Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
File: FGysOKrBes72Z80OqgLg_JZ3_Pc.mft (raw, json)
Hash identifier: /P9pSqvn5/90/QNPD3XZUjVdbxGK3Tv5YK5sMx9jLIs=
Subject key identifier: 04:E1:FF:90:E1:B0:9F:FD:CF:C9:2F:A6:6B:03:84:56:73:1B:03:DF
Authority key identifier: 14:6C:AC:38:AA:C1:7A:CE:F6:67:CD:0E:AA:02:E0:FC:96:77:FC:F7
Certificate issuer: /CN=146cac38aac17acef667cd0eaa02e0fc9677fcf7
Certificate serial: 01A08DC4A00B9460C2D326F5B1427C607185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
Manifest number: 0103
Signing time: Fri 11 Sep 2026 00:01:08 +0000
Manifest this update: Fri 11 Sep 2026 00:01:08 +0000
Manifest next update: Sat 12 Sep 2026 00:01:08 +0000
Files and hashes: 1: FGysOKrBes72Z80OqgLg_JZ3_Pc.crl (hash: RHtaSeAuQ0uvIZIRcICyMSvw4Jlz2izQuk7lZOfSzik=)
2: sMwIgLKNRpB1RpAtf3RJI_ymDmY.roa (hash: BKXDq8tUvCJz2+LeUi2VmO5hnXnUxOen+el/zYEKMWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:a0:0b:94:60:c2:d3:26:f5:b1:42:7c:60:71:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146cac38aac17acef667cd0eaa02e0fc9677fcf7
Validity
Not Before: Sep 11 00:01:08 2026 GMT
Not After : Sep 12 00:01:08 2026 GMT
Subject: CN=04e1ff90e1b09ffdcfc92fa66b038456731b03df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:96:0d:ea:dd:5c:f8:ed:99:d7:6a:21:1a:
4a:91:94:9e:fd:cf:d2:cb:65:79:78:26:48:d7:00:
38:a2:7a:17:b7:88:00:c4:e1:58:4e:64:14:b9:d5:
1d:7b:23:c0:68:74:e0:a8:d9:0c:d8:27:81:c1:bb:
2c:0a:b2:5c:43:94:9a:9c:a2:42:4d:d3:f9:a7:55:
d0:d1:a1:63:2f:92:9d:96:89:d4:dd:7a:ee:ef:ac:
2f:68:4c:d3:86:7d:29:f8:66:fa:55:26:8a:52:3b:
a4:54:6d:8e:11:0d:36:da:6f:02:7a:10:1e:05:09:
f6:ba:90:15:45:b2:a9:ab:fc:9d:ba:ba:5d:ca:4c:
81:c1:d9:11:b5:7b:bb:d2:57:fe:71:2f:85:eb:2c:
32:e9:e8:e2:94:1e:f7:1c:e8:a1:a5:b4:42:ed:8f:
cd:5e:2c:05:dd:8c:41:cb:9e:76:5e:3f:bc:2f:04:
66:b3:ea:8c:94:36:6e:48:17:8a:2c:61:3c:d0:cd:
99:d0:c7:81:7d:4b:b7:d6:b6:0c:8c:da:48:3f:c7:
6e:72:65:ea:f9:63:c3:97:73:59:85:15:16:dc:e7:
11:54:36:14:69:a4:f7:82:6e:56:fd:2c:ea:ab:7d:
14:50:22:9b:53:41:c9:11:c7:41:ce:14:13:cd:ad:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E1:FF:90:E1:B0:9F:FD:CF:C9:2F:A6:6B:03:84:56:73:1B:03:DF
X509v3 Authority Key Identifier:
keyid:14:6C:AC:38:AA:C1:7A:CE:F6:67:CD:0E:AA:02:E0:FC:96:77:FC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:01:7b:bf:b9:89:47:d5:cb:30:c3:6f:d0:cb:81:07:17:e3:
33:bd:ba:d8:70:91:67:80:8d:14:18:7f:bd:ef:07:39:cb:d1:
21:72:93:03:74:35:fe:59:f5:e0:76:98:fb:8b:70:0f:2f:a9:
c5:3c:f7:94:df:16:b6:26:c0:b3:62:2e:9f:e3:56:2d:89:77:
eb:6b:f6:fe:d1:7e:00:35:83:8a:34:08:86:f3:f8:59:ea:79:
ed:a3:73:3c:9c:49:fa:ae:75:31:8b:38:9a:82:97:a5:b6:a9:
e2:fe:fa:6b:d1:cd:75:bb:f4:11:9f:82:55:5c:78:72:ff:67:
46:40:db:60:31:a1:88:ac:5f:35:b4:19:e1:db:31:66:d0:aa:
08:4e:eb:fb:c9:5f:44:37:dc:8c:e0:8a:99:48:ca:0c:0a:2e:
c2:04:9b:2e:3e:ce:cb:8a:ed:11:28:72:04:ab:cb:4e:53:39:
cb:bc:26:93:27:58:be:84:de:70:e1:81:97:ab:42:94:c4:bb:
13:b1:8d:9f:85:92:9e:53:ea:17:2f:ce:f7:73:c3:d7:03:0e:
eb:46:3a:e3:61:ca:01:85:0f:0e:24:0e:fd:a8:49:83:b2:4a:
ec:9a:99:3f:42:b7:6d:72:94:68:53:f9:f3:6c:d4:36:7f:a6:
85:b0:0f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNxKALlGDC0yb1sUJ8YHGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NmNhYzM4YWFjMTdhY2VmNjY3Y2QwZWFhMDJlMGZjOTY3
N2ZjZjcwHhcNMjYwOTExMDAwMTA4WhcNMjYwOTEyMDAwMTA4WjAzMTEwLwYDVQQD
EygwNGUxZmY5MGUxYjA5ZmZkY2ZjOTJmYTY2YjAzODQ1NjczMWIwM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq96WDerdXPjtmddqIRpKkZSe/c/S
y2V5eCZI1wA4onoXt4gAxOFYTmQUudUdeyPAaHTgqNkM2CeBwbssCrJcQ5SanKJC
TdP5p1XQ0aFjL5KdlonU3Xru76wvaEzThn0p+Gb6VSaKUjukVG2OEQ022m8CehAe
BQn2upAVRbKpq/ydurpdykyBwdkRtXu70lf+cS+F6ywy6ejilB73HOihpbRC7Y/N
XiwF3YxBy552Xj+8LwRms+qMlDZuSBeKLGE80M2Z0MeBfUu31rYMjNpIP8ducmXq
+WPDl3NZhRUW3OcRVDYUaaT3gm5W/Szqq30UUCKbU0HJEcdBzhQTza0s8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATh/5DhsJ/9z8kvpmsDhFZzGwPfMB8GA1UdIwQY
MBaAFBRsrDiqwXrO9mfNDqoC4PyWd/z3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkd5c09LckJlczcyWjgwT3FnTGdfSlozX1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hNDMyMzgtMGQ5NC00Njk3LTkzMzgt
YzIxMWEyN2E3YzI3LzEvRkd5c09LckJlczcyWjgwT3FnTGdfSlozX1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hNDMyMzgtMGQ5NC00Njk3LTkzMzgtYzIxMWEyN2E3YzI3
LzEvRkd5c09LckJlczcyWjgwT3FnTGdfSlozX1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQF7v7mJ
R9XLMMNv0MuBBxfjM7262HCRZ4CNFBh/ve8HOcvRIXKTA3Q1/ln14HaY+4twDy+p
xTz3lN8WtibAs2Iun+NWLYl362v2/tF+ADWDijQIhvP4Wep57aNzPJxJ+q51MYs4
moKXpbap4v76a9HNdbv0EZ+CVVx4cv9nRkDbYDGhiKxfNbQZ4dsxZtCqCE7r+8lf
RDfcjOCKmUjKDAouwgSbLj7Oy4rtEShyBKvLTlM5y7wmkydYvoTecOGBl6tClMS7
E7GNn4WSnlPqFy/O93PD1wMO60Y642HKAYUPDiQO/ahJg7JK7JqZP0K3bXKUaFP5
82zUNn+mhbAPUQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:51:42 2026 by rpki-client