Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
File: FDOvfHMrNzBikL15lfodb8PcqMk.mft (raw, json)
Hash identifier: QDvw5Ml8S3MYQeQabQOheHPUhM2P++/E8AjK6CZrG+k=
Subject key identifier: A6:08:2A:66:04:BE:4E:4A:F1:98:EC:9D:C0:EB:9A:13:2F:BF:CE:DF
Authority key identifier: 14:33:AF:7C:73:2B:37:30:62:90:BD:79:95:FA:1D:6F:C3:DC:A8:C9
Certificate issuer: /CN=1433af7c732b37306290bd7995fa1d6fc3dca8c9
Certificate serial: 01A08A8C8DBC53B4585D4C2708CA956D1AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDOvfHMrNzBikL15lfodb8PcqMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:02 +0000
Manifest this update: Thu 10 Sep 2026 09:01:02 +0000
Manifest next update: Fri 11 Sep 2026 09:01:02 +0000
Files and hashes: 1: FDOvfHMrNzBikL15lfodb8PcqMk.crl (hash: zAOV2gjV7Qf8hzvIzrCXVGEMzhfTsCwH4p5YaSBlc7o=)
2: XPAo9csIakgnxL1vkDoDw7OBqQY.roa (hash: /BzxC1mTgVHXG35cXVsO81Ky1QleogI+28Bk2r4rk5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDOvfHMrNzBikL15lfodb8PcqMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:8d:bc:53:b4:58:5d:4c:27:08:ca:95:6d:1a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1433af7c732b37306290bd7995fa1d6fc3dca8c9
Validity
Not Before: Sep 10 09:01:02 2026 GMT
Not After : Sep 11 09:01:02 2026 GMT
Subject: CN=a6082a6604be4e4af198ec9dc0eb9a132fbfcedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:39:62:08:80:89:e3:99:52:58:32:ea:fb:
03:63:a5:1a:e8:a0:bd:d1:44:7e:f0:ce:c5:58:7f:
44:7e:0e:8c:03:58:70:f2:b7:68:eb:3a:53:3a:7d:
f4:fa:00:21:20:67:93:ca:4e:e3:9a:0a:a5:a0:a1:
51:93:93:18:dd:74:6e:57:a2:5c:fa:75:28:11:a6:
cb:97:b4:21:ff:71:ad:fb:c6:10:57:d2:45:93:02:
58:cc:e5:25:e5:2d:38:a2:6d:6f:8f:6b:b5:a6:df:
f7:f2:c7:59:31:e3:54:cb:86:a1:3f:83:17:dc:62:
62:c5:05:a6:35:31:02:16:53:52:5a:78:fa:1b:a3:
70:ee:35:6b:8f:ed:11:f8:19:bb:26:ae:79:f3:61:
9d:21:c0:a4:0f:d2:eb:a9:84:2e:b9:c8:c0:7a:36:
40:95:36:b5:3a:28:d6:bf:95:10:fd:b0:0e:15:6e:
93:55:bb:eb:9b:cd:0f:23:28:1e:24:41:c4:62:b3:
7c:56:ff:d3:78:ab:5b:93:68:d0:e1:9c:e1:91:27:
52:13:0b:ad:cd:14:b7:90:cd:dc:ea:46:1f:c8:aa:
03:4d:53:fe:62:54:3f:8c:4d:f6:3e:38:86:e1:99:
21:d1:8d:a8:be:8a:7a:ab:61:b6:e1:01:08:b5:f2:
59:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:08:2A:66:04:BE:4E:4A:F1:98:EC:9D:C0:EB:9A:13:2F:BF:CE:DF
X509v3 Authority Key Identifier:
keyid:14:33:AF:7C:73:2B:37:30:62:90:BD:79:95:FA:1D:6F:C3:DC:A8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDOvfHMrNzBikL15lfodb8PcqMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/FDOvfHMrNzBikL15lfodb8PcqMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:44:00:35:b6:08:f9:eb:ad:3f:5a:c7:28:d1:1b:9a:53:06:
e3:44:f6:27:3a:3e:0c:05:4d:dc:cb:23:e5:c0:dd:40:b9:72:
75:a6:9a:e9:b0:f2:65:b8:10:44:9b:ea:74:1f:dd:56:c6:2e:
70:bb:77:b2:9e:14:a3:d3:ba:13:12:97:02:b1:91:62:bf:98:
71:a7:53:47:e1:69:8c:c0:56:23:da:af:dd:1d:e0:3e:8e:a4:
65:a4:17:c1:e1:e5:4e:9b:45:49:87:3c:e8:ee:4e:1e:6e:7b:
66:1e:12:38:0d:ad:45:a0:d0:eb:f4:b4:57:2c:69:d3:35:55:
55:d8:70:22:0f:e1:fe:68:66:2e:bd:b0:98:87:0b:4f:2b:d9:
75:da:15:b0:d3:1b:7b:15:06:5d:a0:18:39:fb:fc:bf:ee:44:
83:66:46:de:e8:40:43:ef:0a:de:d2:75:fb:85:0e:4c:dd:a6:
a0:d6:dc:46:1e:f7:44:ff:a9:de:ec:b8:8f:85:51:06:0b:d2:
01:fd:a1:40:25:96:8e:fc:77:a8:7e:29:40:45:3a:01:fb:ac:
a7:50:bc:51:7c:66:9e:e8:48:fe:58:82:1b:5e:93:ed:d6:ff:
f6:c0:54:90:8e:5c:ae:bd:ab:11:9b:b2:73:98:7e:2c:8d:d7:
63:e7:b2:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjI28U7RYXUwnCMqVbRrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MzNhZjdjNzMyYjM3MzA2MjkwYmQ3OTk1ZmExZDZmYzNk
Y2E4YzkwHhcNMjYwOTEwMDkwMTAyWhcNMjYwOTExMDkwMTAyWjAzMTEwLwYDVQQD
EyhhNjA4MmE2NjA0YmU0ZTRhZjE5OGVjOWRjMGViOWExMzJmYmZjZWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFE5YgiAieOZUlgy6vsDY6Ua6KC9
0UR+8M7FWH9Efg6MA1hw8rdo6zpTOn30+gAhIGeTyk7jmgqloKFRk5MY3XRuV6Jc
+nUoEabLl7Qh/3Gt+8YQV9JFkwJYzOUl5S04om1vj2u1pt/38sdZMeNUy4ahP4MX
3GJixQWmNTECFlNSWnj6G6Nw7jVrj+0R+Bm7Jq5582GdIcCkD9LrqYQuucjAejZA
lTa1OijWv5UQ/bAOFW6TVbvrm80PIygeJEHEYrN8Vv/TeKtbk2jQ4ZzhkSdSEwut
zRS3kM3c6kYfyKoDTVP+YlQ/jE32PjiG4Zkh0Y2ovop6q2G24QEItfJZ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYIKmYEvk5K8ZjsncDrmhMvv87fMB8GA1UdIwQY
MBaAFBQzr3xzKzcwYpC9eZX6HW/D3KjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkRPdmZITXJOekJpa0wxNWxmb2RiOFBjcU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NTE4NDctMzMyZC00ZTI3LWI0N2Et
MWQ1OTFiYmQ0MDYwLzEvRkRPdmZITXJOekJpa0wxNWxmb2RiOFBjcU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81NTE4NDctMzMyZC00ZTI3LWI0N2EtMWQ1OTFiYmQ0MDYw
LzEvRkRPdmZITXJOekJpa0wxNWxmb2RiOFBjcU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkQANbYI
+eutP1rHKNEbmlMG40T2Jzo+DAVN3Msj5cDdQLlydaaa6bDyZbgQRJvqdB/dVsYu
cLt3sp4Uo9O6ExKXArGRYr+YcadTR+FpjMBWI9qv3R3gPo6kZaQXweHlTptFSYc8
6O5OHm57Zh4SOA2tRaDQ6/S0Vyxp0zVVVdhwIg/h/mhmLr2wmIcLTyvZddoVsNMb
exUGXaAYOfv8v+5Eg2ZG3uhAQ+8K3tJ1+4UOTN2moNbcRh73RP+p3uy4j4VRBgvS
Af2hQCWWjvx3qH4pQEU6Afusp1C8UXxmnuhI/liCG16T7db/9sBUkI5crr2rEZuy
c5h+LI3XY+eyJQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:01:31 2026 by rpki-client