Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: lNOyEuxegItfmobDcxRRHCbEIHSmUk1fGX2xwmuNS8c=
Subject key identifier: 2A:1F:F7:EF:D1:19:58:56:66:79:13:10:EA:F7:15:B2:85:1E:E5:D0
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 01A181BE8E8084B8DB314ED6FF42E53EAAD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0FFD
Signing time: Wed 28 Oct 2026 09:01:51 +0000
Manifest this update: Wed 28 Oct 2026 09:01:51 +0000
Manifest next update: Thu 29 Oct 2026 09:01:51 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: rQISOSbrGkEhbdC3VV3BUe4TaaD9wMiOBwe6pkFhevA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:8e:80:84:b8:db:31:4e:d6:ff:42:e5:3e:aa:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Oct 28 09:01:51 2026 GMT
Not After : Oct 29 09:01:51 2026 GMT
Subject: CN=2a1ff7efd119585666791310eaf715b2851ee5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:87:ab:81:c3:ec:e6:38:da:2c:be:32:34:
d0:5a:91:71:94:8b:16:29:97:60:e8:8d:4a:cb:3b:
26:c4:6d:7c:5d:cd:2c:b7:9d:5d:02:8c:ea:29:c5:
0d:1b:ab:50:55:81:47:4d:b7:b2:42:8f:e9:c4:4d:
6b:66:6f:c8:c5:7b:c0:96:25:d8:a7:c8:36:3b:e2:
46:89:d9:f9:69:6d:63:b5:31:8f:57:fb:0f:b6:17:
45:55:9d:df:bc:69:38:13:cd:89:47:ec:ab:25:d4:
34:6a:87:4f:cc:88:eb:76:6f:df:c6:c5:44:46:fa:
30:24:86:5d:46:7a:62:d7:e1:23:60:9e:f2:4f:07:
b7:ae:e6:11:ac:83:ce:19:88:dc:1b:e0:e2:33:53:
89:9d:77:0b:75:a8:18:8f:9b:8f:51:89:ef:0a:5d:
8d:b1:af:13:99:3f:8a:fb:11:16:fe:83:27:e7:0c:
66:56:8a:bb:02:bc:92:55:78:02:22:13:cc:0e:bb:
3e:6d:96:f9:d6:11:1f:5a:e4:75:1c:7d:d9:a4:f0:
db:34:91:a7:74:5d:80:74:b5:ce:e9:3d:52:b1:e8:
6c:a2:98:35:80:d7:f4:03:5c:df:48:0c:b4:f4:1f:
7d:6f:f2:aa:c8:b3:b2:53:96:83:5e:f3:08:30:51:
f1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1F:F7:EF:D1:19:58:56:66:79:13:10:EA:F7:15:B2:85:1E:E5:D0
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ac:f5:e2:3c:bc:89:0a:c0:64:1d:4d:a8:1d:e2:1c:df:46:
e8:9d:17:57:6d:53:54:4a:bf:c4:59:e0:da:a4:59:81:e0:9a:
99:aa:a8:e3:a8:e8:19:ba:b2:4d:6b:8f:19:81:84:af:5e:d1:
a9:10:5e:c9:c6:d5:60:9e:f2:7d:92:c7:e4:3f:b5:17:60:c7:
32:f9:73:ab:23:04:12:10:3f:37:2a:5b:05:aa:4e:75:ad:36:
25:21:d7:df:44:8f:67:96:83:11:17:42:1e:14:65:f7:4b:ce:
d6:cc:22:8b:31:25:fc:c7:ef:fb:cd:f7:20:1e:fa:93:a8:b9:
4d:de:82:a4:e6:e1:7b:c8:f0:82:6d:99:af:ac:f8:34:35:f2:
b3:02:f0:a0:e8:aa:53:c0:e1:9e:44:ac:d9:4b:f6:dc:18:39:
d0:c1:68:af:fc:09:8f:b8:ae:2a:63:ed:81:6f:74:0c:e9:a2:
c4:0b:a0:d1:54:a1:e1:c1:91:5b:5f:11:57:66:0f:70:07:4b:
ab:6e:92:74:ae:97:8e:6d:7b:ea:84:06:f1:7e:61:56:cc:95:
92:89:e4:3b:2c:99:89:71:25:2c:82:34:e4:99:33:41:67:c5:
05:2c:14:7a:ef:9d:ac:71:82:fc:cc:35:20:1e:5f:c5:df:ed:
2b:af:75:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBvo6AhLjbMU7W/0LlPqrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMjM4MGQ3NjRhOTYxMWRmZTJmYmMwY2UwY2M0MDQ5NmVj
MWU4M2UwHhcNMjYxMDI4MDkwMTUxWhcNMjYxMDI5MDkwMTUxWjAzMTEwLwYDVQQD
EygyYTFmZjdlZmQxMTk1ODU2NjY3OTEzMTBlYWY3MTViMjg1MWVlNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPmHq4HD7OY42iy+MjTQWpFxlIsW
KZdg6I1KyzsmxG18Xc0st51dAozqKcUNG6tQVYFHTbeyQo/pxE1rZm/IxXvAliXY
p8g2O+JGidn5aW1jtTGPV/sPthdFVZ3fvGk4E82JR+yrJdQ0aodPzIjrdm/fxsVE
RvowJIZdRnpi1+EjYJ7yTwe3ruYRrIPOGYjcG+DiM1OJnXcLdagYj5uPUYnvCl2N
sa8TmT+K+xEW/oMn5wxmVoq7ArySVXgCIhPMDrs+bZb51hEfWuR1HH3ZpPDbNJGn
dF2AdLXO6T1Ssehsopg1gNf0A1zfSAy09B99b/KqyLOyU5aDXvMIMFHxxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCof9+/RGVhWZnkTEOr3FbKFHuXQMB8GA1UdIwQY
MBaAFHwjgNdkqWEd/i+8DODMQEluweg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMt
NWQ4Y2E2MzY4MWFkLzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMtNWQ4Y2E2MzY4MWFk
LzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6z14jy8
iQrAZB1NqB3iHN9G6J0XV21TVEq/xFng2qRZgeCamaqo46joGbqyTWuPGYGEr17R
qRBeycbVYJ7yfZLH5D+1F2DHMvlzqyMEEhA/NypbBapOda02JSHX30SPZ5aDERdC
HhRl90vO1swiizEl/Mfv+833IB76k6i5Td6CpObhe8jwgm2Zr6z4NDXyswLwoOiq
U8DhnkSs2Uv23Bg50MFor/wJj7iuKmPtgW90DOmixAug0VSh4cGRW18RV2YPcAdL
q26SdK6Xjm176oQG8X5hVsyVkonkOyyZiXElLII05JkzQWfFBSwUeu+drHGC/Mw1
IB5fxd/tK691vg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:50:36 2026 by rpki-client