Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json)
Hash identifier: m5NX+CV1ozAIdAGKIThU89jl+Bp5mqhgjOmCZJfWvis=
Subject key identifier: 4F:CB:17:DE:44:C4:27:9A:47:52:C1:26:81:FA:57:C9:7A:52:C0:27
Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Certificate serial: 01A0FC0F40ECAB885E3012475402843BF0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
Manifest number: 09D2
Signing time: Fri 02 Oct 2026 10:00:52 +0000
Manifest this update: Fri 02 Oct 2026 10:00:52 +0000
Manifest next update: Sat 03 Oct 2026 10:00:52 +0000
Files and hashes: 1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: 5EepVImO3D2EawiggVXhU8gFRaRsUIZmYFblvqiwYnQ=)
2: mRB5Hkvcj1hKYhRgNGxK5sq7CD0.asa (hash: OW2a5vSieuRwC1YjVzbLfoP6BZPPRx+bPmnYVgXy6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:0f:40:ec:ab:88:5e:30:12:47:54:02:84:3b:f0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46
Validity
Not Before: Oct 2 10:00:52 2026 GMT
Not After : Oct 3 10:00:52 2026 GMT
Subject: CN=4fcb17de44c4279a4752c12681fa57c97a52c027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5f:6c:b2:0e:fb:c2:1c:a7:e8:71:bc:45:2e:
e3:70:a4:91:b6:85:b9:0f:64:5f:4b:6b:87:36:62:
1a:c7:8b:e4:d9:36:0b:10:e9:50:4e:bf:44:9e:e3:
91:19:42:13:cd:60:dd:05:d4:8f:17:5f:04:d4:38:
61:86:f0:6b:d6:f7:56:72:44:c3:a8:fe:ca:5e:67:
18:b0:c9:7f:38:8f:bb:d0:f5:b1:f0:65:30:12:af:
ce:cc:00:67:ec:3b:e7:ad:e3:f6:b3:de:3f:5b:94:
3c:6f:0d:95:7f:91:b0:6e:6c:de:ef:1d:91:05:72:
b7:eb:0f:b5:5d:17:cf:03:7c:78:1a:16:e2:cb:22:
e2:5e:64:06:d6:16:46:aa:93:45:63:ad:33:5a:a4:
fc:f4:10:23:29:fc:fa:ac:ab:34:aa:72:31:9d:3e:
59:96:51:8f:e8:8b:cd:c3:a0:3a:c8:b8:88:6f:74:
13:d3:27:fc:ed:49:37:3d:ce:0c:76:fd:a7:f9:a9:
de:b6:fd:94:44:1b:ee:6e:05:fc:e9:24:b1:f8:39:
51:a9:2e:bd:cc:4e:5e:b3:1b:1a:16:79:08:2d:db:
f0:53:9b:a9:0f:64:3a:e4:20:f2:5b:be:4b:a0:cd:
c2:ee:79:bc:2b:9d:d1:b6:bd:7f:e6:01:93:e8:1e:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:17:DE:44:C4:27:9A:47:52:C1:26:81:FA:57:C9:7A:52:C0:27
X509v3 Authority Key Identifier:
keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f1:49:9e:55:b7:87:f3:6b:39:dd:fb:59:41:e7:9c:f3:09:
47:73:b3:9c:1b:1d:0e:d9:ae:c8:00:a0:ef:e3:ce:b1:0a:c5:
1d:3e:6e:d5:6c:4c:88:c1:37:6c:f4:4a:16:24:2a:09:2c:78:
10:d3:39:d0:07:52:61:de:54:69:b8:fc:a1:f7:3f:06:14:26:
93:ef:c5:36:03:3a:85:27:6f:01:fd:94:29:77:f2:1e:72:f1:
a0:bf:05:c4:68:3e:6e:e6:ab:44:d9:ea:1f:82:4e:0b:80:38:
3f:e7:53:f2:4f:f7:bb:c4:88:33:8d:81:c8:a0:bd:1e:19:c2:
04:d4:ec:99:31:5d:a4:95:9f:90:77:7a:ec:c1:68:9e:65:54:
c6:60:48:fe:96:07:f8:96:a0:75:14:4d:b2:de:e9:0d:1c:a5:
3e:25:b2:c6:62:24:85:98:3d:ae:7c:31:8f:90:47:8b:a4:9b:
3e:73:3f:91:73:bb:35:ee:20:34:ef:d8:bd:45:17:26:eb:71:
75:f3:1e:02:b4:27:34:8d:25:55:4a:d3:bd:e0:85:6c:20:7f:
e2:30:15:15:39:c2:21:bf:e8:f9:2f:2d:a6:0b:61:3e:01:55:
e0:96:64:9d:4f:d9:d3:72:14:f1:c4:5b:4a:b5:2f:f3:7d:13:
f1:c0:44:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD8D0Dsq4heMBJHVAKEO/CjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNGFlNTdlZTZlMGE5YzUxMDFmYzE0YTg3YTUzMzQxNTBi
YmFiNDYwHhcNMjYxMDAyMTAwMDUyWhcNMjYxMDAzMTAwMDUyWjAzMTEwLwYDVQQD
Eyg0ZmNiMTdkZTQ0YzQyNzlhNDc1MmMxMjY4MWZhNTdjOTdhNTJjMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF9ssg77whyn6HG8RS7jcKSRtoW5
D2RfS2uHNmIax4vk2TYLEOlQTr9EnuORGUITzWDdBdSPF18E1DhhhvBr1vdWckTD
qP7KXmcYsMl/OI+70PWx8GUwEq/OzABn7DvnreP2s94/W5Q8bw2Vf5Gwbmze7x2R
BXK36w+1XRfPA3x4GhbiyyLiXmQG1hZGqpNFY60zWqT89BAjKfz6rKs0qnIxnT5Z
llGP6IvNw6A6yLiIb3QT0yf87Uk3Pc4Mdv2n+anetv2URBvubgX86SSx+DlRqS69
zE5esxsaFnkILdvwU5upD2Q65CDyW75LoM3C7nm8K53Rtr1/5gGT6B7Y4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/LF95ExCeaR1LBJoH6V8l6UsAnMB8GA1UdIwQY
MBaAFH9K5X7m4KnFEB/BSoelM0FQu6tGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjBybGZ1YmdxY1VRSDhGS2g2VXpRVkM3cTBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xMWZhNDQtODg3OS00ZDE5LWI0Njgt
NWI1ZDk4ZjUzNjFlLzEvZjBybGZ1YmdxY1VRSDhGS2g2VXpRVkM3cTBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xMWZhNDQtODg3OS00ZDE5LWI0NjgtNWI1ZDk4ZjUzNjFl
LzEvZjBybGZ1YmdxY1VRSDhGS2g2VXpRVkM3cTBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPFJnlW3
h/NrOd37WUHnnPMJR3OznBsdDtmuyACg7+POsQrFHT5u1WxMiME3bPRKFiQqCSx4
ENM50AdSYd5Uabj8ofc/BhQmk+/FNgM6hSdvAf2UKXfyHnLxoL8FxGg+buarRNnq
H4JOC4A4P+dT8k/3u8SIM42ByKC9HhnCBNTsmTFdpJWfkHd67MFonmVUxmBI/pYH
+JagdRRNst7pDRylPiWyxmIkhZg9rnwxj5BHi6SbPnM/kXO7Ne4gNO/YvUUXJutx
dfMeArQnNI0lVUrTveCFbCB/4jAVFTnCIb/o+S8tpgthPgFV4JZknU/Z03IU8cRb
SrUv830T8cBE3g==
-----END CERTIFICATE-----
Generated at Fri Oct 2 15:03:29 2026 by rpki-client