Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File: F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier: 5fKphCD6tt6RYubdwoEc1TeTLemh5nYbmJAU5wBOqmY=
Subject key identifier: 1E:40:1B:C7:68:D6:14:A9:54:01:9F:6C:93:B7:7D:15:80:B1:FD:FC
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer: /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial: 01A06E028B3B7BE4F8E7CF8713063F03D03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number: 19CA
Signing time: Fri 04 Sep 2026 20:00:55 +0000
Manifest this update: Fri 04 Sep 2026 20:00:55 +0000
Manifest next update: Sat 05 Sep 2026 20:00:55 +0000
Files and hashes: 1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: DItGGfSBVmLDrexayrxp9FygJFGOG9HEGNnIIY9CdKg=)
2: PnmMPjc4F5uoJXYfqJ1sZSQuC6I.roa (hash: /5mkx4+jtWUqD/pZZ8CzGZwV8K0K77VUycNPiYZySbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:8b:3b:7b:e4:f8:e7:cf:87:13:06:3f:03:d0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Validity
Not Before: Sep 4 20:00:55 2026 GMT
Not After : Sep 5 20:00:55 2026 GMT
Subject: CN=1e401bc768d614a954019f6c93b77d1580b1fdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fc:e6:1e:a6:c5:b4:e1:7f:1e:b1:31:c0:ee:
b8:91:db:91:44:33:56:5e:87:dd:25:fa:a9:03:ab:
e7:76:9c:4a:fe:b4:0a:96:b8:12:16:2a:7f:e8:87:
8a:4c:86:cf:14:ff:9d:65:8b:92:c6:95:7e:31:0b:
4b:e9:c9:56:b8:cd:bf:71:92:07:6a:12:69:4e:74:
65:99:6d:57:83:7c:50:a0:80:30:e4:2e:04:a8:7b:
5e:a2:56:52:eb:f9:72:48:65:43:39:0e:03:7f:22:
88:2e:d4:a9:3b:21:28:c8:61:74:c6:8d:28:a6:04:
41:d4:b3:5b:21:67:07:de:fb:92:fa:a6:7b:15:df:
74:07:c2:ff:a0:92:9b:1d:2b:a0:0e:80:2a:1e:28:
87:8f:33:0b:29:fc:e7:62:d0:13:4d:93:b3:83:e0:
b9:7e:7c:60:8c:33:94:b8:bc:d9:24:47:98:8b:55:
77:f0:6c:2b:67:1c:72:24:a0:ed:78:fd:8a:25:62:
eb:9f:6b:d0:b9:1b:d7:d2:df:c8:e8:32:47:d7:23:
71:49:33:42:36:46:5c:b6:f5:8b:32:37:f7:d7:24:
b2:88:50:b5:9e:e9:eb:b1:7f:fd:4b:c6:ba:7d:cf:
89:52:2b:43:37:c2:ef:39:3a:26:72:68:b2:40:1f:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:40:1B:C7:68:D6:14:A9:54:01:9F:6C:93:B7:7D:15:80:B1:FD:FC
X509v3 Authority Key Identifier:
keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f8:92:6a:b0:c6:6f:97:63:d0:cf:8b:68:a9:83:3d:67:cd:
88:69:d6:b3:49:a9:6c:90:1b:99:61:e9:ad:a2:34:e3:95:76:
c8:f1:b3:ec:5f:62:ed:54:a9:10:b9:04:49:f9:89:87:80:3e:
4a:10:e4:a1:dc:ab:f0:c3:ea:c0:41:5a:fa:53:aa:98:10:70:
f3:4c:66:ad:b0:09:ac:60:df:27:97:da:d8:d2:99:ce:fc:9f:
0e:48:74:e9:74:6b:c3:21:cc:9e:e7:03:6d:46:32:a4:92:43:
b4:64:80:1a:cb:80:7a:8e:30:18:23:7d:fe:18:db:be:f8:34:
c2:53:9d:b8:18:22:78:d5:6e:93:93:8e:4f:15:6b:68:9a:60:
ad:60:fa:7d:9b:04:26:9f:cc:57:13:37:f6:65:39:90:88:96:
00:b1:52:62:90:f7:9f:11:e7:f6:3d:29:49:f3:ef:4e:c9:64:
77:77:c5:98:97:88:2d:a4:ff:01:42:03:b1:35:38:94:89:f8:
1c:ae:f0:cd:4c:89:b9:a9:91:ed:8c:d4:c2:cd:07:14:48:05:
86:a2:4d:d5:e6:f2:45:47:0e:22:99:b0:b0:0b:4d:74:22:06:
0c:a5:2d:0b:f3:8a:67:2b:17:cb:b3:16:1a:d1:10:0b:73:51:
10:4a:ab:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuAos7e+T458+HEwY/A9A7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZmZlZTI1MDUyYzBhYWJmNmNiMzcxZTNmMmUwNzZmNDRm
YzFjM2MwHhcNMjYwOTA0MjAwMDU1WhcNMjYwOTA1MjAwMDU1WjAzMTEwLwYDVQQD
EygxZTQwMWJjNzY4ZDYxNGE5NTQwMTlmNmM5M2I3N2QxNTgwYjFmZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/zmHqbFtOF/HrExwO64kduRRDNW
XofdJfqpA6vndpxK/rQKlrgSFip/6IeKTIbPFP+dZYuSxpV+MQtL6clWuM2/cZIH
ahJpTnRlmW1Xg3xQoIAw5C4EqHteolZS6/lySGVDOQ4DfyKILtSpOyEoyGF0xo0o
pgRB1LNbIWcH3vuS+qZ7Fd90B8L/oJKbHSugDoAqHiiHjzMLKfznYtATTZOzg+C5
fnxgjDOUuLzZJEeYi1V38GwrZxxyJKDteP2KJWLrn2vQuRvX0t/I6DJH1yNxSTNC
NkZctvWLMjf31ySyiFC1nunrsX/9S8a6fc+JUitDN8LvOTomcmiyQB8FGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5AG8do1hSpVAGfbJO3fRWAsf38MB8GA1UdIwQY
MBaAFBf/7iUFLAqr9ss3Hj8uB29E/Bw8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjIt
YTJlODgwZmQ1ODUwLzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjItYTJlODgwZmQ1ODUw
LzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPiSarDG
b5dj0M+LaKmDPWfNiGnWs0mpbJAbmWHpraI045V2yPGz7F9i7VSpELkESfmJh4A+
ShDkodyr8MPqwEFa+lOqmBBw80xmrbAJrGDfJ5fa2NKZzvyfDkh06XRrwyHMnucD
bUYypJJDtGSAGsuAeo4wGCN9/hjbvvg0wlOduBgieNVuk5OOTxVraJpgrWD6fZsE
Jp/MVxM39mU5kIiWALFSYpD3nxHn9j0pSfPvTslkd3fFmJeILaT/AUIDsTU4lIn4
HK7wzUyJuamR7YzUws0HFEgFhqJN1ebyRUcOIpmwsAtNdCIGDKUtC/OKZysXy7MW
GtEQC3NREEqrBw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:59:35 2026 by rpki-client