Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json)
Hash identifier: H8aNruqO8QC3hjcWZLsaE/yMus4seMweCCPhZlf7bQ0=
Subject key identifier: 14:31:D2:50:8F:BE:6D:A5:4F:E1:36:90:FF:E4:24:17:D8:59:48:7F
Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e
Certificate serial: 01A11AF52A772DAFBA366F8497EAD36D2809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
Manifest number: 05AC
Signing time: Thu 08 Oct 2026 10:00:37 +0000
Manifest this update: Thu 08 Oct 2026 10:00:37 +0000
Manifest next update: Fri 09 Oct 2026 10:00:37 +0000
Files and hashes: 1: cj2iG-kAiX7g7Q_YyN0wXBDsPQA.roa (hash: Iwu4QuDjHy9svFihD9XS6FTYQQqAdESvSACyQGECMOI=)
2: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: 6ke7wnWJoR0BA4BV8eZ9AxIWkx0xci3gUF+p0Q2myZQ=)
3: kZ_QLDF4UjP63-RQO5uGQvJwAKg.roa (hash: GT17iGmvyx7VuRxULTyyPoqEbSTqD+0/CsQqVCeuwic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:2a:77:2d:af:ba:36:6f:84:97:ea:d3:6d:28:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e
Validity
Not Before: Oct 8 10:00:37 2026 GMT
Not After : Oct 9 10:00:37 2026 GMT
Subject: CN=1431d2508fbe6da54fe13690ffe42417d859487f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7c:7e:e6:03:f0:64:7d:ee:98:30:ce:db:1f:
38:9c:b1:f5:df:24:96:be:05:f5:2a:d1:90:bb:61:
58:2a:39:c1:e7:10:b0:2c:f8:51:da:0b:8c:d5:16:
4d:4a:2b:d8:58:ea:2c:c3:e9:79:cd:02:42:75:49:
02:9f:f4:88:36:d7:9c:cd:2b:f9:0a:7d:69:aa:d6:
fc:0f:c7:71:66:21:f8:ef:5c:1a:f7:ce:d7:0c:70:
3f:d9:96:b0:95:59:42:7a:10:eb:9e:dd:d2:61:0c:
d7:af:cc:03:f4:73:e3:b9:3a:77:37:c8:01:81:35:
73:8b:2c:74:60:1a:72:3f:0c:1e:19:ef:5e:e5:6f:
39:66:4d:05:99:30:92:f3:cc:ef:dc:a6:4c:2e:85:
56:56:af:df:7c:f4:2e:56:97:07:73:4f:c1:31:c2:
c4:36:bf:5e:d3:a4:ef:7c:be:ef:43:0e:40:fd:be:
d3:7c:a2:f1:c0:25:0e:e5:fe:84:c5:a4:51:62:9c:
3c:46:d6:fe:ba:ca:b3:34:00:8d:74:0e:1e:5e:fd:
f9:53:22:e8:9a:93:6c:5c:98:ba:37:25:ba:5a:7c:
17:fa:0a:b2:7c:ca:4d:a1:d6:0b:a2:e1:9b:f3:02:
fc:7e:af:b1:b0:55:39:ef:37:fd:ca:bb:cf:f3:ac:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:31:D2:50:8F:BE:6D:A5:4F:E1:36:90:FF:E4:24:17:D8:59:48:7F
X509v3 Authority Key Identifier:
keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:bb:e8:ab:13:d0:7b:18:38:1e:f1:73:fe:5c:52:89:3a:b9:
5c:22:55:09:5e:16:56:b0:83:cb:83:cf:61:ea:64:e8:05:82:
5b:ec:75:31:6c:60:62:9e:e4:f1:ba:66:cd:93:ee:3e:2a:70:
50:e7:d4:b2:b5:f8:2b:11:11:c9:64:ab:fa:54:dc:a1:95:ad:
8a:fc:5f:48:6d:46:c2:8a:0b:73:45:a9:52:da:4d:71:55:79:
11:d6:f4:bf:54:fa:6a:c1:3a:1d:0d:33:8b:e6:af:48:74:dc:
9d:c1:b7:ee:bf:03:ff:55:f6:13:18:84:0a:88:df:b5:d0:3e:
8b:06:0a:26:49:6a:eb:99:92:35:be:3d:05:be:b3:a2:b3:9e:
d2:88:36:88:95:27:bd:45:cb:98:32:bf:ae:c0:4e:91:ed:f3:
c2:cc:7e:c5:51:6e:20:7d:b1:51:21:28:6e:57:80:76:5b:12:
d3:84:e5:43:97:62:7c:ec:03:69:71:4a:fe:98:c4:7b:3a:48:
63:ca:51:46:56:07:ec:fd:99:e6:26:c9:06:bc:97:a7:68:77:
9c:b7:3f:3c:2b:49:02:7e:33:d8:ae:b6:eb:34:8c:7d:64:22:
7d:1a:31:9f:29:df:3c:2c:45:f8:38:2f:c1:3e:34:af:28:1d:
fb:a4:fb:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEa9Sp3La+6Nm+El+rTbSgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYWIzOWM2ZTA0MTIyMzVlZmM3ODc3YTlmNzM3ODk5MzEz
ZWQxNWUwHhcNMjYxMDA4MTAwMDM3WhcNMjYxMDA5MTAwMDM3WjAzMTEwLwYDVQQD
EygxNDMxZDI1MDhmYmU2ZGE1NGZlMTM2OTBmZmU0MjQxN2Q4NTk0ODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3x+5gPwZH3umDDO2x84nLH13ySW
vgX1KtGQu2FYKjnB5xCwLPhR2guM1RZNSivYWOosw+l5zQJCdUkCn/SINteczSv5
Cn1pqtb8D8dxZiH471wa987XDHA/2ZawlVlCehDrnt3SYQzXr8wD9HPjuTp3N8gB
gTVziyx0YBpyPwweGe9e5W85Zk0FmTCS88zv3KZMLoVWVq/ffPQuVpcHc0/BMcLE
Nr9e06TvfL7vQw5A/b7TfKLxwCUO5f6ExaRRYpw8Rtb+usqzNACNdA4eXv35UyLo
mpNsXJi6NyW6WnwX+gqyfMpNodYLouGb8wL8fq+xsFU57zf9yrvP86zDLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQx0lCPvm2lT+E2kP/kJBfYWUh/MB8GA1UdIwQY
MBaAFHyrOcbgQSI178eHep9zeJkxPtFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjct
YzQ0MDI5OGRmYzVjLzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjctYzQ0MDI5OGRmYzVj
LzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzrvoqxPQ
exg4HvFz/lxSiTq5XCJVCV4WVrCDy4PPYepk6AWCW+x1MWxgYp7k8bpmzZPuPipw
UOfUsrX4KxERyWSr+lTcoZWtivxfSG1GwooLc0WpUtpNcVV5Edb0v1T6asE6HQ0z
i+avSHTcncG37r8D/1X2ExiECojftdA+iwYKJklq65mSNb49Bb6zorOe0og2iJUn
vUXLmDK/rsBOke3zwsx+xVFuIH2xUSEobleAdlsS04TlQ5difOwDaXFK/pjEezpI
Y8pRRlYH7P2Z5ibJBryXp2h3nLc/PCtJAn4z2K626zSMfWQifRoxnynfPCxF+Dgv
wT40rygd+6T7RQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:53:29 2026 by rpki-client