Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
File: FXR7x-Ei3DLmSJdOml-AZwccX2g.mft (raw, json)
Hash identifier: O7Tc/Y/MOFzG9ACwGZHFABKQHE0BavuRcADxL9XvqXw=
Subject key identifier: F7:CB:71:67:3E:7D:13:FE:C5:3F:89:A2:46:E6:4C:A2:84:35:D5:F1
Authority key identifier: 15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
Certificate issuer: /CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Certificate serial: 01A08E69948CD24D68C4162D3201EBA54FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
Manifest number: C3
Signing time: Fri 11 Sep 2026 03:01:18 +0000
Manifest this update: Fri 11 Sep 2026 03:01:18 +0000
Manifest next update: Sat 12 Sep 2026 03:01:18 +0000
Files and hashes: 1: Cp9szG8ZiUmehxIxFtxHs6_E6Pk.roa (hash: kSkecPG1pI9smWNol14Zb1L2v9Bc+8lRVfBtFoCklw8=)
2: FXR7x-Ei3DLmSJdOml-AZwccX2g.crl (hash: zIitflp9LKlSHlwRJtJpkXt6XVENd0+tfvtyTZGmXAo=)
3: s-et04Mlyh1LCQjhxRW7-Pv1T8o.roa (hash: 9VlOeKx0Y9OpBSYbldEeODyN67iHY8/REhRntjkKlz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:94:8c:d2:4d:68:c4:16:2d:32:01:eb:a5:4f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Validity
Not Before: Sep 11 03:01:18 2026 GMT
Not After : Sep 12 03:01:18 2026 GMT
Subject: CN=f7cb71673e7d13fec53f89a246e64ca28435d5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:c8:1f:dd:28:3e:f2:78:4e:09:d9:d9:37:
8f:dc:8f:28:06:32:4f:af:55:bb:72:b0:4f:a9:ae:
4e:35:11:39:b8:df:f2:ad:58:01:1e:96:40:93:96:
ad:e6:23:96:7f:c4:00:f6:4b:5e:16:73:ad:2d:82:
fa:88:5c:1c:cf:f8:b2:d9:ba:34:97:ac:8e:69:55:
9e:f1:a2:1e:61:31:f6:95:3c:80:e0:5c:e5:09:d2:
14:f9:60:37:43:66:89:44:89:4d:cb:bd:88:3d:82:
d1:0f:2f:dc:b8:c3:70:6b:e2:e8:29:7e:c5:0f:c7:
aa:a9:d2:e9:ef:b2:0c:2e:54:9d:56:3c:6c:b0:af:
d3:67:10:00:7f:ca:23:e8:fd:94:a4:71:8f:0f:f5:
f0:b5:37:18:3b:a9:0d:9a:80:14:e8:7c:de:13:c6:
1c:6a:f3:01:0d:04:46:82:b4:d5:46:20:eb:46:bc:
64:0a:5b:9a:12:be:f4:c8:0c:d4:3b:03:db:48:be:
91:c4:0c:f7:37:a3:15:26:34:7b:a4:80:3f:88:90:
24:21:7b:b8:f8:08:1a:87:09:76:8c:7f:be:02:a5:
49:c3:08:78:8d:ac:02:d4:30:ce:64:7b:54:92:97:
90:73:5b:8d:29:38:8c:24:5b:47:a9:9a:07:ff:4c:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:71:67:3E:7D:13:FE:C5:3F:89:A2:46:E6:4C:A2:84:35:D5:F1
X509v3 Authority Key Identifier:
keyid:15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:42:bc:f1:a9:36:80:ed:95:0a:88:48:e8:0f:bd:8e:2e:35:
0d:70:f9:49:48:bd:82:15:4d:69:68:2d:8f:12:dd:e0:a4:11:
f8:ab:e2:63:d8:91:2b:eb:07:5c:d6:63:95:72:e7:be:37:29:
93:53:7a:73:9b:93:77:33:f4:c6:b9:33:fa:35:8a:e8:78:c8:
a4:36:48:48:cc:27:14:d0:0b:56:93:84:df:9f:ac:74:ce:18:
88:53:a7:c7:de:9f:5f:b3:b7:aa:32:db:79:02:86:8b:f8:ea:
08:65:f8:84:0c:cc:07:a0:d5:fa:34:ec:40:75:ba:6f:cc:9d:
68:c6:b7:0b:10:2e:1c:89:82:78:ac:93:0d:e4:35:a0:81:f8:
8d:bf:73:39:34:6e:48:b9:da:b9:13:4d:96:a7:9f:0e:1b:53:
85:25:fc:3d:ae:31:52:a7:bb:09:f1:39:5d:06:b9:c3:62:20:
89:88:de:9d:fa:6b:39:88:ff:30:24:f4:14:30:0c:c2:c2:2c:
69:59:29:d6:89:bd:88:b7:50:96:97:f0:7f:86:9c:00:8c:d6:
ed:21:c3:a6:f1:54:cc:45:02:a1:9f:3a:14:1a:f7:8b:49:b3:
ff:81:88:b3:12:b0:56:13:4e:39:74:30:f8:7e:b9:4a:27:a7:
b5:a2:26:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCOaZSM0k1oxBYtMgHrpU/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NzQ3YmM3ZTEyMmRjMzJlNjQ4OTc0ZTlhNWY4MDY3MDcx
YzVmNjgwHhcNMjYwOTExMDMwMTE4WhcNMjYwOTEyMDMwMTE4WjAzMTEwLwYDVQQD
EyhmN2NiNzE2NzNlN2QxM2ZlYzUzZjg5YTI0NmU2NGNhMjg0MzVkNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9fIH90oPvJ4TgnZ2TeP3I8oBjJP
r1W7crBPqa5ONRE5uN/yrVgBHpZAk5at5iOWf8QA9kteFnOtLYL6iFwcz/iy2bo0
l6yOaVWe8aIeYTH2lTyA4FzlCdIU+WA3Q2aJRIlNy72IPYLRDy/cuMNwa+LoKX7F
D8eqqdLp77IMLlSdVjxssK/TZxAAf8oj6P2UpHGPD/XwtTcYO6kNmoAU6HzeE8Yc
avMBDQRGgrTVRiDrRrxkCluaEr70yAzUOwPbSL6RxAz3N6MVJjR7pIA/iJAkIXu4
+Agahwl2jH++AqVJwwh4jawC1DDOZHtUkpeQc1uNKTiMJFtHqZoH/0xdaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfLcWc+fRP+xT+JokbmTKKENdXxMB8GA1UdIwQY
MBaAFBV0e8fhItwy5kiXTppfgGcHHF9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhSN3gtRWkzRExtU0pkT21sLUFad2NjWDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2Qt
OWY2ODkwZjkyZTYwLzEvRlhSN3gtRWkzRExtU0pkT21sLUFad2NjWDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2QtOWY2ODkwZjkyZTYw
LzEvRlhSN3gtRWkzRExtU0pkT21sLUFad2NjWDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEK88ak2
gO2VCohI6A+9ji41DXD5SUi9ghVNaWgtjxLd4KQR+KviY9iRK+sHXNZjlXLnvjcp
k1N6c5uTdzP0xrkz+jWK6HjIpDZISMwnFNALVpOE35+sdM4YiFOnx96fX7O3qjLb
eQKGi/jqCGX4hAzMB6DV+jTsQHW6b8ydaMa3CxAuHImCeKyTDeQ1oIH4jb9zOTRu
SLnauRNNlqefDhtThSX8Pa4xUqe7CfE5XQa5w2IgiYjenfprOYj/MCT0FDAMwsIs
aVkp1om9iLdQlpfwf4acAIzW7SHDpvFUzEUCoZ86FBr3i0mz/4GIsxKwVhNOOXQw
+H65SientaImUQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:32:04 2026 by rpki-client