Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
File: FivG9rrBQqA6uxp62RaQaD8DpNw.mft (raw, json)
Hash identifier: g2IQndlb61itoAZn8d7QdTJAWRuJkSlvbftizKJDMnA=
Subject key identifier: F9:5F:A2:73:33:E7:6D:73:08:FE:E5:09:31:39:F9:68:D6:25:E6:1C
Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Certificate issuer: /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Certificate serial: 01A18CE61115C7F79FC5C942731CA7BEC8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
Manifest number: 14FE
Signing time: Fri 30 Oct 2026 13:00:50 +0000
Manifest this update: Fri 30 Oct 2026 13:00:50 +0000
Manifest next update: Sat 31 Oct 2026 13:00:50 +0000
Files and hashes: 1: FivG9rrBQqA6uxp62RaQaD8DpNw.crl (hash: d8Z8GRGeCZxPIpSYhTUwcowHSLe9K+DyGIftvc6+Juw=)
2: OdjD6-jie1gU1V0cRR0FziitCAg.roa (hash: MfGipVuvx0N4+V17kShStGKfSKXkomrNYWFKpDB6GCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:e6:11:15:c7:f7:9f:c5:c9:42:73:1c:a7:be:c8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Validity
Not Before: Oct 30 13:00:50 2026 GMT
Not After : Oct 31 13:00:50 2026 GMT
Subject: CN=f95fa27333e76d7308fee5093139f968d625e61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:18:0f:8c:7c:eb:ef:e5:e5:3a:a4:2f:c7:
74:c4:f6:66:72:49:e4:32:df:32:5a:ca:b8:fb:9d:
87:68:4b:08:2b:12:0a:24:46:b8:6e:4f:fe:ae:43:
fb:73:ab:64:e3:cb:ea:94:f3:15:e5:fa:31:f3:44:
e7:7e:29:8f:e1:d6:93:0d:e0:ca:31:f0:e5:77:90:
72:ef:2d:0f:34:15:5d:c3:6e:d4:fd:b6:aa:d6:1e:
f4:90:b9:00:d1:14:22:02:6d:37:1f:da:4b:dd:25:
92:d1:4e:2e:89:57:c3:37:5a:c2:34:74:3d:3b:f0:
a0:e4:5c:5a:de:cb:79:b5:36:02:2b:10:db:8e:9a:
f7:74:ab:d6:2f:57:c2:8b:95:9a:68:38:37:56:d8:
30:5c:cb:5a:62:1c:e1:ad:f4:a4:fb:3f:68:bf:02:
a2:74:e6:45:2b:82:6f:52:e7:98:39:a0:1a:2d:c4:
ee:57:74:94:6d:1b:df:6d:db:f6:c8:6e:57:14:88:
e3:de:08:5f:e4:d6:ec:9f:75:38:da:da:3f:27:5d:
6f:d1:d3:26:9f:b3:d1:8e:f7:32:c4:f7:80:72:e6:
57:bc:f6:91:6c:9a:76:d9:c1:44:30:3c:07:9f:80:
bc:88:71:b4:4a:a7:1e:6e:53:f1:e8:f1:45:a8:9d:
d1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5F:A2:73:33:E7:6D:73:08:FE:E5:09:31:39:F9:68:D6:25:E6:1C
X509v3 Authority Key Identifier:
keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:de:30:34:3b:ba:43:dd:0f:6a:96:fa:8a:e0:14:0c:ce:d9:
3c:2d:30:c9:66:b3:c0:b4:e1:17:24:a9:1d:38:01:6a:e3:3f:
10:03:73:2f:59:58:de:82:f3:5f:c8:27:3a:91:ae:38:6f:a5:
8c:88:51:b4:f1:6f:b3:42:8d:5c:fe:b9:f2:14:37:e9:93:39:
99:3c:b1:29:a2:70:82:99:24:c2:df:b7:89:64:44:1e:32:67:
e0:94:36:4b:3a:de:f8:09:aa:ea:46:51:bd:f3:c1:5d:fb:02:
e9:88:9d:6f:0c:43:a6:b9:49:4c:06:d9:8c:75:3b:7d:61:1c:
28:6e:95:4b:ce:a5:6e:ff:db:72:38:0b:b3:e8:8d:35:39:eb:
ab:dd:2a:55:df:09:a8:ef:8a:6a:e4:c6:57:fc:63:9e:15:70:
dd:34:92:48:82:fc:5a:38:64:86:6a:87:b9:47:1a:e7:ad:9e:
b6:e6:b5:0c:fe:a0:27:cf:cf:f1:89:fd:6b:fb:b5:45:25:98:
d7:6e:18:df:0d:e2:64:53:d9:a0:b2:88:c7:9d:00:8b:da:d5:
50:56:c5:38:08:74:7f:b7:3a:21:9d:ba:4d:20:d0:0c:d8:37:
72:d1:a4:f6:c5:e0:35:4e:f1:81:ac:bd:d9:da:02:d8:75:95:
75:ca:ed:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGM5hEVx/efxclCcxynvsi5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmJjNmY2YmFjMTQyYTAzYWJiMWE3YWQ5MTY5MDY4M2Yw
M2E0ZGMwHhcNMjYxMDMwMTMwMDUwWhcNMjYxMDMxMTMwMDUwWjAzMTEwLwYDVQQD
EyhmOTVmYTI3MzMzZTc2ZDczMDhmZWU1MDkzMTM5Zjk2OGQ2MjVlNjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8wYD4x86+/l5TqkL8d0xPZmcknk
Mt8yWsq4+52HaEsIKxIKJEa4bk/+rkP7c6tk48vqlPMV5fox80TnfimP4daTDeDK
MfDld5By7y0PNBVdw27U/baq1h70kLkA0RQiAm03H9pL3SWS0U4uiVfDN1rCNHQ9
O/Cg5Fxa3st5tTYCKxDbjpr3dKvWL1fCi5WaaDg3VtgwXMtaYhzhrfSk+z9ovwKi
dOZFK4JvUueYOaAaLcTuV3SUbRvfbdv2yG5XFIjj3ghf5Nbsn3U42to/J11v0dMm
n7PRjvcyxPeAcuZXvPaRbJp22cFEMDwHn4C8iHG0SqceblPx6PFFqJ3RDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlfonMz521zCP7lCTE5+WjWJeYcMB8GA1UdIwQY
MBaAFBYrxva6wUKgOrsaetkWkGg/A6TcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yMDU4MWYtYmQ1ZS00ZWExLTgyMTct
MGJlN2FhZThhMGQxLzEvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yMDU4MWYtYmQ1ZS00ZWExLTgyMTctMGJlN2FhZThhMGQx
LzEvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApN4wNDu6
Q90Papb6iuAUDM7ZPC0wyWazwLThFySpHTgBauM/EANzL1lY3oLzX8gnOpGuOG+l
jIhRtPFvs0KNXP658hQ36ZM5mTyxKaJwgpkkwt+3iWREHjJn4JQ2Szre+Amq6kZR
vfPBXfsC6YidbwxDprlJTAbZjHU7fWEcKG6VS86lbv/bcjgLs+iNNTnrq90qVd8J
qO+KauTGV/xjnhVw3TSSSIL8WjhkhmqHuUca562etua1DP6gJ8/P8Yn9a/u1RSWY
124Y3w3iZFPZoLKIx50Ai9rVUFbFOAh0f7c6IZ26TSDQDNg3ctGk9sXgNU7xgay9
2doC2HWVdcrt4Q==
-----END CERTIFICATE-----
Generated at Fri Oct 30 16:25:47 2026 by rpki-client