Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: h90A+DtwoSX6zu+V4u1/jicGdcB+0/z4hwvC+vIgA6w=
Subject key identifier: 69:EF:60:4E:2B:BD:AF:34:3A:E3:B9:25:CB:EC:AE:7C:43:32:20:B8
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 01A12B44DF2FB9131A124C870C5CD69BDF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 19E5
Signing time: Sun 11 Oct 2026 14:01:36 +0000
Manifest this update: Sun 11 Oct 2026 14:01:36 +0000
Manifest next update: Mon 12 Oct 2026 14:01:36 +0000
Files and hashes: 1: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: ZNQnBNaFVCDaRHG6Yc32OgMc7DTmjAc1PJh2ACQUZyk=)
2: pIUxTEDoN2Dc7m3Bu8iZK9Qd6p0.roa (hash: 7pwAinsCrulqhp/0S9xHHK/xP5KbTFYXkcqDqCn/DUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:df:2f:b9:13:1a:12:4c:87:0c:5c:d6:9b:df:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Oct 11 14:01:36 2026 GMT
Not After : Oct 12 14:01:36 2026 GMT
Subject: CN=69ef604e2bbdaf343ae3b925cbecae7c433220b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:3e:f2:08:40:a7:c5:cd:be:bf:7b:4a:12:
c8:59:ee:f2:19:50:9a:37:b0:95:14:02:b6:17:e4:
03:bf:db:77:88:07:18:02:9e:fa:97:7e:23:63:a7:
e8:f6:f0:bb:3d:15:7f:17:ac:8b:c4:32:cd:f5:32:
6b:eb:59:5f:1f:37:e8:c9:df:6b:35:37:d0:66:0b:
1e:72:13:c6:ff:7c:4f:4b:3b:76:db:0e:cf:df:2a:
8d:d3:ff:f8:f0:31:9b:11:68:9c:68:eb:cd:cc:23:
5d:d7:17:fc:01:a8:6c:08:5e:be:d9:e4:48:e7:ad:
90:7e:58:11:3d:37:c2:00:5f:0a:7f:4a:84:b0:f1:
64:37:96:38:6d:8c:f9:59:e4:72:6b:be:42:1a:78:
5d:d4:2d:59:40:61:1c:0a:30:83:3d:79:3b:b0:1e:
3d:43:cb:2d:2a:ae:df:00:de:9b:23:c9:34:b2:d2:
92:c9:ba:67:ac:13:55:ee:6b:d4:ba:f1:bb:38:35:
85:2d:fb:23:e9:9c:3b:08:d4:7a:8b:1b:29:f6:b5:
eb:14:64:ad:70:1b:0f:b9:47:76:91:fd:68:ef:f8:
08:0c:73:de:17:08:82:a5:f3:18:6a:d4:b0:9b:56:
70:fe:a2:20:6f:dc:54:8f:ee:7e:75:ce:b3:cf:e6:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EF:60:4E:2B:BD:AF:34:3A:E3:B9:25:CB:EC:AE:7C:43:32:20:B8
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:98:c9:7e:d7:bb:03:3f:e1:0a:be:7e:d2:27:46:f0:cc:94:
23:3c:42:d6:e0:49:4d:65:61:e3:1d:4f:d0:32:51:9d:3f:eb:
46:c6:66:b0:d1:19:2c:5c:72:68:af:28:fe:f0:98:59:10:8b:
e7:f7:97:fd:f7:e6:8c:6c:d1:a7:81:b7:ee:06:c1:5c:b7:cb:
cc:66:2b:d1:d6:b9:03:e0:ed:fc:81:47:e5:1a:b1:49:eb:40:
99:50:d2:9d:25:63:39:02:56:42:6a:6d:d8:8b:f4:ac:95:45:
13:53:24:d6:64:dd:69:a5:94:ad:c7:26:f4:e7:4f:9a:31:90:
a2:fe:95:28:bc:b5:41:0c:19:4e:bc:3a:fd:e9:6f:08:95:45:
8d:7a:c5:a3:be:21:3b:26:f7:cc:b1:27:b1:80:8d:93:68:db:
30:e5:e6:2a:d7:90:4b:c5:ad:56:12:25:ec:7d:cc:56:cb:f4:
8d:38:ab:97:49:3a:8c:e2:dd:ea:d4:7e:a3:fa:0d:c0:02:df:
50:85:fd:b1:e0:40:d8:a6:80:8c:bd:9d:5c:f5:e6:9f:92:08:
ab:1e:08:ad:61:a3:6a:20:da:aa:7a:e9:45:2e:14:66:14:16:
9d:a6:be:43:d0:fb:44:34:c9:f3:b3:fe:ec:82:36:a5:c0:b6:
0e:71:f5:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErRN8vuRMaEkyHDFzWm9+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YWYwNzJmOWUxNTZhYmMyMGM0Njg0OThlMjMyMzE1MmM3
MzZhZTgwHhcNMjYxMDExMTQwMTM2WhcNMjYxMDEyMTQwMTM2WjAzMTEwLwYDVQQD
Eyg2OWVmNjA0ZTJiYmRhZjM0M2FlM2I5MjVjYmVjYWU3YzQzMzIyMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ0+8ghAp8XNvr97ShLIWe7yGVCa
N7CVFAK2F+QDv9t3iAcYAp76l34jY6fo9vC7PRV/F6yLxDLN9TJr61lfHzfoyd9r
NTfQZgsechPG/3xPSzt22w7P3yqN0//48DGbEWicaOvNzCNd1xf8AahsCF6+2eRI
562QflgRPTfCAF8Kf0qEsPFkN5Y4bYz5WeRya75CGnhd1C1ZQGEcCjCDPXk7sB49
Q8stKq7fAN6bI8k0stKSybpnrBNV7mvUuvG7ODWFLfsj6Zw7CNR6ixsp9rXrFGSt
cBsPuUd2kf1o7/gIDHPeFwiCpfMYatSwm1Zw/qIgb9xUj+5+dc6zz+aMaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnvYE4rva80OuO5JcvsrnxDMiC4MB8GA1UdIwQY
MBaAFBWvBy+eFWq8IMRoSY4jIxUsc2roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2Mt
Mzk2OWVjYTdiN2Q0LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2MtMzk2OWVjYTdiN2Q0
LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZjJfte7
Az/hCr5+0idG8MyUIzxC1uBJTWVh4x1P0DJRnT/rRsZmsNEZLFxyaK8o/vCYWRCL
5/eX/ffmjGzRp4G37gbBXLfLzGYr0da5A+Dt/IFH5RqxSetAmVDSnSVjOQJWQmpt
2Iv0rJVFE1Mk1mTdaaWUrccm9OdPmjGQov6VKLy1QQwZTrw6/elvCJVFjXrFo74h
Oyb3zLEnsYCNk2jbMOXmKteQS8WtVhIl7H3MVsv0jTirl0k6jOLd6tR+o/oNwALf
UIX9seBA2KaAjL2dXPXmn5IIqx4IrWGjaiDaqnrpRS4UZhQWnaa+Q9D7RDTJ87P+
7II2pcC2DnH1bA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:49:25 2026 by rpki-client