Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: Kk+jxJEZMlezGLfC0MnEJ2hEKF1e7ah5pMk9ltLdKog=
Subject key identifier: 64:BA:55:B2:BC:10:5D:FE:37:B2:FA:A2:BE:02:06:31:55:B3:34:BB
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 01A06CF05F06D89F02C1BC0EE255F8D603DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0D9A
Signing time: Fri 04 Sep 2026 15:01:27 +0000
Manifest this update: Fri 04 Sep 2026 15:01:27 +0000
Manifest next update: Sat 05 Sep 2026 15:01:27 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: EvvBPzGu0EdG3gEz/lMMXEa9zdfLUlU50gK1dc36qyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:f0:5f:06:d8:9f:02:c1:bc:0e:e2:55:f8:d6:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Sep 4 15:01:27 2026 GMT
Not After : Sep 5 15:01:27 2026 GMT
Subject: CN=64ba55b2bc105dfe37b2faa2be02063155b334bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1f:ee:a2:5d:ff:53:12:ca:a9:87:e0:93:a4:
91:bf:81:9b:d0:da:95:cb:ce:58:31:95:ed:85:14:
39:cc:46:e8:37:73:e3:7c:f9:79:30:3e:c6:9f:0c:
39:bf:65:25:9a:0c:b6:0f:55:d0:81:7a:bb:1e:4a:
d6:c6:74:8e:bb:97:53:cc:25:42:ac:2b:84:84:7e:
b1:19:30:e5:b6:6d:88:79:a3:b2:20:e4:97:70:55:
6d:18:ca:b2:e9:02:ef:23:62:42:61:7b:33:af:41:
24:ea:1f:6f:76:80:c9:b5:a1:c1:d0:24:74:7a:55:
1f:0e:d5:73:a4:f6:63:47:1b:95:a5:4b:c7:2f:9f:
a6:b5:9b:a9:8a:2c:9a:4e:48:c8:2a:d9:ac:49:94:
3a:3f:a8:51:f1:71:44:6f:c8:23:fd:49:28:41:87:
05:21:26:f5:fd:fd:f0:c7:95:3b:7a:26:d5:a9:7d:
f2:da:7a:32:7b:5c:b2:c7:19:57:92:09:bd:30:b2:
64:48:2e:b4:75:6d:6c:7d:7d:ae:d6:38:60:69:0c:
b9:ad:b3:1e:f5:2c:2b:5d:80:a0:08:0f:26:fa:07:
dc:5c:0c:01:32:25:e9:56:15:26:78:5d:f5:ee:1f:
73:59:f8:3c:5d:a0:ea:18:1f:26:c4:c8:0a:6f:65:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BA:55:B2:BC:10:5D:FE:37:B2:FA:A2:BE:02:06:31:55:B3:34:BB
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b3:07:d5:dc:88:59:c8:b9:e3:76:f3:17:1e:33:3c:2a:4d:
52:d6:44:e3:62:25:73:51:4d:f3:9c:f6:4d:ee:9c:ff:a5:dc:
e5:32:f4:63:9e:f0:9c:06:c9:fb:d9:d8:68:81:92:36:0d:c6:
13:d9:12:06:55:c2:0e:30:34:99:2f:5f:83:9f:08:35:52:a5:
67:1d:48:55:d4:d3:35:6a:32:d6:17:3e:63:ce:95:cd:17:38:
10:f1:ee:d4:4e:52:f8:91:64:b0:cb:27:79:95:6c:0a:64:98:
7c:6d:14:55:8c:55:57:0c:40:3e:70:7d:4b:0f:c7:19:01:88:
56:4c:1b:15:39:1f:d3:cb:9f:c4:b3:03:53:dc:f2:ca:19:ac:
42:26:00:55:96:a1:c2:70:f5:de:88:f8:c0:7c:d1:9c:b0:cc:
22:05:1c:7e:87:bb:66:c5:68:f9:db:05:9b:00:dd:95:c6:b7:
91:e8:6f:9d:31:af:ed:b6:47:94:06:6b:2d:b3:0b:fc:b8:ee:
bc:4d:83:6f:a5:ef:b0:3f:34:08:9a:32:ac:5e:47:76:30:df:
bf:f6:91:c5:f2:ad:c9:ce:68:c6:04:35:c8:d3:4f:6f:96:df:
1a:c2:06:47:70:2b:72:2b:32:04:22:8d:e0:89:36:da:e3:f5:
66:e7:12:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBs8F8G2J8CwbwO4lX41gPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzJkZWRhMzFmZThlYWZjZGFkNmUyYTA2ZmRlMjM2ZTdk
MTFkNjEwHhcNMjYwOTA0MTUwMTI3WhcNMjYwOTA1MTUwMTI3WjAzMTEwLwYDVQQD
Eyg2NGJhNTViMmJjMTA1ZGZlMzdiMmZhYTJiZTAyMDYzMTU1YjMzNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R/uol3/UxLKqYfgk6SRv4Gb0NqV
y85YMZXthRQ5zEboN3PjfPl5MD7Gnww5v2Ulmgy2D1XQgXq7HkrWxnSOu5dTzCVC
rCuEhH6xGTDltm2IeaOyIOSXcFVtGMqy6QLvI2JCYXszr0Ek6h9vdoDJtaHB0CR0
elUfDtVzpPZjRxuVpUvHL5+mtZupiiyaTkjIKtmsSZQ6P6hR8XFEb8gj/UkoQYcF
ISb1/f3wx5U7eibVqX3y2noye1yyxxlXkgm9MLJkSC60dW1sfX2u1jhgaQy5rbMe
9SwrXYCgCA8m+gfcXAwBMiXpVhUmeF317h9zWfg8XaDqGB8mxMgKb2WflwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGS6VbK8EF3+N7L6or4CBjFVszS7MB8GA1UdIwQY
MBaAFH0y3tox/o6vza1uKgb94jbn0R1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgt
NTNmYjAxOGE4YzBlLzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgtNTNmYjAxOGE4YzBl
LzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7MH1dyI
Wci543bzFx4zPCpNUtZE42Ilc1FN85z2Te6c/6Xc5TL0Y57wnAbJ+9nYaIGSNg3G
E9kSBlXCDjA0mS9fg58INVKlZx1IVdTTNWoy1hc+Y86VzRc4EPHu1E5S+JFksMsn
eZVsCmSYfG0UVYxVVwxAPnB9Sw/HGQGIVkwbFTkf08ufxLMDU9zyyhmsQiYAVZah
wnD13oj4wHzRnLDMIgUcfoe7ZsVo+dsFmwDdlca3kehvnTGv7bZHlAZrLbML/Lju
vE2Db6XvsD80CJoyrF5HdjDfv/aRxfKtyc5oxgQ1yNNPb5bfGsIGR3ArcisyBCKN
4Ik22uP1ZucS+g==
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:20:30 2026 by rpki-client