Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
File: FEz3GmQFf4aSkG29men2hEB9boA.mft (raw, json)
Hash identifier: MatTbgkDESVhC9nZMSe2A/LgT8kVLjEL9+wTELDUsHA=
Subject key identifier: B2:BF:47:83:1F:CD:6B:9C:CA:FF:F2:51:DB:5B:32:74:A4:13:36:9A
Authority key identifier: 14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
Certificate issuer: /CN=144cf71a64057f8692906dbd99e9f684407d6e80
Certificate serial: 01A085663317AD7132C7B8B7594A311AAFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
Manifest number: 01E7
Signing time: Wed 09 Sep 2026 09:01:02 +0000
Manifest this update: Wed 09 Sep 2026 09:01:02 +0000
Manifest next update: Thu 10 Sep 2026 09:01:02 +0000
Files and hashes: 1: FEz3GmQFf4aSkG29men2hEB9boA.crl (hash: kzjpPEdPUcnMJQ4bgO2tRL7pDik08GSc6nVd43n5xAc=)
2: V7cyqG-pYyAMULVUem9DUD4mh5Y.roa (hash: NfpPyZF7G0X8PIMTTllt/U0ECaL4KgW7SFDL7u8msig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:66:33:17:ad:71:32:c7:b8:b7:59:4a:31:1a:af:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144cf71a64057f8692906dbd99e9f684407d6e80
Validity
Not Before: Sep 9 09:01:02 2026 GMT
Not After : Sep 10 09:01:02 2026 GMT
Subject: CN=b2bf47831fcd6b9ccafff251db5b3274a413369a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9d:17:f0:f9:8c:98:3e:a8:5f:dc:ff:51:55:
4f:1b:57:81:42:f1:fc:0d:5f:d0:90:1f:21:d5:44:
28:f8:02:92:21:c3:0f:c4:fa:61:e0:7b:7e:40:4a:
af:09:dd:ef:e2:1f:72:ed:f3:85:8b:a4:3d:86:2e:
81:2a:01:81:ff:e8:35:d0:aa:e6:2c:71:1e:c0:9e:
e2:04:8b:20:31:1e:57:a8:49:2d:af:bb:29:a7:5e:
c6:67:0a:a2:39:30:da:7f:71:39:15:2f:64:3c:01:
97:28:6d:cc:b6:ea:ca:00:18:90:09:46:58:58:62:
f4:fb:e5:44:71:65:45:e9:f9:bc:49:ff:68:4d:59:
60:fb:f2:b6:24:ac:b2:47:c2:61:36:95:f0:01:ec:
98:29:ac:2d:a1:ef:12:ff:b6:ca:b8:df:f9:52:72:
32:b7:f7:a2:cd:ea:a7:89:10:3a:3c:02:ed:fc:3d:
c9:26:90:7a:ff:a5:37:71:84:0a:35:e7:5f:86:32:
9a:f4:dd:1e:ed:1c:3a:a1:62:38:5f:be:96:c0:50:
f6:69:12:ce:7f:0f:b7:f3:36:bf:dc:a9:ab:f5:9a:
9c:2b:cb:8a:64:83:a8:96:5a:b4:8c:f0:39:82:52:
7d:fc:1c:b6:29:cb:88:25:5b:cb:fb:10:90:1e:eb:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BF:47:83:1F:CD:6B:9C:CA:FF:F2:51:DB:5B:32:74:A4:13:36:9A
X509v3 Authority Key Identifier:
keyid:14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ce:b8:59:3c:6b:a4:18:2e:f5:87:c7:fc:cb:a7:81:79:3d:
95:c6:2e:26:7e:46:14:b1:88:04:c2:0e:7c:59:80:92:41:02:
fa:c6:aa:45:5b:23:43:c9:5d:07:66:02:89:ad:79:89:ed:f5:
88:2a:5d:59:0f:62:f1:7f:a9:2b:45:2e:68:a3:57:6f:95:0c:
24:df:97:37:7f:67:85:fa:e2:3f:61:02:d8:ed:f3:b5:6b:9c:
30:a5:37:a3:05:a9:d7:f9:f5:d4:bf:8d:b4:4a:b4:0a:91:64:
6d:4b:4c:fc:2e:c6:40:fc:e8:e2:11:09:c6:b2:55:c1:8d:4f:
a5:22:71:f1:08:cc:1c:75:66:73:50:e5:3e:e9:ad:a4:6e:7d:
17:a8:c3:f9:f3:09:d2:be:92:21:70:05:62:1b:34:15:2e:92:
22:06:e4:72:d6:1a:79:4e:d8:ed:ef:91:d9:70:d3:15:08:f1:
20:39:be:2e:83:65:03:3d:12:90:8e:18:07:07:ca:5d:96:d8:
9a:aa:7d:21:19:08:78:4e:6f:f2:89:75:4f:34:90:47:dc:f3:
e0:d4:7d:43:c8:05:14:9c:6c:25:5c:d9:5b:c8:b0:ee:03:84:
64:01:65:47:29:68:5f:ea:f0:17:66:2a:20:fe:6b:37:ec:37:
7e:75:32:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCFZjMXrXEyx7i3WUoxGq/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NGNmNzFhNjQwNTdmODY5MjkwNmRiZDk5ZTlmNjg0NDA3
ZDZlODAwHhcNMjYwOTA5MDkwMTAyWhcNMjYwOTEwMDkwMTAyWjAzMTEwLwYDVQQD
EyhiMmJmNDc4MzFmY2Q2YjljY2FmZmYyNTFkYjViMzI3NGE0MTMzNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6p0X8PmMmD6oX9z/UVVPG1eBQvH8
DV/QkB8h1UQo+AKSIcMPxPph4Ht+QEqvCd3v4h9y7fOFi6Q9hi6BKgGB/+g10Krm
LHEewJ7iBIsgMR5XqEktr7spp17GZwqiOTDaf3E5FS9kPAGXKG3MturKABiQCUZY
WGL0++VEcWVF6fm8Sf9oTVlg+/K2JKyyR8JhNpXwAeyYKawtoe8S/7bKuN/5UnIy
t/eizeqniRA6PALt/D3JJpB6/6U3cYQKNedfhjKa9N0e7Rw6oWI4X76WwFD2aRLO
fw+38za/3Kmr9ZqcK8uKZIOollq0jPA5glJ9/By2KcuIJVvL+xCQHuumIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLK/R4MfzWucyv/yUdtbMnSkEzaaMB8GA1UdIwQY
MBaAFBRM9xpkBX+GkpBtvZnp9oRAfW6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkV6M0dtUUZmNGFTa0cyOW1lbjJoRUI5Ym9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xNDBkMDQtY2FmYi00NmUzLThjZmEt
YjA1Y2RlOTNkOGU1LzEvRkV6M0dtUUZmNGFTa0cyOW1lbjJoRUI5Ym9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xNDBkMDQtY2FmYi00NmUzLThjZmEtYjA1Y2RlOTNkOGU1
LzEvRkV6M0dtUUZmNGFTa0cyOW1lbjJoRUI5Ym9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMc64WTxr
pBgu9YfH/MungXk9lcYuJn5GFLGIBMIOfFmAkkEC+saqRVsjQ8ldB2YCia15ie31
iCpdWQ9i8X+pK0UuaKNXb5UMJN+XN39nhfriP2EC2O3ztWucMKU3owWp1/n11L+N
tEq0CpFkbUtM/C7GQPzo4hEJxrJVwY1PpSJx8QjMHHVmc1DlPumtpG59F6jD+fMJ
0r6SIXAFYhs0FS6SIgbkctYaeU7Y7e+R2XDTFQjxIDm+LoNlAz0SkI4YBwfKXZbY
mqp9IRkIeE5v8ol1TzSQR9zz4NR9Q8gFFJxsJVzZW8iw7gOEZAFlRyloX+rwF2Yq
IP5rN+w3fnUy7w==
-----END CERTIFICATE-----
Generated at Wed Sep 9 17:16:41 2026 by rpki-client