Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: 7OIGXQUELoqyEtO09osmGIdktMNa+fIthlxsxvs77yU=
Subject key identifier: 97:32:4B:8D:BD:E0:4D:7B:F5:31:76:CE:F2:B0:89:2A:7E:F9:69:CD
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 01A17D05AA1F196E065FB82B8E47BCA7CED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 1323
Signing time: Tue 27 Oct 2026 11:01:25 +0000
Manifest this update: Tue 27 Oct 2026 11:01:25 +0000
Manifest next update: Wed 28 Oct 2026 11:01:25 +0000
Files and hashes: 1: 49LVYnP73rA79wdiuJHMdcdFkIQ.roa (hash: WzC9WsaFwOO23usPmJCjxbi0AXme2savY/KQqeCN0+c=)
2: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: 8oAnkwBJz9GVzaV3uJ+iIdyZXq253Mo2RNT2Y9kEi10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:aa:1f:19:6e:06:5f:b8:2b:8e:47:bc:a7:ce:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Oct 27 11:01:25 2026 GMT
Not After : Oct 28 11:01:25 2026 GMT
Subject: CN=97324b8dbde04d7bf53176cef2b0892a7ef969cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:27:93:6c:23:8d:6a:dd:73:28:1a:92:12:
22:22:2e:b0:ed:dd:0c:a9:3d:f1:58:23:0b:b8:46:
2b:80:2a:5e:16:45:27:ff:f1:c4:3c:98:34:df:ff:
71:ba:a7:6d:17:08:38:fd:c9:af:43:cb:26:c3:c1:
04:72:5f:59:da:57:f5:5b:b4:82:7d:7d:da:97:39:
cc:9b:1f:4c:ca:9b:e4:fa:e6:81:81:73:a7:8b:fd:
f3:4d:7c:06:af:e0:ce:c2:25:f9:88:5d:82:cb:ae:
13:bc:d7:98:17:a7:b7:ba:ea:d9:78:ae:1b:50:ec:
9b:d3:57:01:b7:38:04:24:2c:70:d0:0a:60:f6:86:
fa:df:83:05:07:f1:44:6b:00:a3:fd:b4:c5:9e:d0:
ec:83:de:99:e5:af:8d:97:e8:e6:af:7b:c0:93:46:
c4:a6:51:b3:db:92:c2:44:aa:15:cd:8c:24:8e:c5:
c7:6c:96:68:53:79:5e:5a:e8:9e:6b:c2:32:cf:af:
40:72:ec:78:4e:31:c3:de:d6:58:15:4b:8f:52:02:
75:9e:8f:a7:71:51:70:71:2b:6f:47:4e:f3:98:2f:
d2:ad:ea:bd:f9:90:68:b6:f9:e4:34:6b:54:ae:35:
51:cf:1e:a2:57:b9:02:1a:43:1b:52:5e:ba:13:c7:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:32:4B:8D:BD:E0:4D:7B:F5:31:76:CE:F2:B0:89:2A:7E:F9:69:CD
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a1:f9:ef:2a:99:2c:a2:23:d9:a9:f9:15:16:96:c8:ba:fa:
33:b7:96:02:1f:d7:9c:62:c6:73:e6:45:32:6b:09:38:08:17:
b8:90:48:bd:f6:c4:f9:a2:68:55:8e:e2:8e:e1:b6:21:b9:9f:
45:09:96:4e:c0:83:a9:33:ee:f5:30:6f:a9:29:5d:d6:95:bf:
46:0e:88:78:26:28:31:ab:66:6c:86:49:f6:78:de:ed:ba:a1:
40:1a:2b:16:2d:02:70:a8:40:29:08:88:12:94:d4:10:c7:83:
86:2b:0f:86:ba:e7:5a:be:01:eb:71:47:c8:e3:92:d9:58:ad:
15:36:a8:a2:ee:ec:4c:55:ce:09:81:57:89:19:e2:6f:3a:1b:
5e:1a:8d:65:ae:c4:03:7d:f8:5d:74:b6:67:f1:91:1a:f2:05:
61:1a:38:47:8a:1c:70:53:49:f6:eb:3d:fb:9b:38:d3:db:cc:
fb:92:9e:4a:f2:d9:02:f6:d0:e7:0e:57:d7:2c:0d:fe:81:e0:
27:82:e2:47:77:93:42:c0:60:05:8d:83:13:21:1f:fc:16:5d:
a0:7c:98:19:33:39:38:ba:f9:85:af:c3:21:82:28:aa:00:8b:
03:04:b8:3c:8d:e2:21:f4:66:1f:e4:a0:e2:83:93:a7:58:1c:
8d:8b:a1:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9BaofGW4GX7grjke8p87ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzliOTVkOGE1OGZjY2E2YTgxMmU3NzdlN2VmNjk0NTNm
OGFjOTgwHhcNMjYxMDI3MTEwMTI1WhcNMjYxMDI4MTEwMTI1WjAzMTEwLwYDVQQD
Eyg5NzMyNGI4ZGJkZTA0ZDdiZjUzMTc2Y2VmMmIwODkyYTdlZjk2OWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dknk2wjjWrdcygakhIiIi6w7d0M
qT3xWCMLuEYrgCpeFkUn//HEPJg03/9xuqdtFwg4/cmvQ8smw8EEcl9Z2lf1W7SC
fX3alznMmx9Mypvk+uaBgXOni/3zTXwGr+DOwiX5iF2Cy64TvNeYF6e3uurZeK4b
UOyb01cBtzgEJCxw0Apg9ob634MFB/FEawCj/bTFntDsg96Z5a+Nl+jmr3vAk0bE
plGz25LCRKoVzYwkjsXHbJZoU3leWuiea8Iyz69Acux4TjHD3tZYFUuPUgJ1no+n
cVFwcStvR07zmC/Sreq9+ZBotvnkNGtUrjVRzx6iV7kCGkMbUl66E8d8pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcyS4294E179TF2zvKwiSp++WnNMB8GA1UdIwQY
MBaAFBd5uV2KWPzKaoEud35+9pRT+KyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYt
NDA3ZTNmZTYzOTQ1LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYtNDA3ZTNmZTYzOTQ1
LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6H57yqZ
LKIj2an5FRaWyLr6M7eWAh/XnGLGc+ZFMmsJOAgXuJBIvfbE+aJoVY7ijuG2Ibmf
RQmWTsCDqTPu9TBvqSld1pW/Rg6IeCYoMatmbIZJ9nje7bqhQBorFi0CcKhAKQiI
EpTUEMeDhisPhrrnWr4B63FHyOOS2VitFTaoou7sTFXOCYFXiRnibzobXhqNZa7E
A334XXS2Z/GRGvIFYRo4R4occFNJ9us9+5s409vM+5KeSvLZAvbQ5w5X1ywN/oHg
J4LiR3eTQsBgBY2DEyEf/BZdoHyYGTM5OLr5ha/DIYIoqgCLAwS4PI3iIfRmH+Sg
4oOTp1gcjYuhOw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:22:38 2026 by rpki-client