Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: OPTY2EbBTjyxkT9qktvnyOJf54XKYyNYUq9kGMn2BM0=
Subject key identifier: A1:51:FE:6D:43:3A:78:FC:6A:88:98:DC:19:19:68:CE:AF:02:9B:EC
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 01A000CAA62FECDB7D58F12CBA4760AEF57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 15:01:15 +0000
Manifest this update: Fri 14 Aug 2026 15:01:15 +0000
Manifest next update: Sat 15 Aug 2026 15:01:15 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: SPSXBvgPM0EB/jRKKZtzeUCBEDF0Bs48iaVQGjOAOF0=)
2: eN72_JOrglIivcRIrkUpJBSTrpQ.roa (hash: AlV36PTHBMVTau6gOr573zu4YRN7qhKbu3yDLrxxjYM=)
3: jgptn0oWvPfILsGhYu7AQtAVGQI.roa (hash: esf6xdXJXvTREZt/uQo773kjs6wVF4kHKSB6ECh3KeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:a6:2f:ec:db:7d:58:f1:2c:ba:47:60:ae:f5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Aug 14 15:01:15 2026 GMT
Not After : Aug 15 15:01:15 2026 GMT
Subject: CN=a151fe6d433a78fc6a8898dc191968ceaf029bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:06:44:2d:ff:bf:09:c1:d4:75:b9:d6:99:
be:67:0c:4e:b5:25:29:2a:ce:b0:53:45:cd:81:3f:
1e:51:7c:b6:a1:fe:89:ad:0c:10:2b:0a:ab:d1:42:
16:27:2a:7f:8b:8a:20:1e:0e:35:69:8b:2b:fe:51:
11:3a:45:6e:f4:8b:8d:9d:d9:f2:69:65:68:79:f4:
4f:5d:28:52:7d:03:80:ae:8b:73:be:4c:2a:19:9a:
b3:d0:e5:de:34:77:17:84:89:d9:fb:0d:72:e1:ac:
a7:e4:40:cd:64:27:5d:1b:08:28:83:54:42:e6:56:
e8:81:f3:ed:c7:d1:fb:d8:d4:18:80:32:44:79:57:
45:8f:92:8d:59:61:66:71:3a:9a:37:fd:6a:79:bb:
cc:35:3d:07:73:88:31:37:ed:62:4e:19:b0:38:0d:
39:81:73:fa:8d:b0:16:cf:81:f2:84:1a:5a:de:b8:
02:9d:64:3e:73:91:a2:73:a7:33:97:57:4c:6c:d0:
66:0d:84:7d:a2:07:74:85:0c:79:d4:42:a4:21:47:
f6:a8:f6:3c:a4:75:36:87:14:31:ef:7c:c1:91:30:
18:e2:3b:4c:c2:a1:ec:f0:b5:6e:40:f4:bf:50:26:
e7:1a:15:21:64:fc:65:a2:1b:20:2e:94:f6:fa:c4:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:51:FE:6D:43:3A:78:FC:6A:88:98:DC:19:19:68:CE:AF:02:9B:EC
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c2:ce:fa:ac:95:af:36:f4:b5:0c:1a:af:bb:04:4b:bb:a7:
42:69:ac:12:32:89:77:17:14:f7:55:c8:c1:14:d4:80:f3:b6:
db:1f:e5:de:b4:3e:9d:a5:0d:7f:c6:dd:3c:a6:54:03:1a:33:
45:21:99:68:94:32:a4:95:82:b1:f9:d8:2d:a4:f9:42:78:aa:
51:a3:e4:da:e1:ef:d6:9e:d2:24:15:6b:64:b6:28:a1:2f:9a:
ad:11:7f:6d:26:20:fd:7b:45:d0:60:21:83:d4:ae:e8:01:19:
60:a9:cf:b2:77:c2:40:0e:22:ae:6e:6f:76:66:c4:13:81:cb:
d0:c6:87:66:ec:aa:8d:c8:a2:4b:4a:aa:04:c6:1d:f5:e4:61:
c1:eb:c4:30:b7:6f:0f:76:40:b4:0a:40:eb:56:5f:d0:25:98:
06:29:24:e1:77:bf:28:d8:59:7e:5e:df:f9:c4:85:83:14:22:
0a:9c:a6:07:65:da:6e:f5:f6:47:6c:d1:ad:0f:41:4c:29:ab:
95:f4:68:02:f6:19:58:14:86:29:e7:a8:44:16:48:ab:29:1b:
40:3a:9c:45:f6:c2:0a:08:9c:df:0d:a6:48:34:16:a9:99:f3:
35:6b:81:ff:04:29:d0:0b:8a:e0:02:39:63:ac:12:2f:99:e2:
1b:89:19:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAyqYv7Nt9WPEsukdgrvV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNWE4NWM0NWJmNTNjM2Q4OGE3NjY5NWFhZmViYmQ0YWE3
N2JiYzEwHhcNMjYwODE0MTUwMTE1WhcNMjYwODE1MTUwMTE1WjAzMTEwLwYDVQQD
EyhhMTUxZmU2ZDQzM2E3OGZjNmE4ODk4ZGMxOTE5NjhjZWFmMDI5YmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqMGRC3/vwnB1HW51pm+ZwxOtSUp
Ks6wU0XNgT8eUXy2of6JrQwQKwqr0UIWJyp/i4ogHg41aYsr/lEROkVu9IuNndny
aWVoefRPXShSfQOArotzvkwqGZqz0OXeNHcXhInZ+w1y4ayn5EDNZCddGwgog1RC
5lbogfPtx9H72NQYgDJEeVdFj5KNWWFmcTqaN/1qebvMNT0Hc4gxN+1iThmwOA05
gXP6jbAWz4HyhBpa3rgCnWQ+c5Gic6czl1dMbNBmDYR9ogd0hQx51EKkIUf2qPY8
pHU2hxQx73zBkTAY4jtMwqHs8LVuQPS/UCbnGhUhZPxlohsgLpT2+sQXtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFR/m1DOnj8aoiY3BkZaM6vApvsMB8GA1UdIwQY
MBaAFNBahcRb9Tw9iKdmlar+u9Sqd7vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUt
NGY5ODQwZGVmYTFmLzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUtNGY5ODQwZGVmYTFm
LzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsLO+qyV
rzb0tQwar7sES7unQmmsEjKJdxcU91XIwRTUgPO22x/l3rQ+naUNf8bdPKZUAxoz
RSGZaJQypJWCsfnYLaT5QniqUaPk2uHv1p7SJBVrZLYooS+arRF/bSYg/XtF0GAh
g9Su6AEZYKnPsnfCQA4irm5vdmbEE4HL0MaHZuyqjciiS0qqBMYd9eRhwevEMLdv
D3ZAtApA61Zf0CWYBikk4Xe/KNhZfl7f+cSFgxQiCpymB2XabvX2R2zRrQ9BTCmr
lfRoAvYZWBSGKeeoRBZIqykbQDqcRfbCCgic3w2mSDQWqZnzNWuB/wQp0AuK4AI5
Y6wSL5niG4kZug==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:44 2026 by rpki-client