Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: qsM0K3lGUKVvVyhLEiaxyDBLXEEXZBqnTwobmrJpzfY=
Subject key identifier: E0:DF:83:78:8C:2E:B4:38:58:8A:F8:5F:5A:FE:B8:2F:63:57:98:EF
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 01A13ECBD7903058CC6F50ED3F614981F239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 09:01:48 +0000
Manifest this update: Thu 15 Oct 2026 09:01:48 +0000
Manifest next update: Fri 16 Oct 2026 09:01:48 +0000
Files and hashes: 1: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: M2lbr2T9nSOfHSfGUBied2ozdGtirNc49g062R7d+Jw=)
2: uTfCO2CQvjnwzxgvmE8a-0Q3PkE.roa (hash: uXLhOjnuwZec+7he1bSLRYP9Be1CjyK6Z98Hp44cEVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:d7:90:30:58:cc:6f:50:ed:3f:61:49:81:f2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Oct 15 09:01:48 2026 GMT
Not After : Oct 16 09:01:48 2026 GMT
Subject: CN=e0df83788c2eb438588af85f5afeb82f635798ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:55:b5:2e:d1:03:12:6e:a2:41:0e:ff:3f:
d7:d7:bd:9d:4a:eb:6b:3c:c1:2f:42:59:72:dc:1d:
54:35:b8:c3:14:12:c5:89:8d:03:6a:6f:3b:97:53:
df:64:4f:b0:11:04:41:03:d9:f4:02:6e:09:e7:8a:
74:82:f5:ff:24:4c:94:0a:fb:9e:89:6d:59:a0:34:
b7:9b:7a:91:91:cb:74:4e:03:5a:f4:eb:b2:22:3f:
a5:26:1a:00:c7:f6:9c:af:23:5b:e4:f1:ee:d5:8d:
65:44:fc:19:7e:06:13:b5:af:22:66:0b:b3:13:e6:
3b:d7:cc:5d:63:cf:1e:85:ef:7d:66:e7:8e:59:74:
92:68:87:c0:e2:4e:87:36:b6:2d:01:10:3d:cd:6b:
60:1e:ff:e5:05:a4:0b:82:33:16:aa:a2:a9:ae:4f:
fa:21:18:18:f3:b5:8c:b6:cc:d9:4c:45:b6:f1:55:
1e:43:d0:a3:9d:23:bb:9a:9f:47:8d:5b:74:df:69:
6c:a2:06:d3:54:0a:65:51:76:69:ab:61:c6:03:08:
48:83:b1:cd:2b:15:37:f7:d1:f4:91:be:34:69:99:
b2:b8:55:99:b8:fd:07:7c:10:ce:9a:17:99:68:02:
8e:01:7b:69:24:a7:96:9e:a4:4b:9c:d7:06:3d:24:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:83:78:8C:2E:B4:38:58:8A:F8:5F:5A:FE:B8:2F:63:57:98:EF
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6c:e0:b7:10:80:22:e1:32:a0:31:cd:01:d2:85:b5:9d:9a:
35:d5:b7:ac:44:3c:dd:c6:72:44:ee:e2:33:96:4f:dc:4d:a3:
1a:f0:35:7c:2c:30:72:db:49:0d:e3:83:e2:6e:47:0e:90:e6:
22:da:6c:3d:3d:c7:2d:26:06:5b:7b:e7:30:e0:6c:0f:57:45:
4e:fe:10:78:06:c3:e2:d4:71:e6:8b:f6:a8:cc:69:63:49:80:
77:a8:3d:07:45:6d:08:4b:1f:b2:94:80:70:2c:3b:ef:8a:d3:
51:cc:85:67:6b:7b:55:b2:f1:0e:b9:e5:aa:e8:b3:dd:7d:b7:
37:72:7a:f3:69:45:f5:d0:32:78:49:1c:06:b7:25:3d:1a:d8:
c9:ed:0c:34:a2:79:c7:79:61:2c:3c:ab:e4:83:29:6f:c3:c3:
e4:9f:3d:01:96:b6:29:c5:ed:2f:bb:df:54:07:ba:29:29:12:
50:bc:a6:8c:87:37:39:dd:96:0f:e6:d6:cc:bf:34:60:f4:d8:
f8:af:20:03:87:a6:fc:07:1c:2a:46:37:0f:32:f6:0c:72:9c:
47:20:b2:c3:7d:20:d6:74:32:3d:c2:a5:9a:b2:64:1f:bf:65:
0e:18:c3:8d:8a:9b:ec:ae:d3:21:14:a1:c2:67:7b:f7:39:cf:
26:d8:f3:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+y9eQMFjMb1DtP2FJgfI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMGI0NGU0OTI1NDllMWI3ZGE1MzJjODBjMzQ4ODUwYzVh
NDRlODAwHhcNMjYxMDE1MDkwMTQ4WhcNMjYxMDE2MDkwMTQ4WjAzMTEwLwYDVQQD
EyhlMGRmODM3ODhjMmViNDM4NTg4YWY4NWY1YWZlYjgyZjYzNTc5OGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOZVtS7RAxJuokEO/z/X172dSutr
PMEvQlly3B1UNbjDFBLFiY0Dam87l1PfZE+wEQRBA9n0Am4J54p0gvX/JEyUCvue
iW1ZoDS3m3qRkct0TgNa9OuyIj+lJhoAx/acryNb5PHu1Y1lRPwZfgYTta8iZguz
E+Y718xdY88ehe99ZueOWXSSaIfA4k6HNrYtARA9zWtgHv/lBaQLgjMWqqKprk/6
IRgY87WMtszZTEW28VUeQ9CjnSO7mp9HjVt032lsogbTVAplUXZpq2HGAwhIg7HN
KxU399H0kb40aZmyuFWZuP0HfBDOmheZaAKOAXtpJKeWnqRLnNcGPSQwIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODfg3iMLrQ4WIr4X1r+uC9jV5jvMB8GA1UdIwQY
MBaAFH0LROSSVJ4bfaUyyAw0iFDFpE6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOTIzMWYtYjNkZi00MDEyLTk2ZDct
NzIwNGI4MTEyNTBmLzEvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iOTIzMWYtYjNkZi00MDEyLTk2ZDctNzIwNGI4MTEyNTBm
LzEvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGzgtxCA
IuEyoDHNAdKFtZ2aNdW3rEQ83cZyRO7iM5ZP3E2jGvA1fCwwcttJDeOD4m5HDpDm
ItpsPT3HLSYGW3vnMOBsD1dFTv4QeAbD4tRx5ov2qMxpY0mAd6g9B0VtCEsfspSA
cCw774rTUcyFZ2t7VbLxDrnlquiz3X23N3J682lF9dAyeEkcBrclPRrYye0MNKJ5
x3lhLDyr5IMpb8PD5J89AZa2KcXtL7vfVAe6KSkSULymjIc3Od2WD+bWzL80YPTY
+K8gA4em/AccKkY3DzL2DHKcRyCyw30g1nQyPcKlmrJkH79lDhjDjYqb7K7TIRSh
wmd79znPJtjz9w==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:50:58 2026 by rpki-client