Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/FgRY0VSRbymXf4fKbcozCaRPzzk.mft
File: FgRY0VSRbymXf4fKbcozCaRPzzk.mft (raw, json)
Hash identifier: vt4z4egewT1JCsNu41XM8ntkWLf6oMNXAj34s00aUKE=
Subject key identifier: EA:7F:35:AA:A5:78:13:A9:63:FB:DF:E6:0D:CB:17:F1:1C:02:9A:F2
Authority key identifier: 16:04:58:D1:54:91:6F:29:97:7F:87:CA:6D:CA:33:09:A4:4F:CF:39
Certificate issuer: /CN=160458d154916f29977f87ca6dca3309a44fcf39
Certificate serial: 01A163EA3E181FFE2DF873E13454B401F868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRY0VSRbymXf4fKbcozCaRPzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/FgRY0VSRbymXf4fKbcozCaRPzzk.mft
Manifest number: 16
Signing time: Thu 22 Oct 2026 14:00:57 +0000
Manifest this update: Thu 22 Oct 2026 14:00:57 +0000
Manifest next update: Fri 23 Oct 2026 14:00:57 +0000
Files and hashes: 1: FgRY0VSRbymXf4fKbcozCaRPzzk.crl (hash: hHo6IqUJ65A0RFpNcPzYlXsBFAjFpqfZ451Onln1GIY=)
2: eIR10BXCLsp72l5ysNCP8bK50xU.roa (hash: 4qcDeEXmMpaq3EoAvCzphRrhBELGv9lJYT62WCxaGHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/FgRY0VSRbymXf4fKbcozCaRPzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/FgRY0VSRbymXf4fKbcozCaRPzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgRY0VSRbymXf4fKbcozCaRPzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:ea:3e:18:1f:fe:2d:f8:73:e1:34:54:b4:01:f8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=160458d154916f29977f87ca6dca3309a44fcf39
Validity
Not Before: Oct 22 14:00:57 2026 GMT
Not After : Oct 23 14:00:57 2026 GMT
Subject: CN=ea7f35aaa57813a963fbdfe60dcb17f11c029af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:a2:3a:b1:ea:95:86:c9:c6:66:68:3a:09:
5b:bc:72:ff:c8:56:94:d0:08:5f:f2:e5:fa:2e:8c:
ee:10:74:1a:be:eb:56:0f:b2:81:87:66:14:c6:91:
13:23:a6:b5:fb:d7:e0:ff:94:9e:23:78:22:21:97:
86:81:a0:b1:d8:ce:b0:2c:06:46:10:e9:0a:af:c3:
e0:c8:1f:f7:c6:d4:38:9b:fd:9c:39:73:b7:04:5d:
a4:07:dd:91:47:ae:6a:74:b7:bc:44:fe:34:6c:5d:
41:59:c7:19:a1:a1:d1:fa:06:51:03:31:75:c0:7c:
19:e8:b7:60:d3:89:ec:93:50:7d:8c:20:3f:1c:d1:
db:ad:12:30:0f:63:61:86:c7:18:ec:9d:30:f8:8f:
db:6b:b0:f6:e7:6b:7c:88:0d:78:32:2a:eb:e9:f6:
52:06:61:e1:97:44:37:f9:35:3f:91:ff:bd:80:84:
e8:d5:35:7d:02:87:54:66:49:8c:17:76:25:24:fe:
d8:ca:85:69:28:f9:ce:28:b5:f5:03:77:e4:43:6e:
2a:31:d1:de:67:0d:80:62:59:fe:84:86:86:1c:85:
6d:ec:3b:a6:03:76:19:2d:72:ad:21:de:b3:35:49:
30:03:72:c7:9d:7d:20:dd:b6:7d:7a:65:ef:32:ab:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7F:35:AA:A5:78:13:A9:63:FB:DF:E6:0D:CB:17:F1:1C:02:9A:F2
X509v3 Authority Key Identifier:
keyid:16:04:58:D1:54:91:6F:29:97:7F:87:CA:6D:CA:33:09:A4:4F:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRY0VSRbymXf4fKbcozCaRPzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/FgRY0VSRbymXf4fKbcozCaRPzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/5cd030-d6ac-4e7b-8c65-56b1fd05d9d3/1/FgRY0VSRbymXf4fKbcozCaRPzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:87:1c:28:27:45:74:91:3f:41:cf:c9:67:fe:96:b9:2f:e0:
d4:8b:4d:05:f3:20:63:11:c7:4a:16:94:32:ed:f4:2a:2f:3f:
0b:7f:58:49:36:21:a5:b8:87:e0:2c:d2:5f:64:8e:7b:0b:71:
1e:5e:87:e3:50:75:8b:12:5c:76:eb:16:a6:b5:a5:26:2e:a7:
e0:21:f6:8c:4c:20:e5:82:de:89:44:a0:a2:d5:96:5a:53:f5:
de:0b:c2:80:9b:ba:34:a9:6a:24:c0:12:6a:fb:ce:41:00:74:
fe:53:e6:1b:47:40:73:50:d2:0d:58:7b:1b:f3:1e:60:bf:55:
c8:6b:42:0e:b5:60:7f:79:dc:76:ad:82:52:ee:15:c0:fd:6c:
52:38:30:f2:66:99:39:56:0c:7c:50:e8:23:b4:34:4f:86:bb:
ab:d7:f9:41:bd:9b:fb:05:00:29:f8:bc:81:b2:1e:af:ac:e6:
8b:7c:17:8e:50:8e:b2:30:52:40:a5:64:86:77:36:9c:0b:fa:
52:82:f6:80:a8:05:fb:e0:0a:02:9e:20:fb:5d:ed:58:1f:c6:
68:63:44:c7:7d:11:17:3a:0a:1f:19:b1:90:65:13:6b:52:93:
ca:0c:4a:07:1c:1d:53:5d:a1:72:a2:2c:e8:ee:a7:98:d0:97:
32:7a:03:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFj6j4YH/4t+HPhNFS0AfhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDQ1OGQxNTQ5MTZmMjk5NzdmODdjYTZkY2EzMzA5YTQ0
ZmNmMzkwHhcNMjYxMDIyMTQwMDU3WhcNMjYxMDIzMTQwMDU3WjAzMTEwLwYDVQQD
EyhlYTdmMzVhYWE1NzgxM2E5NjNmYmRmZTYwZGNiMTdmMTFjMDI5YWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaGiOrHqlYbJxmZoOglbvHL/yFaU
0Ahf8uX6LozuEHQavutWD7KBh2YUxpETI6a1+9fg/5SeI3giIZeGgaCx2M6wLAZG
EOkKr8PgyB/3xtQ4m/2cOXO3BF2kB92RR65qdLe8RP40bF1BWccZoaHR+gZRAzF1
wHwZ6Ldg04nsk1B9jCA/HNHbrRIwD2NhhscY7J0w+I/ba7D252t8iA14Mirr6fZS
BmHhl0Q3+TU/kf+9gITo1TV9AodUZkmMF3YlJP7YyoVpKPnOKLX1A3fkQ24qMdHe
Zw2AYln+hIaGHIVt7DumA3YZLXKtId6zNUkwA3LHnX0g3bZ9emXvMqsHjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOp/NaqleBOpY/vf5g3LF/EcApryMB8GA1UdIwQY
MBaAFBYEWNFUkW8pl3+Hym3KMwmkT885MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdSWTBWU1JieW1YZjRmS2Jjb3pDYVJQenprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS81Y2QwMzAtZDZhYy00ZTdiLThjNjUt
NTZiMWZkMDVkOWQzLzEvRmdSWTBWU1JieW1YZjRmS2Jjb3pDYVJQenprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS81Y2QwMzAtZDZhYy00ZTdiLThjNjUtNTZiMWZkMDVkOWQz
LzEvRmdSWTBWU1JieW1YZjRmS2Jjb3pDYVJQenprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIccKCdF
dJE/Qc/JZ/6WuS/g1ItNBfMgYxHHShaUMu30Ki8/C39YSTYhpbiH4CzSX2SOewtx
Hl6H41B1ixJcdusWprWlJi6n4CH2jEwg5YLeiUSgotWWWlP13gvCgJu6NKlqJMAS
avvOQQB0/lPmG0dAc1DSDVh7G/MeYL9VyGtCDrVgf3ncdq2CUu4VwP1sUjgw8maZ
OVYMfFDoI7Q0T4a7q9f5Qb2b+wUAKfi8gbIer6zmi3wXjlCOsjBSQKVkhnc2nAv6
UoL2gKgF++AKAp4g+13tWB/GaGNEx30RFzoKHxmxkGUTa1KTygxKBxwdU12hcqIs
6O6nmNCXMnoDTg==
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:16:47 2026 by rpki-client