Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: rzpJ/md1QpFNoouy9gLkhLrJT/Bp+W0lVObhVWA/ptQ=
Subject key identifier: B3:4D:8F:78:90:C5:50:D6:7B:B8:27:E8:84:34:10:9B:52:FE:E4:66
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 01A16421A2C2A27CA9F03073A1F29ECE588E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0E1A
Signing time: Thu 22 Oct 2026 15:01:28 +0000
Manifest this update: Thu 22 Oct 2026 15:01:28 +0000
Manifest next update: Fri 23 Oct 2026 15:01:28 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: K+YWv78RyAUXEcWGyvvUAjSFMVYt6W4YUA4h/5ufb0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:21:a2:c2:a2:7c:a9:f0:30:73:a1:f2:9e:ce:58:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Oct 22 15:01:28 2026 GMT
Not After : Oct 23 15:01:28 2026 GMT
Subject: CN=b34d8f7890c550d67bb827e88434109b52fee466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:5a:8e:dd:d9:ea:04:79:4a:d7:40:62:76:
2f:96:15:ca:fa:c8:26:79:1a:2d:9b:62:ad:6e:92:
75:20:97:b5:4b:9b:6d:65:76:9a:82:2a:ce:b6:3b:
fc:a4:58:02:f2:4c:c6:06:65:2f:54:03:b7:c6:c5:
e2:22:87:75:f2:73:88:2e:c1:e1:6c:d9:74:60:d8:
80:61:d1:56:6e:0e:cd:97:a7:96:05:4e:55:f7:36:
e2:f4:4c:f6:a4:b8:c4:d5:4e:74:be:3e:d4:fb:e9:
82:d6:4a:b2:db:6d:58:8d:66:4a:64:c7:d2:2c:18:
11:4e:90:95:a2:a0:bd:e6:7f:4f:fd:a1:7b:3b:98:
0f:23:59:e2:9f:0f:34:95:5c:9c:f8:98:5e:f4:3f:
68:93:55:16:30:4c:b6:f7:11:6d:c0:e6:79:bc:41:
23:e2:2d:a5:a6:7f:3f:61:d9:46:60:da:99:49:75:
c1:48:7e:07:e9:ba:6f:0c:ff:fc:53:b3:0e:e0:fc:
4d:cf:91:40:60:b0:11:0c:ea:4f:3e:f7:79:28:54:
d6:ab:5d:0d:e5:f1:51:6a:94:b6:b4:94:ee:0a:c3:
70:57:bc:d7:2a:b7:d5:8e:cb:04:f0:eb:38:da:c3:
ca:ca:0d:3d:48:ef:c3:82:df:0c:d0:6e:5b:9e:01:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4D:8F:78:90:C5:50:D6:7B:B8:27:E8:84:34:10:9B:52:FE:E4:66
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a4:61:43:06:1a:7b:f6:2c:9c:f9:e7:bb:f2:e9:b4:56:43:
15:5e:49:34:3e:fb:e9:5e:b4:bb:18:f4:c9:6a:56:01:9c:87:
34:23:3b:de:1f:a6:7b:de:f0:d2:11:51:ce:b0:85:be:62:39:
74:cd:27:09:c2:54:90:a4:f8:dc:d9:e1:f4:cd:58:35:76:23:
c3:1a:75:c8:ab:69:5b:8f:3f:38:e7:0a:4f:6a:c9:62:c0:9a:
1f:14:5b:9b:26:d8:f1:11:55:ff:c7:02:94:47:50:67:9b:2b:
a0:1d:f3:b1:f6:7b:a1:a2:a5:d9:1d:23:22:2c:45:5e:5a:93:
80:40:df:75:8a:65:27:09:09:b1:57:02:ae:1f:af:e2:e9:4e:
f5:a9:12:f4:bd:ec:a2:69:42:ec:2b:c8:00:45:d7:28:85:76:
8a:49:0f:e7:a5:38:6c:e8:af:1f:93:8e:a2:41:a1:0c:a6:05:
6d:c2:5d:41:12:ed:50:25:c0:aa:37:a0:80:ff:10:db:8e:9f:
ed:d8:8c:10:86:ed:c9:85:93:eb:6e:fc:df:c7:28:75:f1:3e:
15:69:85:69:3c:e5:58:38:f9:ea:83:60:f2:38:e1:ca:91:57:
0d:19:eb:2f:38:d2:b5:94:bd:dd:ef:9d:e2:6c:83:fe:03:ed:
74:22:5a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFkIaLConyp8DBzofKezliOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzJkZWRhMzFmZThlYWZjZGFkNmUyYTA2ZmRlMjM2ZTdk
MTFkNjEwHhcNMjYxMDIyMTUwMTI4WhcNMjYxMDIzMTUwMTI4WjAzMTEwLwYDVQQD
EyhiMzRkOGY3ODkwYzU1MGQ2N2JiODI3ZTg4NDM0MTA5YjUyZmVlNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyulajt3Z6gR5StdAYnYvlhXK+sgm
eRotm2KtbpJ1IJe1S5ttZXaagirOtjv8pFgC8kzGBmUvVAO3xsXiIod18nOILsHh
bNl0YNiAYdFWbg7Nl6eWBU5V9zbi9Ez2pLjE1U50vj7U++mC1kqy221YjWZKZMfS
LBgRTpCVoqC95n9P/aF7O5gPI1ninw80lVyc+Jhe9D9ok1UWMEy29xFtwOZ5vEEj
4i2lpn8/YdlGYNqZSXXBSH4H6bpvDP/8U7MO4PxNz5FAYLARDOpPPvd5KFTWq10N
5fFRapS2tJTuCsNwV7zXKrfVjssE8Os42sPKyg09SO/Dgt8M0G5bngEiZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNNj3iQxVDWe7gn6IQ0EJtS/uRmMB8GA1UdIwQY
MBaAFH0y3tox/o6vza1uKgb94jbn0R1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgt
NTNmYjAxOGE4YzBlLzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgtNTNmYjAxOGE4YzBl
LzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKRhQwYa
e/YsnPnnu/LptFZDFV5JND776V60uxj0yWpWAZyHNCM73h+me97w0hFRzrCFvmI5
dM0nCcJUkKT43Nnh9M1YNXYjwxp1yKtpW48/OOcKT2rJYsCaHxRbmybY8RFV/8cC
lEdQZ5sroB3zsfZ7oaKl2R0jIixFXlqTgEDfdYplJwkJsVcCrh+v4ulO9akS9L3s
omlC7CvIAEXXKIV2ikkP56U4bOivH5OOokGhDKYFbcJdQRLtUCXAqjeggP8Q246f
7diMEIbtyYWT627838codfE+FWmFaTzlWDj56oNg8jjhypFXDRnrLzjStZS93e+d
4myD/gPtdCJamg==
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:04:46 2026 by rpki-client