Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: SyNyWiTm59H74fIlGsyEYJaXoLspQt8m6ILUBc7DV90=
Subject key identifier: 8D:F9:82:CD:F5:69:AF:49:8F:BF:54:55:E7:5A:2E:93:4F:8B:14:FD
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 01A0705EFF4FCE7E8D5BFB37BC08512BA220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 1350
Signing time: Sat 05 Sep 2026 07:01:08 +0000
Manifest this update: Sat 05 Sep 2026 07:01:08 +0000
Manifest next update: Sun 06 Sep 2026 07:01:08 +0000
Files and hashes: 1: 9EY388q_8N1ByylpLUNJcoEQmNc.roa (hash: swwp7NtGKddr8ryZRv2cyRO8Q2e4qDuv+717NcJsQ10=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: 6kRLvXOrdcD5qCvc1RNvegn1aEMCz2nPD7TvpyeFIac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:5e:ff:4f:ce:7e:8d:5b:fb:37:bc:08:51:2b:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Sep 5 07:01:08 2026 GMT
Not After : Sep 6 07:01:08 2026 GMT
Subject: CN=8df982cdf569af498fbf5455e75a2e934f8b14fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:12:98:db:54:c2:ec:7f:b1:cf:c1:a4:2f:
1f:25:23:fb:2d:10:9d:01:1f:7a:86:98:2c:43:63:
57:d0:97:c9:fd:66:ad:8a:cf:8b:b4:57:9e:6a:16:
d8:a8:98:b0:c6:76:b2:cd:7e:f3:b1:af:d8:cb:1f:
b3:7c:08:70:52:cc:a2:34:79:87:63:7e:d8:50:a3:
c9:99:8f:dc:8b:af:31:36:dc:59:3b:2a:88:35:82:
1c:f6:08:fc:f4:fa:2a:5b:4c:38:2f:f8:1c:08:41:
7d:97:00:0a:76:27:d6:93:3c:ca:58:48:d7:75:f7:
2d:3c:81:12:e0:a0:34:9d:9c:5d:ee:cc:54:0c:06:
83:9a:76:a1:d7:04:89:24:ea:53:7f:cd:07:cb:1f:
1a:24:42:f7:d8:8a:a8:0e:6c:36:53:86:04:d0:25:
69:7c:d5:90:ab:ed:6f:3e:33:81:7f:ae:de:0f:6e:
12:9b:c5:3c:26:c6:5d:90:01:f6:5a:dd:f4:d5:dd:
30:f9:f9:d2:68:63:7f:e1:29:e5:ec:b3:9c:cf:84:
89:ee:b0:62:1d:c1:e5:5b:3e:75:86:b4:c6:c1:aa:
ef:12:a6:d5:ca:ca:c1:33:dd:a2:00:e1:7c:25:71:
18:d3:67:ee:e2:e9:53:8e:80:61:14:73:88:b6:80:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F9:82:CD:F5:69:AF:49:8F:BF:54:55:E7:5A:2E:93:4F:8B:14:FD
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:96:11:1c:d6:a3:8c:2d:33:5d:d3:0c:1f:91:4b:43:ea:fa:
5e:c3:d3:a1:9b:4b:30:2b:40:50:c2:b2:cd:13:d3:cb:2f:74:
83:8e:66:3f:15:68:c6:13:ac:d2:b3:de:95:9e:74:a0:27:15:
9d:6c:f8:b1:0f:7c:ff:81:be:48:96:62:24:df:39:38:ee:6f:
67:c6:94:d7:4f:19:66:1b:68:ae:2d:c1:6a:98:5f:b3:ea:59:
cb:50:e2:75:e8:0d:6f:79:51:3a:5d:44:11:51:df:9a:79:6c:
6c:4d:17:87:21:31:31:67:43:31:f0:04:39:e3:13:a1:41:3b:
29:86:87:54:b9:14:b8:a2:4a:9a:f6:b2:ec:89:0c:42:68:9b:
79:66:50:9e:47:83:57:c8:c3:d6:d3:c2:ec:24:97:b5:0f:ca:
ee:8c:f9:f2:fa:d7:6b:24:cb:44:dc:dc:f3:14:50:1c:ac:d7:
6e:9b:08:57:8b:e8:8a:71:5a:e8:c8:a8:19:3d:75:6c:a5:bf:
ab:58:86:6b:47:64:40:a7:72:e4:dd:3b:74:e8:66:24:a7:da:
4a:9f:ea:89:9b:9f:a2:42:f2:ed:56:f8:63:66:09:94:55:d7:
7d:97:77:7e:9f:1f:95:69:cc:f4:35:63:20:57:6a:f6:aa:a6:
ca:8d:0d:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBwXv9Pzn6NW/s3vAhRK6IgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NjU1ZTU1OTVmNWEzYzA3MWMxMmIxNzlkYjkyNzlkYzdk
YjA5MTMwHhcNMjYwOTA1MDcwMTA4WhcNMjYwOTA2MDcwMTA4WjAzMTEwLwYDVQQD
Eyg4ZGY5ODJjZGY1NjlhZjQ5OGZiZjU0NTVlNzVhMmU5MzRmOGIxNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd0SmNtUwux/sc/BpC8fJSP7LRCd
AR96hpgsQ2NX0JfJ/Watis+LtFeeahbYqJiwxnayzX7zsa/Yyx+zfAhwUsyiNHmH
Y37YUKPJmY/ci68xNtxZOyqINYIc9gj89PoqW0w4L/gcCEF9lwAKdifWkzzKWEjX
dfctPIES4KA0nZxd7sxUDAaDmnah1wSJJOpTf80Hyx8aJEL32IqoDmw2U4YE0CVp
fNWQq+1vPjOBf67eD24Sm8U8JsZdkAH2Wt301d0w+fnSaGN/4Snl7LOcz4SJ7rBi
HcHlWz51hrTGwarvEqbVysrBM92iAOF8JXEY02fu4ulTjoBhFHOItoA9TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI35gs31aa9Jj79UVedaLpNPixT9MB8GA1UdIwQY
MBaAFBZlXlWV9aPAccErF525J53H2wkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYt
ZGQ0ODA0ODQwZGQ2LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYtZGQ0ODA0ODQwZGQ2
LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5YRHNaj
jC0zXdMMH5FLQ+r6XsPToZtLMCtAUMKyzRPTyy90g45mPxVoxhOs0rPelZ50oCcV
nWz4sQ98/4G+SJZiJN85OO5vZ8aU108ZZhtori3Baphfs+pZy1DidegNb3lROl1E
EVHfmnlsbE0XhyExMWdDMfAEOeMToUE7KYaHVLkUuKJKmvay7IkMQmibeWZQnkeD
V8jD1tPC7CSXtQ/K7oz58vrXayTLRNzc8xRQHKzXbpsIV4voinFa6MioGT11bKW/
q1iGa0dkQKdy5N07dOhmJKfaSp/qiZufokLy7Vb4Y2YJlFXXfZd3fp8flWnM9DVj
IFdq9qqmyo0NWw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 12:34:43 2026 by rpki-client