Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.mft
File: fvq5R2s-yx5oEBZzgPyLGHag0hM.mft (raw, json)
Hash identifier: qU0TdYb4tKBYAoxeL6MclqEUCgoe+XveAw5ibunUHH0=
Subject key identifier: B3:CD:EA:15:73:C8:33:85:B1:70:73:91:BD:F4:D0:7F:6A:93:4B:58
Authority key identifier: 7E:FA:B9:47:6B:3E:CB:1E:68:10:16:73:80:FC:8B:18:76:A0:D2:13
Certificate issuer: /CN=7efab9476b3ecb1e6810167380fc8b1876a0d213
Certificate serial: 01A0F532219E1026892CE502E3F93412D6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvq5R2s-yx5oEBZzgPyLGHag0hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.mft
Manifest number: 1B
Signing time: Thu 01 Oct 2026 02:01:38 +0000
Manifest this update: Thu 01 Oct 2026 02:01:38 +0000
Manifest next update: Fri 02 Oct 2026 02:01:38 +0000
Files and hashes: 1: 2C3FcWazR5XyXlMgLgJnDejEmi8.asa (hash: 2MsHJBx/wK2u5DGzbrSigEczmjhlHiUmREbO6gj6VoM=)
2: 8nnUCaJQXN-nQj9bznCUT32U5ec.roa (hash: cl9xzaH5wGrkXnoo9hpW9MPiIkknfBd+bptpAUznzJw=)
3: fvq5R2s-yx5oEBZzgPyLGHag0hM.crl (hash: mIrGkeOtXPCqb9wrMEn+Vd5dnXg1DJMUd/PEh/Sw504=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fvq5R2s-yx5oEBZzgPyLGHag0hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:32:21:9e:10:26:89:2c:e5:02:e3:f9:34:12:d6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7efab9476b3ecb1e6810167380fc8b1876a0d213
Validity
Not Before: Oct 1 02:01:38 2026 GMT
Not After : Oct 2 02:01:38 2026 GMT
Subject: CN=b3cdea1573c83385b1707391bdf4d07f6a934b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:1c:a9:98:4e:d4:69:f0:bf:b7:ed:48:6f:
30:df:8d:3e:27:e2:51:3c:e1:d5:86:f8:5b:88:47:
bb:0c:ab:11:8d:a9:13:9c:e8:3d:61:f2:75:25:49:
8e:a7:ec:e0:a0:7b:e4:ec:3f:e5:f6:15:a1:ab:be:
0a:21:e4:7a:ef:bf:5e:42:09:df:5b:6c:fa:5f:61:
77:73:e8:c6:03:86:4f:cb:dc:5b:a7:86:45:23:cb:
df:a0:0d:c1:88:60:c9:55:66:21:29:fc:69:a5:46:
f6:ef:cc:43:6a:7a:fd:eb:e5:94:75:54:91:1d:1b:
bb:ef:1e:30:33:9b:23:a2:2f:46:83:57:84:11:60:
05:8a:63:8f:88:3f:e6:89:ed:a6:aa:e2:f7:8b:0f:
91:e6:6e:a7:1e:ab:68:f7:6f:d4:ce:d4:16:50:73:
07:15:6c:d9:a7:cf:1c:bc:4f:25:0c:0b:a9:a5:8a:
e0:9b:c8:16:e9:c8:1e:01:f9:b7:fc:55:68:79:f7:
37:3c:c0:5c:29:75:dc:77:49:fc:c1:41:cc:be:fe:
48:55:9b:06:39:fa:ed:88:b4:08:df:d8:e5:20:99:
c6:a7:0d:dd:ac:db:08:6a:e8:b2:8b:e9:d2:80:5a:
bd:84:36:f6:0e:85:40:13:91:5c:2e:f4:3f:38:cf:
b9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CD:EA:15:73:C8:33:85:B1:70:73:91:BD:F4:D0:7F:6A:93:4B:58
X509v3 Authority Key Identifier:
keyid:7E:FA:B9:47:6B:3E:CB:1E:68:10:16:73:80:FC:8B:18:76:A0:D2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvq5R2s-yx5oEBZzgPyLGHag0hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce6f68-9d25-497f-8dbe-8c6f050cbd95/1/fvq5R2s-yx5oEBZzgPyLGHag0hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:12:1b:aa:39:00:4e:cb:cc:d7:96:5c:94:e8:c5:62:ea:15:
4e:7b:26:da:ad:f3:a2:31:4a:e7:c1:6d:44:52:94:a5:ee:b7:
d4:0d:ab:16:d6:9c:2a:cf:99:05:08:03:e8:ea:d3:2b:0f:b7:
99:e8:a2:17:4e:a3:e9:a5:0c:95:02:5f:91:55:fc:c4:b9:05:
41:26:51:19:bb:db:d3:b9:c8:6d:fa:de:fd:86:ee:47:b6:56:
39:ef:b0:7e:54:cc:e1:d6:c4:aa:7e:60:3d:cf:22:9d:04:f8:
f6:11:c5:9f:c2:e6:a0:a4:66:65:d5:96:22:de:6e:64:9a:01:
aa:04:6c:e3:da:ca:d7:52:69:e5:8c:33:8d:c6:62:a9:6f:c1:
99:ee:d3:6b:46:7e:ed:77:e7:56:71:ee:7e:4f:52:22:46:bb:
b0:00:ed:a4:b9:53:83:21:05:34:83:00:a5:ee:22:77:6e:9c:
58:fd:bf:ce:ad:f7:67:33:a0:b9:80:5f:7a:2c:de:8b:8e:ba:
ef:12:eb:a8:c7:b6:f6:27:9d:05:7f:86:76:ea:b8:97:b5:83:
db:8e:c2:08:39:d4:c3:55:b0:76:25:80:31:ef:10:7e:7f:df:
5b:85:c8:45:76:16:0a:68:75:14:65:5c:27:7a:37:66:bb:a3:
35:47:b8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 11:59:57 2026 by rpki-client