Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: 3NVSiD5PxvWkJ1y5uWKonefKZMQwdluC3pVPS5eWHxk=
Subject key identifier: D4:43:2D:8A:AA:6F:F5:BD:75:EA:92:3D:A4:78:E7:E5:F5:A3:9D:B0
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 01A08D8DDF7C63C20750D998A55EA3C0D7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0FF8
Signing time: Thu 10 Sep 2026 23:01:20 +0000
Manifest this update: Thu 10 Sep 2026 23:01:20 +0000
Manifest next update: Fri 11 Sep 2026 23:01:20 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: 7Jz80Saa5wVCfg+w6VE3oQG31ph92OgiZPYBqOsq+ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:df:7c:63:c2:07:50:d9:98:a5:5e:a3:c0:d7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Sep 10 23:01:20 2026 GMT
Not After : Sep 11 23:01:20 2026 GMT
Subject: CN=d4432d8aaa6ff5bd75ea923da478e7e5f5a39db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:e7:8e:21:42:4d:45:2b:eb:3b:13:cd:c6:
28:a5:d0:c8:73:d4:49:35:2f:10:2b:04:6b:3f:f6:
4c:6b:31:c7:15:c2:9c:51:4b:a1:2a:cb:55:b8:28:
2f:4f:fd:bc:0b:af:d6:26:0f:2e:ce:02:79:f6:98:
f8:9d:d2:14:0a:17:b3:63:a0:6c:e5:19:d2:69:ea:
f6:a6:a6:98:13:0f:bc:e2:38:65:59:e1:14:83:97:
27:24:4c:05:89:b2:7c:ae:2d:fb:2f:88:2d:e4:29:
48:fd:79:93:98:af:38:33:4a:9c:20:83:a2:0f:5b:
52:48:0c:36:6f:ed:1d:a8:28:b4:ef:e4:00:d1:bd:
ce:4f:fa:2a:d1:c8:be:69:a0:c5:51:f1:11:21:a9:
0e:15:b8:a8:ad:c3:86:ac:44:63:99:4b:41:84:40:
b0:bf:b3:51:de:a9:23:ea:ab:69:a6:2e:3f:d7:07:
c4:6d:62:3c:57:74:7d:96:f7:6f:b8:48:14:bc:14:
b0:e5:41:2b:2a:f8:ad:11:5f:f8:ff:07:ab:72:fe:
2e:0b:ab:16:43:13:67:92:c2:e6:65:ef:97:f7:2f:
5d:72:ed:f9:82:65:e8:b4:25:14:50:bb:17:5b:38:
9d:bb:5b:70:89:8b:7b:79:4c:83:d1:ae:28:df:96:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:2D:8A:AA:6F:F5:BD:75:EA:92:3D:A4:78:E7:E5:F5:A3:9D:B0
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fa:e1:11:d8:f7:92:5c:b2:bd:b2:76:34:30:74:43:ea:e4:
22:87:be:3d:2c:da:aa:46:b9:5c:17:d3:31:f2:d4:52:e1:9d:
45:60:42:0c:4a:81:49:d7:39:55:06:1e:6c:6c:93:e1:56:34:
03:93:af:e3:e6:08:13:a1:df:4e:36:0b:1e:8f:a4:46:22:1c:
d4:dc:60:bd:22:4a:7d:8e:ef:1f:bd:c4:90:f2:e3:b4:51:76:
55:3d:e0:3c:b5:f1:7a:af:7b:26:80:16:cd:0f:fe:58:a3:10:
ac:f1:c4:ed:c8:a2:29:39:98:d8:f9:3b:7b:4b:d4:98:4a:8e:
ee:42:ee:cf:4e:69:98:c4:25:4d:1e:ea:cf:e0:c5:b6:81:2e:
50:2e:7a:38:43:f2:e8:70:1a:80:26:ee:6a:99:17:f3:f7:41:
ef:6b:bd:3a:76:24:8b:a3:3d:ea:ea:4f:2b:d1:6d:0c:4c:f8:
a4:79:89:c9:17:9f:86:8e:0d:08:87:39:ae:dd:0e:e4:c4:18:
4b:ba:fe:86:e1:5d:9a:9e:a4:b8:1b:f3:3e:60:ce:cd:e7:3d:
53:6e:1f:a0:45:1f:54:91:30:44:2e:7c:2f:45:41:f3:0d:a7:
89:3e:e8:90:f5:43:02:43:a8:37:9a:52:1e:3b:d4:ee:de:4d:
d2:66:90:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNjd98Y8IHUNmYpV6jwNe+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjODM1MjVkMTQyZmJmNGI5NGIzZDE2OTQ0NTM2NWM2NmRk
ZmRkZmQwHhcNMjYwOTEwMjMwMTIwWhcNMjYwOTExMjMwMTIwWjAzMTEwLwYDVQQD
EyhkNDQzMmQ4YWFhNmZmNWJkNzVlYTkyM2RhNDc4ZTdlNWY1YTM5ZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfrnjiFCTUUr6zsTzcYopdDIc9RJ
NS8QKwRrP/ZMazHHFcKcUUuhKstVuCgvT/28C6/WJg8uzgJ59pj4ndIUChezY6Bs
5RnSaer2pqaYEw+84jhlWeEUg5cnJEwFibJ8ri37L4gt5ClI/XmTmK84M0qcIIOi
D1tSSAw2b+0dqCi07+QA0b3OT/oq0ci+aaDFUfERIakOFbiorcOGrERjmUtBhECw
v7NR3qkj6qtppi4/1wfEbWI8V3R9lvdvuEgUvBSw5UErKvitEV/4/wercv4uC6sW
QxNnksLmZe+X9y9dcu35gmXotCUUULsXWzidu1twiYt7eUyD0a4o35YTWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRDLYqqb/W9deqSPaR45+X1o52wMB8GA1UdIwQY
MBaAFPyDUl0UL79LlLPRaURTZcZt3939MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQt
NjkyM2E3ZTYxYTZiLzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQtNjkyM2E3ZTYxYTZi
LzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvrhEdj3
klyyvbJ2NDB0Q+rkIoe+PSzaqka5XBfTMfLUUuGdRWBCDEqBSdc5VQYebGyT4VY0
A5Ov4+YIE6HfTjYLHo+kRiIc1NxgvSJKfY7vH73EkPLjtFF2VT3gPLXxeq97JoAW
zQ/+WKMQrPHE7ciiKTmY2Pk7e0vUmEqO7kLuz05pmMQlTR7qz+DFtoEuUC56OEPy
6HAagCbuapkX8/dB72u9OnYki6M96upPK9FtDEz4pHmJyRefho4NCIc5rt0O5MQY
S7r+huFdmp6kuBvzPmDOzec9U24foEUfVJEwRC58L0VB8w2niT7okPVDAkOoN5pS
HjvU7t5N0maQ8A==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:56:53 2026 by rpki-client