Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
File: FQe7zTFN1RPt1WowSBK-vj4Qniw.mft (raw, json)
Hash identifier: 2gexdiCknc3wWc4s3C8wuN0bztd3EpXhrNBLZyufDTw=
Subject key identifier: A2:BF:28:C2:DD:4F:EB:53:F5:22:C2:74:0B:65:A2:6D:32:C0:50:3F
Authority key identifier: 15:07:BB:CD:31:4D:D5:13:ED:D5:6A:30:48:12:BE:BE:3E:10:9E:2C
Certificate issuer: /CN=1507bbcd314dd513edd56a304812bebe3e109e2c
Certificate serial: 01A08AFA3135FDBBE818DCD915764447019E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
Manifest number: 87
Signing time: Thu 10 Sep 2026 11:00:47 +0000
Manifest this update: Thu 10 Sep 2026 11:00:47 +0000
Manifest next update: Fri 11 Sep 2026 11:00:47 +0000
Files and hashes: 1: Dbe17-TY0Aj65PbKINIpMBV9ZEs.roa (hash: 4cS0yJGa1qGXptqnTWuUTKBWN0RvY+fjOJv3AFlspyE=)
2: FQe7zTFN1RPt1WowSBK-vj4Qniw.crl (hash: j26cHMzkXzot24m4inqfJoeub/9objA43Miyz1H7t0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:31:35:fd:bb:e8:18:dc:d9:15:76:44:47:01:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1507bbcd314dd513edd56a304812bebe3e109e2c
Validity
Not Before: Sep 10 11:00:47 2026 GMT
Not After : Sep 11 11:00:47 2026 GMT
Subject: CN=a2bf28c2dd4feb53f522c2740b65a26d32c0503f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:02:23:6d:49:5d:f1:59:ce:4f:1d:d7:2b:c6:
f3:39:39:81:d7:99:b6:22:63:03:fe:44:95:1c:7d:
52:64:ed:e7:25:9b:46:52:0c:9c:22:b5:b2:78:89:
e5:48:f7:8c:fe:8f:25:fa:87:d1:0f:9f:14:70:2d:
77:50:e1:44:c4:4e:a6:d5:a2:eb:b0:f7:75:2e:0a:
a0:8b:8a:c4:ed:e9:7c:8b:46:88:c0:39:de:34:7c:
76:fa:6d:b2:47:0b:ee:4c:9e:1c:65:b7:d4:21:db:
bd:bc:48:ad:42:39:53:58:cf:ee:a7:8f:8b:c2:af:
16:59:2c:61:64:cc:1e:1f:f3:e3:1d:a1:96:ad:7a:
07:36:3a:24:27:28:68:71:4e:0f:69:84:9c:b9:a6:
0a:08:6b:fa:dd:f4:1a:ad:b6:48:6c:5e:d7:34:97:
d6:8b:d0:b0:08:27:c3:f9:c0:52:87:b2:99:f1:28:
1c:36:1e:f6:3d:a3:b2:d1:2b:fa:24:6a:9c:ae:7b:
b0:c3:cf:87:4a:d3:8b:d5:0a:21:05:cb:97:fd:31:
0d:35:0d:5c:af:8b:a4:b5:fc:fb:d8:92:97:b1:02:
42:3b:40:f7:66:e1:19:e3:97:23:54:ac:60:16:ae:
e4:f8:73:ca:4f:c2:e3:dd:90:59:b5:02:bc:ab:dc:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BF:28:C2:DD:4F:EB:53:F5:22:C2:74:0B:65:A2:6D:32:C0:50:3F
X509v3 Authority Key Identifier:
keyid:15:07:BB:CD:31:4D:D5:13:ED:D5:6A:30:48:12:BE:BE:3E:10:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQe7zTFN1RPt1WowSBK-vj4Qniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7a242-4407-4d09-a296-7b67d178c472/1/FQe7zTFN1RPt1WowSBK-vj4Qniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9f:09:03:00:59:80:d7:a0:2c:7e:c1:f9:a6:0f:93:93:a6:
92:aa:ce:8c:c2:7a:6d:c0:42:d9:c0:4c:4b:44:cc:5e:8e:2f:
fe:65:38:13:7a:8e:ae:f1:e5:24:ef:ca:71:ec:2f:24:eb:06:
11:c3:a3:0d:99:85:b1:19:36:b4:fa:19:c9:42:d4:8f:64:e1:
6d:47:9f:ac:dc:12:ef:43:27:b8:cd:79:5b:e1:9e:92:f8:d4:
73:0d:12:44:48:a6:76:70:6d:37:4c:60:bd:18:13:8d:3f:90:
5d:05:c6:c9:2f:84:93:78:12:99:05:36:2f:52:95:60:2a:37:
28:59:f1:d4:52:eb:02:ad:fc:85:c4:84:24:31:e4:47:f4:87:
7f:17:a1:82:7c:1b:67:91:8f:c4:2d:74:f4:6b:9c:0d:68:f5:
82:69:f6:fd:39:3f:e0:bc:e7:eb:93:6e:92:00:32:26:a4:f6:
c8:18:f4:86:7b:e0:5a:70:7e:1a:f4:95:12:b2:83:2e:d6:7e:
fb:2d:5a:89:d4:20:9e:5c:34:b0:36:99:b7:43:e8:8a:24:fd:
ad:eb:6f:89:f0:65:57:4f:30:7e:d7:18:4b:d1:d5:a0:86:f0:
35:6d:dc:10:2d:73:59:18:a2:de:e5:a4:e8:40:2a:3c:92:ca:
1d:e8:4f:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+jE1/bvoGNzZFXZERwGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDdiYmNkMzE0ZGQ1MTNlZGQ1NmEzMDQ4MTJiZWJlM2Ux
MDllMmMwHhcNMjYwOTEwMTEwMDQ3WhcNMjYwOTExMTEwMDQ3WjAzMTEwLwYDVQQD
EyhhMmJmMjhjMmRkNGZlYjUzZjUyMmMyNzQwYjY1YTI2ZDMyYzA1MDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwIjbUld8VnOTx3XK8bzOTmB15m2
ImMD/kSVHH1SZO3nJZtGUgycIrWyeInlSPeM/o8l+ofRD58UcC13UOFExE6m1aLr
sPd1Lgqgi4rE7el8i0aIwDneNHx2+m2yRwvuTJ4cZbfUIdu9vEitQjlTWM/up4+L
wq8WWSxhZMweH/PjHaGWrXoHNjokJyhocU4PaYScuaYKCGv63fQarbZIbF7XNJfW
i9CwCCfD+cBSh7KZ8SgcNh72PaOy0Sv6JGqcrnuww8+HStOL1QohBcuX/TENNQ1c
r4uktfz72JKXsQJCO0D3ZuEZ45cjVKxgFq7k+HPKT8Lj3ZBZtQK8q9w3GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKK/KMLdT+tT9SLCdAtlom0ywFA/MB8GA1UdIwQY
MBaAFBUHu80xTdUT7dVqMEgSvr4+EJ4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFlN3pURk4xUlB0MVdvd1NCSy12ajRRbml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jN2EyNDItNDQwNy00ZDA5LWEyOTYt
N2I2N2QxNzhjNDcyLzEvRlFlN3pURk4xUlB0MVdvd1NCSy12ajRRbml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jN2EyNDItNDQwNy00ZDA5LWEyOTYtN2I2N2QxNzhjNDcy
LzEvRlFlN3pURk4xUlB0MVdvd1NCSy12ajRRbml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACp8JAwBZ
gNegLH7B+aYPk5OmkqrOjMJ6bcBC2cBMS0TMXo4v/mU4E3qOrvHlJO/KcewvJOsG
EcOjDZmFsRk2tPoZyULUj2ThbUefrNwS70MnuM15W+GekvjUcw0SREimdnBtN0xg
vRgTjT+QXQXGyS+Ek3gSmQU2L1KVYCo3KFnx1FLrAq38hcSEJDHkR/SHfxehgnwb
Z5GPxC109GucDWj1gmn2/Tk/4Lzn65NukgAyJqT2yBj0hnvgWnB+GvSVErKDLtZ+
+y1aidQgnlw0sDaZt0PoiiT9retvifBlV08wftcYS9HVoIbwNW3cEC1zWRii3uWk
6EAqPJLKHehPuA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:51:37 2026 by rpki-client