
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: wuem2R8Wtlvq1tw3QBjp7M/kMgFaykYVaZ6x7UDYaO8=
Subject key identifier: 13:18:77:E2:4B:43:25:E1:62:18:DE:87:93:F3:18:00:C5:67:E7:36
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 01A08C0CB3FAAC3DF0753D4F7DFAF13511D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 16:00:37 +0000
Manifest this update: Thu 10 Sep 2026 16:00:37 +0000
Manifest next update: Fri 11 Sep 2026 16:00:37 +0000
Files and hashes: 1: 9zx-jGX3RbLlRInzB3WpUMej34c.roa (hash: 8a+25rbKXY3XSXyYkMEL2laj6pvmya/GUv2Ei14rA+I=)
2: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: UsixpmWlHzpfUI17zR6J/U/TIeEw6kPOFjYWX09054c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:b3:fa:ac:3d:f0:75:3d:4f:7d:fa:f1:35:11:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Sep 10 16:00:37 2026 GMT
Not After : Sep 11 16:00:37 2026 GMT
Subject: CN=131877e24b4325e16218de8793f31800c567e736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3a:87:d5:5e:a9:17:e9:54:de:84:44:95:76:
39:2a:d1:6d:28:c8:5f:9c:89:d0:72:52:98:bf:e5:
45:3f:ae:68:0f:3b:5f:cb:54:45:a6:46:03:46:02:
80:79:bc:bd:ee:ee:fc:98:a5:47:55:96:d1:e1:4f:
b2:51:98:d6:76:c0:e9:fb:35:3c:39:be:00:6a:e4:
14:5a:55:55:0d:7c:45:e6:39:17:4d:76:13:fd:70:
7a:42:6e:35:3f:3b:26:23:dd:19:24:82:22:5c:0f:
b3:04:85:6f:4e:16:23:cc:e6:a3:f5:bb:3e:16:e7:
6d:9a:4b:72:59:e5:87:cc:25:bb:be:38:7a:95:f5:
55:0e:88:a9:65:eb:e4:2c:f9:a3:b1:01:95:42:42:
ee:a5:ac:b0:ab:21:2f:10:02:e6:1f:38:b3:72:19:
31:e1:48:24:15:23:b1:63:47:73:79:e8:b2:d0:68:
b1:8a:c1:55:01:17:15:32:d5:07:8f:c5:93:fa:ce:
85:e4:84:db:74:5f:27:1a:92:9a:34:22:d9:32:33:
b4:f5:f6:0f:32:7d:21:bd:97:e8:d3:60:31:5f:d8:
94:e7:99:24:ad:73:5b:27:3b:b7:f7:96:91:e5:8e:
8c:f6:dd:01:8e:66:93:b1:4f:47:4f:cb:de:87:38:
f8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:18:77:E2:4B:43:25:E1:62:18:DE:87:93:F3:18:00:C5:67:E7:36
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b9:b2:a9:a9:e1:22:75:cd:d6:77:35:dc:2f:f8:29:49:73:
2f:61:12:ec:bb:7a:95:d6:cd:85:f9:1f:fa:de:75:fd:69:1d:
84:ee:11:03:4a:c5:b4:8a:fb:3b:02:5b:a9:82:d4:fc:f0:c1:
05:34:43:98:93:c8:57:e1:d9:73:c4:b5:63:74:11:60:27:4b:
72:33:30:6e:74:59:ec:18:35:16:04:eb:9a:fe:44:b1:6d:b0:
ef:31:c6:c0:99:da:64:38:76:cb:44:4e:50:bb:91:ff:11:62:
2e:02:66:a3:55:43:0a:68:5f:d5:52:e3:7a:94:3c:66:4d:b2:
30:b2:03:15:ce:43:1f:24:d3:e6:b9:ae:a9:79:fa:fb:1a:6e:
b6:c6:b4:12:c3:26:32:2e:32:f9:ea:a1:89:f2:af:c4:1e:c5:
7b:f7:43:b6:fd:9e:92:fa:27:8d:c4:12:2f:95:1b:0d:9a:c2:
94:ce:9a:de:1b:9e:05:1d:d5:a3:28:17:39:e9:2e:9d:cf:c6:
d8:e0:0c:7f:20:1d:1d:44:03:76:61:1f:af:e4:9a:60:25:76:
05:e8:d4:e6:71:fd:ae:15:68:cc:ab:12:3c:ba:00:ed:09:b4:
87:de:70:58:80:52:43:52:0c:3e:c6:c9:1d:92:e9:43:0d:dd:
50:98:40:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDLP6rD3wdT1PffrxNRHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZjk3NzgyZDZmMjAyYTcwMTgzNjcxYWE2MzBjNzNhYmEz
MzMwN2UwHhcNMjYwOTEwMTYwMDM3WhcNMjYwOTExMTYwMDM3WjAzMTEwLwYDVQQD
EygxMzE4NzdlMjRiNDMyNWUxNjIxOGRlODc5M2YzMTgwMGM1NjdlNzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjqH1V6pF+lU3oRElXY5KtFtKMhf
nInQclKYv+VFP65oDztfy1RFpkYDRgKAeby97u78mKVHVZbR4U+yUZjWdsDp+zU8
Ob4AauQUWlVVDXxF5jkXTXYT/XB6Qm41PzsmI90ZJIIiXA+zBIVvThYjzOaj9bs+
FudtmktyWeWHzCW7vjh6lfVVDoipZevkLPmjsQGVQkLupaywqyEvEALmHzizchkx
4UgkFSOxY0dzeeiy0GixisFVARcVMtUHj8WT+s6F5ITbdF8nGpKaNCLZMjO09fYP
Mn0hvZfo02AxX9iU55kkrXNbJzu395aR5Y6M9t0BjmaTsU9HT8vehzj4zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMYd+JLQyXhYhjeh5PzGADFZ+c2MB8GA1UdIwQY
MBaAFHz5d4LW8gKnAYNnGqYwxzq6MzB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmIt
MzFhMTdiM2Q5NjRiLzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmItMzFhMTdiM2Q5NjRi
LzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAermyqanh
InXN1nc13C/4KUlzL2ES7Lt6ldbNhfkf+t51/WkdhO4RA0rFtIr7OwJbqYLU/PDB
BTRDmJPIV+HZc8S1Y3QRYCdLcjMwbnRZ7Bg1FgTrmv5EsW2w7zHGwJnaZDh2y0RO
ULuR/xFiLgJmo1VDCmhf1VLjepQ8Zk2yMLIDFc5DHyTT5rmuqXn6+xputsa0EsMm
Mi4y+eqhifKvxB7Fe/dDtv2ekvonjcQSL5UbDZrClM6a3hueBR3VoygXOekunc/G
2OAMfyAdHUQDdmEfr+SaYCV2BejU5nH9rhVozKsSPLoA7Qm0h95wWIBSQ1IMPsbJ
HZLpQw3dUJhAwg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:13:18 2026 by rpki-client