Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: slEcMFBgvIsJh16GSR2D2eMGY3tvSaYk1yxJlj9sb7c=
Subject key identifier: 61:7D:5F:7E:C8:69:8C:30:DB:8B:39:DD:31:BA:91:3F:C5:CF:03:D2
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 01A073294F1FF7004313A711123B06C8358B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 0A66
Signing time: Sat 05 Sep 2026 20:01:22 +0000
Manifest this update: Sat 05 Sep 2026 20:01:22 +0000
Manifest next update: Sun 06 Sep 2026 20:01:22 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: q77Ixvdvoa2GC5yfUIrZ5IyvoZnzTujyX6ZhW3KgCv4=)
2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:73:29:4f:1f:f7:00:43:13:a7:11:12:3b:06:c8:35:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Sep 5 20:01:22 2026 GMT
Not After : Sep 6 20:01:22 2026 GMT
Subject: CN=617d5f7ec8698c30db8b39dd31ba913fc5cf03d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:86:de:90:e1:50:30:83:c3:a4:65:1a:38:
c5:c1:8a:21:10:f1:6d:6c:b6:fd:ea:13:7f:09:7a:
60:dd:d8:1f:f6:1b:76:cb:92:f1:57:0d:d4:a7:12:
8b:cc:6d:4d:83:3d:90:7b:ff:50:b1:2b:8d:cc:9e:
a9:33:2d:a1:8a:24:5c:d7:2b:8d:13:70:1a:fd:cc:
f5:b6:1b:75:fc:94:67:1c:ef:7e:21:67:0c:ef:95:
8f:de:f1:67:7a:5b:34:51:1b:e7:a4:14:29:3c:e5:
c3:cc:10:c7:45:6f:6b:aa:1a:f9:7b:52:5e:98:e4:
70:df:e4:07:48:24:ca:aa:ca:56:12:a7:2f:97:9a:
1f:cb:fe:28:71:33:5f:c6:5f:05:0b:90:b1:bd:77:
f0:b6:b2:ca:75:fa:f7:17:1f:42:a7:7e:48:e0:74:
c7:78:b9:88:db:97:67:d2:40:93:e0:69:fb:38:3f:
85:ad:e6:ce:bf:05:69:b7:91:84:d5:69:b1:ed:df:
f9:6f:e8:ed:fc:8d:6b:8e:eb:06:b9:aa:bd:70:b8:
62:c9:3c:c1:0b:3f:b0:04:6d:6f:21:49:9c:66:88:
d6:55:77:55:da:ff:1a:7a:fa:52:f7:17:76:ae:b0:
64:9c:7e:eb:bc:e9:09:3c:5e:96:f7:cb:12:64:9e:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7D:5F:7E:C8:69:8C:30:DB:8B:39:DD:31:BA:91:3F:C5:CF:03:D2
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a6:df:5a:2e:85:e2:92:f3:5e:7f:01:d2:ae:96:b6:bc:7f:
57:4d:6b:2b:02:0e:92:b5:53:18:fc:61:87:b5:83:ba:65:67:
5b:c2:42:36:fd:02:eb:f8:c0:a0:d2:e7:de:23:5d:0e:61:7a:
f5:36:60:b8:0e:73:00:67:dc:c6:dc:5b:48:59:d4:6f:15:2e:
3c:b5:a1:77:f0:d1:47:0c:f6:df:cd:9f:5d:34:c2:d8:54:2b:
24:36:81:7f:34:c1:e0:d8:67:18:ab:af:c8:ae:30:67:d9:92:
ac:fe:ef:4c:65:d3:2a:41:bd:2b:aa:b5:57:db:03:a0:55:90:
19:1d:26:68:19:49:04:51:4d:e7:09:af:79:6e:fc:76:1a:d0:
8d:88:3f:3c:ee:8d:b0:54:65:d0:29:44:0c:8f:ae:42:03:76:
f7:21:10:8a:b7:9f:e9:b9:6b:f2:47:59:ee:87:5e:6b:19:0e:
c1:6c:1e:bc:a8:08:1b:da:c9:5a:66:2b:cb:44:ff:f3:1b:24:
b6:4a:9b:fe:57:8d:93:af:b4:15:25:70:8b:22:9e:57:53:e7:
79:4f:32:f8:b3:ad:78:30:e6:f1:d5:39:d5:72:40:5a:a1:8c:
ce:48:c6:e8:42:e3:11:f7:20:19:d3:71:29:03:ff:f3:b9:f7:
10:66:e9:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBzKU8f9wBDE6cREjsGyDWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTE0MzI5YjZjMWU2OTUwMTFhODI0MDZmN2FmNDhmNGJi
MTBhZDQwHhcNMjYwOTA1MjAwMTIyWhcNMjYwOTA2MjAwMTIyWjAzMTEwLwYDVQQD
Eyg2MTdkNWY3ZWM4Njk4YzMwZGI4YjM5ZGQzMWJhOTEzZmM1Y2YwM2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ByG3pDhUDCDw6RlGjjFwYohEPFt
bLb96hN/CXpg3dgf9ht2y5LxVw3UpxKLzG1Ngz2Qe/9QsSuNzJ6pMy2hiiRc1yuN
E3Aa/cz1tht1/JRnHO9+IWcM75WP3vFnels0URvnpBQpPOXDzBDHRW9rqhr5e1Je
mORw3+QHSCTKqspWEqcvl5ofy/4ocTNfxl8FC5CxvXfwtrLKdfr3Fx9Cp35I4HTH
eLmI25dn0kCT4Gn7OD+FrebOvwVpt5GE1Wmx7d/5b+jt/I1rjusGuaq9cLhiyTzB
Cz+wBG1vIUmcZojWVXdV2v8aevpS9xd2rrBknH7rvOkJPF6W98sSZJ49hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGF9X37IaYww24s53TG6kT/FzwPSMB8GA1UdIwQY
MBaAFD/hQym2weaVARqCQG969I9LsQrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQt
YzNkNTdlMjM4N2NhLzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQtYzNkNTdlMjM4N2Nh
LzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQabfWi6F
4pLzXn8B0q6Wtrx/V01rKwIOkrVTGPxhh7WDumVnW8JCNv0C6/jAoNLn3iNdDmF6
9TZguA5zAGfcxtxbSFnUbxUuPLWhd/DRRwz2382fXTTC2FQrJDaBfzTB4NhnGKuv
yK4wZ9mSrP7vTGXTKkG9K6q1V9sDoFWQGR0maBlJBFFN5wmveW78dhrQjYg/PO6N
sFRl0ClEDI+uQgN29yEQiref6blr8kdZ7odeaxkOwWwevKgIG9rJWmYry0T/8xsk
tkqb/leNk6+0FSVwiyKeV1PneU8y+LOteDDm8dU51XJAWqGMzkjG6ELjEfcgGdNx
KQP/87n3EGbpUA==
-----END CERTIFICATE-----
Generated at Sun Sep 6 05:57:57 2026 by rpki-client