
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
File: fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json)
Hash identifier: K58In4RLoqzQid/VXzFOS7L55yA/zfssy8g/UMFKk7Y=
Subject key identifier: F7:34:88:8C:84:31:05:DE:8B:8D:23:BF:33:9D:96:D1:5A:34:24:A7
Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Certificate serial: 01A14F1A446BFFE218217BC50AA83C1F1223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
Manifest number: 0496
Signing time: Sun 18 Oct 2026 13:01:23 +0000
Manifest this update: Sun 18 Oct 2026 13:01:23 +0000
Manifest next update: Mon 19 Oct 2026 13:01:23 +0000
Files and hashes: 1: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: wgBRC/cluZ2fWjNIJUEnPFA0VNpGLNvYtgmatlo2UVA=)
2: hhYndYmrtj6UVK4MXLjISC5kjY8.roa (hash: Hp6kG7ylNYSrFI+JCOb5ieLSxf03lMDks7YDXEs5v7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:1a:44:6b:ff:e2:18:21:7b:c5:0a:a8:3c:1f:12:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97
Validity
Not Before: Oct 18 13:01:23 2026 GMT
Not After : Oct 19 13:01:23 2026 GMT
Subject: CN=f734888c843105de8b8d23bf339d96d15a3424a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:d3:6f:34:fb:f1:49:fc:80:94:90:7d:2f:
d0:a2:81:81:7b:cd:de:fe:95:ce:9b:72:f5:71:7d:
79:3f:1c:16:96:a2:3e:17:26:5d:d2:23:ff:d1:ba:
ec:77:1f:bb:8f:e8:36:0c:36:8d:ae:89:5e:76:2b:
de:42:67:49:b4:c8:98:51:c4:a3:47:f3:6a:cf:be:
89:46:25:86:76:7c:87:af:c8:98:6c:bb:fe:ec:6c:
e3:ef:93:b3:32:4a:1d:ae:2c:b4:2b:cb:80:7d:c7:
44:9c:22:8b:f7:a0:bb:db:21:aa:c7:4d:b6:92:5c:
98:d6:37:46:cf:16:d5:77:4d:bf:d3:bc:d9:ee:eb:
a4:ac:c0:03:33:4f:1a:a7:31:09:61:88:0d:ad:f6:
78:31:9f:6f:46:77:ed:91:f5:7c:c6:1d:5d:e4:8d:
5a:41:43:66:a0:de:c4:c1:c5:fb:2b:cd:b9:38:28:
97:3c:96:39:51:a2:f4:d3:ef:85:27:19:32:50:b0:
42:70:35:35:9c:6f:b6:5e:96:bc:2c:5f:04:ec:85:
3f:54:0c:78:64:51:24:02:68:46:98:de:07:05:15:
40:13:bb:43:d6:23:02:1b:fe:66:31:76:bb:4f:9d:
be:cd:09:96:69:42:82:1c:8c:73:66:ee:ea:08:74:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:34:88:8C:84:31:05:DE:8B:8D:23:BF:33:9D:96:D1:5A:34:24:A7
X509v3 Authority Key Identifier:
keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:69:ad:0a:27:3b:cc:83:3d:e0:36:0c:99:c1:6d:18:87:57:
c8:90:4f:de:16:6c:c7:86:38:d8:9e:57:69:da:f6:d6:f1:04:
e2:34:19:e7:82:9c:00:3b:ef:08:42:dd:46:66:ff:bf:34:f6:
e4:e0:6c:c4:39:af:8d:f2:2d:6f:de:d6:61:04:6e:ef:9e:ea:
eb:ad:24:c1:d5:1d:7b:cb:e6:5e:91:83:b9:74:f0:a4:95:77:
c8:4c:f2:8b:bd:c5:81:e8:1c:ec:69:24:c1:b6:27:4e:67:8a:
f7:76:31:9e:c0:26:56:7f:67:29:6a:1b:d1:b8:b9:d9:48:89:
e2:ea:92:9b:51:49:e8:0a:76:cb:71:0f:2b:2a:ff:11:4a:32:
aa:25:2b:03:ae:80:19:bc:5d:6e:7d:7a:29:97:bf:fb:61:a0:
91:2e:7c:2b:01:5f:bd:dc:8d:b1:14:d0:10:67:ec:3e:2d:a9:
82:ab:7c:ca:d3:14:28:e7:64:b0:ca:8e:3b:dc:3e:bc:c4:97:
b6:5c:31:75:c5:b8:de:b3:0c:9b:42:fb:0a:a1:16:da:66:95:
24:29:60:e0:3f:e8:a3:10:fc:21:1a:31:72:80:fe:bc:b3:26:
31:00:ec:08:6e:10:ee:52:2c:78:1d:69:c4:cc:0c:08:d3:b9:
0e:e5:cd:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFPGkRr/+IYIXvFCqg8HxIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZDFiYzcwMDkwNWQxYWM2ZDc3MzNhZWJjMzI2M2U2YWU3
NmZhOTcwHhcNMjYxMDE4MTMwMTIzWhcNMjYxMDE5MTMwMTIzWjAzMTEwLwYDVQQD
EyhmNzM0ODg4Yzg0MzEwNWRlOGI4ZDIzYmYzMzlkOTZkMTVhMzQyNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnrTbzT78Un8gJSQfS/QooGBe83e
/pXOm3L1cX15PxwWlqI+FyZd0iP/0brsdx+7j+g2DDaNrolediveQmdJtMiYUcSj
R/Nqz76JRiWGdnyHr8iYbLv+7Gzj75OzMkodriy0K8uAfcdEnCKL96C72yGqx022
klyY1jdGzxbVd02/07zZ7uukrMADM08apzEJYYgNrfZ4MZ9vRnftkfV8xh1d5I1a
QUNmoN7EwcX7K825OCiXPJY5UaL00++FJxkyULBCcDU1nG+2Xpa8LF8E7IU/VAx4
ZFEkAmhGmN4HBRVAE7tD1iMCG/5mMXa7T52+zQmWaUKCHIxzZu7qCHTVeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPc0iIyEMQXei40jvzOdltFaNCSnMB8GA1UdIwQY
MBaAFHzRvHAJBdGsbXczrrwyY+audvqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYt
ZmNlOWUyYmY0ZWY5LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYtZmNlOWUyYmY0ZWY5
LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2mtCic7
zIM94DYMmcFtGIdXyJBP3hZsx4Y42J5Xadr21vEE4jQZ54KcADvvCELdRmb/vzT2
5OBsxDmvjfItb97WYQRu757q660kwdUde8vmXpGDuXTwpJV3yEzyi73Fgegc7Gkk
wbYnTmeK93YxnsAmVn9nKWob0bi52UiJ4uqSm1FJ6Ap2y3EPKyr/EUoyqiUrA66A
Gbxdbn16KZe/+2GgkS58KwFfvdyNsRTQEGfsPi2pgqt8ytMUKOdksMqOO9w+vMSX
tlwxdcW43rMMm0L7CqEW2maVJClg4D/ooxD8IRoxcoD+vLMmMQDsCG4Q7lIseB1p
xMwMCNO5DuXNYw==
-----END CERTIFICATE-----
Generated at Sun Oct 18 21:00:26 2026 by rpki-client