Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: LoVaIADJn/aBHjO907VWWlOi6lC+r6DBI2YRe8T5YBk=
Subject key identifier: 01:F7:04:6E:78:68:BF:CD:EE:32:82:BB:C5:92:4E:1B:16:A2:E5:43
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 019F859EFE2AB64203B96220E8DEE2D2631B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 09EB
Signing time: Tue 21 Jul 2026 17:00:17 +0000
Manifest this update: Tue 21 Jul 2026 17:00:17 +0000
Manifest next update: Wed 22 Jul 2026 17:00:17 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: ymqqDEpTL8fHBdlDyE/zWWhNkHqR9TsBOYvcy3zzEwk=)
2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9e:fe:2a:b6:42:03:b9:62:20:e8:de:e2:d2:63:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Jul 21 17:00:17 2026 GMT
Not After : Jul 22 17:00:17 2026 GMT
Subject: CN=01f7046e7868bfcdee3282bbc5924e1b16a2e543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:8a:da:b8:73:a6:8a:dc:e2:c0:21:4b:b6:
44:da:6f:a4:10:cf:51:97:40:68:a5:52:a1:a4:51:
a5:5f:86:3e:d6:d8:f7:b4:74:8d:a7:da:1c:7e:f8:
8a:a6:84:74:d0:78:96:5e:88:ff:64:e7:1e:30:f5:
c2:90:93:c7:d1:87:4a:c4:32:a8:73:13:96:ab:db:
7e:a4:e5:a9:f0:aa:a3:7e:89:b8:12:d4:a1:77:48:
fd:36:f0:30:df:7e:46:af:7b:7e:4a:24:7c:62:29:
15:05:6e:86:98:f8:90:74:30:66:63:12:c5:35:aa:
9c:f5:61:bc:61:41:83:29:9f:51:d7:65:62:56:8b:
a8:73:b4:f4:dd:ed:93:a1:8b:a4:7d:87:c2:02:03:
f9:f0:d0:a9:04:2b:4d:c3:65:13:53:e4:6c:be:4b:
2c:ce:66:0c:a7:af:9f:cd:82:bf:c0:f3:58:69:98:
e2:27:72:c9:78:9a:0c:30:ff:1d:a1:11:5d:bb:f9:
e3:7f:0b:d0:b0:bf:35:e0:6a:e0:fe:28:96:e5:9d:
e9:3c:a5:6e:b3:38:3d:04:7f:2f:e2:57:7c:c3:1b:
de:3e:69:5b:2c:9a:2a:a0:8f:0b:84:45:88:8a:36:
46:2c:80:ec:03:10:87:a3:dc:e1:49:73:be:9a:3b:
05:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:04:6E:78:68:BF:CD:EE:32:82:BB:C5:92:4E:1B:16:A2:E5:43
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c1:c4:c4:d2:9f:74:1d:aa:3b:fe:2b:4c:b1:95:51:79:7a:
69:50:5f:d9:65:88:ec:c3:a4:c8:14:87:78:ba:61:09:d3:cb:
70:8d:72:f6:68:89:a6:a5:21:d8:89:7f:55:79:1c:c8:22:ee:
83:a2:bb:9e:17:36:e3:4a:8e:26:c9:f3:31:1c:76:1c:8c:82:
ac:5f:55:ec:4f:d3:b9:59:2f:b1:dd:83:22:2a:34:b3:b0:8b:
44:93:e7:1b:af:31:57:cf:6b:9d:bb:73:83:2d:10:0c:b6:23:
fb:fa:6e:d9:aa:df:c4:f0:e0:6a:b6:29:26:ee:98:8b:cb:d6:
7c:48:43:c7:59:01:ef:7f:c9:e5:9b:c9:a5:01:69:0d:47:f8:
12:d7:2e:0b:79:d9:5d:13:b2:44:2b:82:09:8c:3e:c7:9c:de:
01:ca:40:eb:05:d9:66:53:df:bd:8d:4f:16:69:c3:99:2f:f7:
bf:11:f3:c8:d8:f1:32:84:97:fb:8e:52:c4:c1:5a:d1:48:ac:
4d:79:74:9d:48:fa:80:5c:f0:0f:4e:5c:d4:a0:0e:b8:e8:f1:
03:ba:ee:62:d7:eb:09:c2:3b:f7:86:4b:16:e1:34:4f:0f:47:
a0:c1:ca:78:b4:6a:49:2a:56:1b:6b:b7:4f:01:cb:d1:d4:33:
d3:a1:4e:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Fnv4qtkIDuWIg6N7i0mMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZTE0MzI5YjZjMWU2OTUwMTFhODI0MDZmN2FmNDhmNGJi
MTBhZDQwHhcNMjYwNzIxMTcwMDE3WhcNMjYwNzIyMTcwMDE3WjAzMTEwLwYDVQQD
EygwMWY3MDQ2ZTc4NjhiZmNkZWUzMjgyYmJjNTkyNGUxYjE2YTJlNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXeK2rhzporc4sAhS7ZE2m+kEM9R
l0BopVKhpFGlX4Y+1tj3tHSNp9ocfviKpoR00HiWXoj/ZOceMPXCkJPH0YdKxDKo
cxOWq9t+pOWp8Kqjfom4EtShd0j9NvAw335Gr3t+SiR8YikVBW6GmPiQdDBmYxLF
Naqc9WG8YUGDKZ9R12ViVouoc7T03e2ToYukfYfCAgP58NCpBCtNw2UTU+Rsvkss
zmYMp6+fzYK/wPNYaZjiJ3LJeJoMMP8doRFdu/njfwvQsL814Grg/iiW5Z3pPKVu
szg9BH8v4ld8wxvePmlbLJoqoI8LhEWIijZGLIDsAxCHo9zhSXO+mjsFwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAH3BG54aL/N7jKCu8WSThsWouVDMB8GA1UdIwQY
MBaAFD/hQym2weaVARqCQG969I9LsQrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQt
YzNkNTdlMjM4N2NhLzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQtYzNkNTdlMjM4N2Nh
LzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsHExNKf
dB2qO/4rTLGVUXl6aVBf2WWI7MOkyBSHeLphCdPLcI1y9miJpqUh2Il/VXkcyCLu
g6K7nhc240qOJsnzMRx2HIyCrF9V7E/TuVkvsd2DIio0s7CLRJPnG68xV89rnbtz
gy0QDLYj+/pu2arfxPDgarYpJu6Yi8vWfEhDx1kB73/J5ZvJpQFpDUf4EtcuC3nZ
XROyRCuCCYw+x5zeAcpA6wXZZlPfvY1PFmnDmS/3vxHzyNjxMoSX+45SxMFa0Uis
TXl0nUj6gFzwD05c1KAOuOjxA7ruYtfrCcI794ZLFuE0Tw9HoMHKeLRqSSpWG2u3
TwHL0dQz06FOpA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:38 2026 by rpki-client