Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
File: FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json)
Hash identifier: jkK4sHQbGcnRLlC4QBaRKIKOOzKEnRTwQF3iMUItps8=
Subject key identifier: AE:2E:B7:8E:A6:4E:32:18:8D:A4:F8:F8:00:5C:69:78:1D:E3:A3:B9
Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
Certificate issuer: /CN=15a7af707b5848b3539636a7431779d7014cda61
Certificate serial: 01A0E8C0A9CC7C911B296D41B02B387F319E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
Manifest number: 097D
Signing time: Mon 28 Sep 2026 16:02:15 +0000
Manifest this update: Mon 28 Sep 2026 16:02:15 +0000
Manifest next update: Tue 29 Sep 2026 16:02:15 +0000
Files and hashes: 1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: v5ZCuXSFlJFwUw+fV/wtcx1LlWRaN0Bk2gXlNa0AfAI=)
2: aPjK_e6JWAnpVJTimjzF8YUqBy8.roa (hash: CxFxcDSyGy+oCI+MZq7LPshirwWX4b3dsefQvQRFoI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c0:a9:cc:7c:91:1b:29:6d:41:b0:2b:38:7f:31:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61
Validity
Not Before: Sep 28 16:02:15 2026 GMT
Not After : Sep 29 16:02:15 2026 GMT
Subject: CN=ae2eb78ea64e32188da4f8f8005c69781de3a3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:e2:fa:fd:6b:8d:46:08:1d:6b:5b:34:26:
1d:4c:81:5e:bc:92:68:c0:8c:50:00:a0:77:cc:dd:
5b:40:4e:6f:4e:d2:10:b9:ba:11:00:26:01:3f:7f:
bf:88:e1:77:34:3e:4b:a1:98:8f:2b:43:a0:85:dd:
32:5d:02:0a:67:b8:11:d5:18:3a:43:16:bc:33:eb:
07:22:73:73:d3:3f:d9:15:64:be:19:8e:35:ac:c8:
de:f2:64:c6:da:68:63:5a:83:19:93:98:3c:37:d0:
8f:0d:62:84:f5:18:2a:4e:48:a4:a6:8f:5d:f1:1b:
3f:c8:37:7c:46:4b:36:14:d3:8d:87:80:08:99:f7:
44:a6:69:82:f7:27:24:1b:64:47:7b:14:98:ea:89:
ef:08:c3:34:2a:b8:bf:36:8e:73:c3:85:fb:ee:31:
6d:f7:d3:a6:2c:0b:90:9a:7e:dc:2e:86:5f:19:13:
d7:2d:99:bc:d7:2e:c6:92:3f:4b:3f:c4:04:fe:4a:
97:85:28:da:d7:17:9e:1b:69:4c:d0:f3:fc:7a:56:
d9:51:08:ff:72:6d:d3:b7:f9:e1:b6:cc:81:3d:27:
b2:44:7d:c7:63:3e:91:33:06:f9:47:1d:ec:8f:c6:
ba:d5:c8:62:fc:ff:04:f4:1a:eb:e4:e9:fe:06:01:
5a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2E:B7:8E:A6:4E:32:18:8D:A4:F8:F8:00:5C:69:78:1D:E3:A3:B9
X509v3 Authority Key Identifier:
keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d0:6b:06:d2:29:25:87:d7:81:32:aa:f8:0c:42:56:6a:d3:
77:f9:4d:44:e1:bd:e9:ca:a5:77:4e:e0:08:f4:89:43:56:46:
f5:29:10:bd:e9:24:bd:86:a2:41:2e:f0:ba:c6:01:78:85:16:
74:ff:15:d9:57:9f:a5:28:86:ad:86:0f:b4:c5:00:d8:63:4f:
6d:a1:95:20:93:12:f2:c5:b8:48:56:03:33:45:21:22:e8:45:
f1:9b:f9:4d:dc:28:59:20:4f:04:16:1a:1e:fe:10:88:d1:3e:
af:bd:5f:98:92:ed:23:4f:cd:d5:9f:14:69:b4:14:68:2b:b5:
57:a3:ba:8b:8b:51:02:e3:6a:ca:4b:42:d5:3b:d1:28:e3:90:
22:54:4f:3e:d8:f0:5c:f0:05:59:55:d8:42:c3:26:0b:16:2e:
f4:ba:df:4a:cb:4b:a3:90:85:17:1e:26:47:35:7d:e2:bf:3b:
d5:5c:c7:1b:73:b9:f8:bf:4a:b6:11:9d:46:5a:60:7b:bc:ad:
74:a3:a6:27:81:19:0e:35:0b:7d:c4:92:b9:f9:83:fd:31:da:
1a:8c:7c:f1:d3:a3:1f:4c:5f:04:85:79:52:d5:1e:1d:70:9c:
66:b6:0c:4e:4d:8b:a2:d0:08:c0:87:bb:36:35:8c:33:d5:b5:
40:62:c9:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDowKnMfJEbKW1BsCs4fzGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YTdhZjcwN2I1ODQ4YjM1Mzk2MzZhNzQzMTc3OWQ3MDE0
Y2RhNjEwHhcNMjYwOTI4MTYwMjE1WhcNMjYwOTI5MTYwMjE1WjAzMTEwLwYDVQQD
EyhhZTJlYjc4ZWE2NGUzMjE4OGRhNGY4ZjgwMDVjNjk3ODFkZTNhM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2bi+v1rjUYIHWtbNCYdTIFevJJo
wIxQAKB3zN1bQE5vTtIQuboRACYBP3+/iOF3ND5LoZiPK0Oghd0yXQIKZ7gR1Rg6
Qxa8M+sHInNz0z/ZFWS+GY41rMje8mTG2mhjWoMZk5g8N9CPDWKE9RgqTkikpo9d
8Rs/yDd8Rks2FNONh4AImfdEpmmC9yckG2RHexSY6onvCMM0Kri/No5zw4X77jFt
99OmLAuQmn7cLoZfGRPXLZm81y7Gkj9LP8QE/kqXhSja1xeeG2lM0PP8elbZUQj/
cm3Tt/nhtsyBPSeyRH3HYz6RMwb5Rx3sj8a61chi/P8E9Brr5On+BgFaGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4ut46mTjIYjaT4+ABcaXgd46O5MB8GA1UdIwQY
MBaAFBWnr3B7WEizU5Y2p0MXedcBTNphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgt
NjAxMTY4NjI2MTZhLzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgtNjAxMTY4NjI2MTZh
LzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdBrBtIp
JYfXgTKq+AxCVmrTd/lNROG96cqld07gCPSJQ1ZG9SkQvekkvYaiQS7wusYBeIUW
dP8V2VefpSiGrYYPtMUA2GNPbaGVIJMS8sW4SFYDM0UhIuhF8Zv5TdwoWSBPBBYa
Hv4QiNE+r71fmJLtI0/N1Z8UabQUaCu1V6O6i4tRAuNqyktC1TvRKOOQIlRPPtjw
XPAFWVXYQsMmCxYu9LrfSstLo5CFFx4mRzV94r871VzHG3O5+L9KthGdRlpge7yt
dKOmJ4EZDjULfcSSufmD/THaGox88dOjH0xfBIV5UtUeHXCcZrYMTk2LotAIwIe7
NjWMM9W1QGLJ6w==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:23 2026 by rpki-client