Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: L2zMVJkRzW7SROaYYjKm9WoGgEWBif9kz3SrWjsXInY=
Subject key identifier: 6B:63:64:09:92:F7:40:2D:B6:2F:05:00:7C:00:22:40:0C:EA:F7:83
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 01A17B166C677D38CD2DBB3ABF5997E9F868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 1ADC
Signing time: Tue 27 Oct 2026 02:00:29 +0000
Manifest this update: Tue 27 Oct 2026 02:00:29 +0000
Manifest next update: Wed 28 Oct 2026 02:00:29 +0000
Files and hashes: 1: DszWoqmG0YIHoueHjWKPKymZuic.roa (hash: a/AiCmPeqXPt0J3j9Logjd5trMJCl8VjFbnLjo6iufM=)
2: E4NAfEwW3jbfNnqs4s6wX2om-oU.roa (hash: fdTtA83SV7tJMvW5toFMANKX74HjpiK+6fBeEianyoA=)
3: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: Gnrrpgbi2yJMrQEGiPxT92a3ltOvlnMCPj3kfB6W9bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:6c:67:7d:38:cd:2d:bb:3a:bf:59:97:e9:f8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Oct 27 02:00:29 2026 GMT
Not After : Oct 28 02:00:29 2026 GMT
Subject: CN=6b63640992f7402db62f05007c0022400ceaf783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:3d:28:11:b0:23:e8:57:5b:d4:d5:7e:ad:
5e:cd:5c:d6:b2:60:87:7d:a5:38:6f:84:5b:65:96:
d2:14:c9:82:43:11:2d:6b:7d:47:5c:38:e8:30:10:
d7:e8:5b:db:6b:5f:1d:c6:58:e9:9e:0c:4e:1e:bc:
f6:fe:da:6f:95:54:fa:8c:7e:12:1b:44:b1:33:0e:
1c:b9:c7:c6:86:3b:31:ff:f2:6c:6a:e8:ea:55:4e:
1a:8a:b8:b7:68:96:74:b1:ed:41:56:47:4e:39:5c:
d2:66:a5:aa:8c:24:b6:9b:35:09:4b:ef:7c:d0:fd:
96:c0:a5:c1:63:ed:8f:c6:f8:cd:d2:f2:fe:01:1e:
2e:99:39:04:5b:68:4b:97:eb:73:6f:b9:5a:00:09:
02:b5:1d:d3:66:f7:9a:79:1e:17:94:0d:c5:e4:d7:
7b:d2:66:8b:21:c7:5a:df:6d:12:e4:30:e6:d2:c1:
6b:4a:0a:82:82:0c:2e:fe:1f:6a:87:d4:34:31:1a:
40:ce:07:5d:ce:1c:88:b4:36:1a:3b:4e:c0:b1:d7:
44:5e:ca:f0:bf:80:b5:59:f1:ed:87:c3:3d:00:81:
47:a8:8c:9a:57:76:ef:13:bb:f0:ea:2f:f1:cc:11:
9e:2f:8e:9f:17:e9:ca:e8:48:ac:b2:94:ed:d5:4b:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:63:64:09:92:F7:40:2D:B6:2F:05:00:7C:00:22:40:0C:EA:F7:83
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:41:ba:41:ca:04:a1:02:b8:6f:0d:00:bc:d7:69:a4:81:0b:
96:19:0f:15:24:26:e1:54:5f:42:30:51:0b:fe:93:a9:7e:46:
8e:52:dc:57:7e:20:f6:62:3b:a8:d3:20:84:f6:48:c8:9f:fe:
b2:c7:3a:e7:3b:fc:ba:a9:9c:08:26:b3:79:64:bd:8d:f9:d2:
82:d4:be:cc:ba:68:82:23:f1:fc:7c:6e:bf:52:3d:2f:b3:43:
8f:d9:9b:3b:6f:07:f1:d2:e9:b0:81:16:22:02:e5:a1:2b:67:
15:be:79:e5:a6:0f:43:8b:9b:7f:d3:f5:4a:ef:9d:13:cb:12:
d1:1a:2a:15:77:a3:eb:a3:fb:03:c2:1a:e9:9f:97:9f:8b:b6:
06:bc:ef:63:6b:90:ac:71:b8:68:57:9a:81:be:12:77:c6:f9:
c0:fd:71:5f:5e:40:af:52:8e:85:cb:6b:21:e2:d1:b1:7f:05:
28:68:54:0a:b4:fe:c1:6e:cb:e7:c9:cd:96:5c:e7:7b:23:8a:
90:14:fd:d1:d9:5b:fa:36:a0:37:dc:73:dc:06:68:7b:a6:88:
50:70:a6:3c:6c:68:c8:64:24:d9:67:61:cf:0b:28:f9:2d:96:
2b:e6:27:45:80:05:6c:f2:11:7c:ee:ed:56:8f:93:18:cb:c1:
b2:11:74:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7FmxnfTjNLbs6v1mX6fhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ODYwMGRmYWM5ZDNkMWE3NWU2NjMwZDY5NzEwMmYyZjIx
MzJjNDgwHhcNMjYxMDI3MDIwMDI5WhcNMjYxMDI4MDIwMDI5WjAzMTEwLwYDVQQD
Eyg2YjYzNjQwOTkyZjc0MDJkYjYyZjA1MDA3YzAwMjI0MDBjZWFmNzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaw9KBGwI+hXW9TVfq1ezVzWsmCH
faU4b4RbZZbSFMmCQxEta31HXDjoMBDX6Fvba18dxljpngxOHrz2/tpvlVT6jH4S
G0SxMw4cucfGhjsx//JsaujqVU4airi3aJZ0se1BVkdOOVzSZqWqjCS2mzUJS+98
0P2WwKXBY+2PxvjN0vL+AR4umTkEW2hLl+tzb7laAAkCtR3TZveaeR4XlA3F5Nd7
0maLIcda320S5DDm0sFrSgqCggwu/h9qh9Q0MRpAzgddzhyItDYaO07AsddEXsrw
v4C1WfHth8M9AIFHqIyaV3bvE7vw6i/xzBGeL46fF+nK6EisspTt1UtAEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtjZAmS90Atti8FAHwAIkAM6veDMB8GA1UdIwQY
MBaAFBaGAN+snT0adeZjDWlxAvLyEyxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hZjM1YzMtN2Y4MS00ODI5LThkYmEt
MThkYmU2NTA0YmI0LzEvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9hZjM1YzMtN2Y4MS00ODI5LThkYmEtMThkYmU2NTA0YmI0
LzEvRm9ZQTM2eWRQUnAxNW1NTmFYRUM4dklUTEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUG6QcoE
oQK4bw0AvNdppIELlhkPFSQm4VRfQjBRC/6TqX5GjlLcV34g9mI7qNMghPZIyJ/+
ssc65zv8uqmcCCazeWS9jfnSgtS+zLpogiPx/Hxuv1I9L7NDj9mbO28H8dLpsIEW
IgLloStnFb555aYPQ4ubf9P1Su+dE8sS0RoqFXej66P7A8Ia6Z+Xn4u2BrzvY2uQ
rHG4aFeagb4Sd8b5wP1xX15Ar1KOhctrIeLRsX8FKGhUCrT+wW7L58nNllzneyOK
kBT90dlb+jagN9xz3AZoe6aIUHCmPGxoyGQk2Wdhzwso+S2WK+YnRYAFbPIRfO7t
Vo+TGMvBshF0wQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:49:50 2026 by rpki-client