:ec:03:9a:61:ab:79:4d:f3:21:e4:
91:8f:fe:62:ae:24:de:e4:aa:10:ab:3c:af:78:f5:3e:66:70:
f1:7f:b9:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+86J1RbUz3K9f7t1yuoENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYzhiYWNiZTczYTQwY2U4MThhNGJhZmEzOTNhODUyOTdj
MTljMGQwHhcNMjYxMDI3MjAwMDU4WhcNMjYxMDI4MjAwMDU4WjAzMTEwLwYDVQQD
EygwYWNmNTM0MDFlOWNhZjdhNGQ5NjczYWIyZmM0YjJiNDZlM2Y2MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fUhlBgU1st9G+oUC6rRUy0IvNFW
hibQMCBAxzbujQ4SasEFF4DLGBJFHrSx8dK+cNtAENdj/ydskjX621NTmH4fmADg
CbEEFtkGhflO1AnRyyM9DO91iT5E4FDZG6FdGnWE9+LKL5HgA51KospYFQ/14mAu
TiZh0fg2a6iyUu0T/vQ8Ll/hhfEk/rO8e3yy1mbhHX1FJTEN2UhJcLfXRAjQ+yBS
6zNIJmoDxAIum1+sJVRC7R7om7U+m4BRrt5xnGtJfKXXYy7HVCY3DGSjfixkL+9j
ZSy+HJRGktY4joroZm1AFJSK36Xa+vXsLvBAMOm2fI5aKZeGHzEw0VHVnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArPU0AenK96TZZzqy/EsrRuP2G0MB8GA1UdIwQY
MBaAFHzIusvnOkDOgYpLr6OTqFKXwZwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zMjJlYzctMjEzMS00ZGI0LTg3NTUt
OGI4YjJhYzU2YzliLzEvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8zMjJlYzctMjEzMS00ZGI0LTg3NTUtOGI4YjJhYzU2Yzli
LzEvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZZeGJ2B
0736F3HoB07Lybq7U2aFwSELSUdh4mYiTqhQkFykOic64pDYqWYn6rEgOgkXQ3Dz
45tzvzgMbszcrsCQepIfrYuVLrSQEKlcDmw4TGyfgFTtsmUd4BrZlNguHJzvycnp
H4JViWLzHDnEprMGCtDp9fL6V65LAPP0rc32NsYR6RI2lZQN9xCepwNvVHfaie+Y
dRQYS/drqjPuUKilN2h9lsNjADbq1Chdwu9GYGf7mshnHTz7pkR1pjMRypWBQf8M
Tt1z5cvSoKsjBnEjQep/9GmcZMgvivrh7LzsA5phq3lN8yHkkY/+Yq4k3uSqEKs8
r3j1PmZw8X+5yw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:15:15 2026 by rpki-client