Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
File: f1Eig3R0LfVEqpMFjFo709FkIZk.mft (raw, json)
Hash identifier: OXISh3p6PqF57sltzcMOe7A2MGkLM/1d2YCKqIoIKMg=
Subject key identifier: B9:31:77:DD:DE:D9:0C:6A:BC:44:04:A0:48:F6:B8:D5:E9:9C:A9:07
Authority key identifier: 7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
Certificate issuer: /CN=7f51228374742df544aa93058c5a3bd3d1642199
Certificate serial: 019CABD9C51DD34ED9B2696B374926657363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
Manifest number: 0FB9
Signing time: Mon 02 Mar 2026 00:01:41 +0000
Manifest this update: Mon 02 Mar 2026 00:01:41 +0000
Manifest next update: Tue 03 Mar 2026 00:01:41 +0000
Files and hashes: 1: 6FlfzCCnvmo896yjB_Ms6PmiMQU.roa (hash: m7kcAEZtSF+8mAV3wVdGBKonTdxO/mPVuxczf1fwIhQ=)
2: cT02IY7adaUVPz4V8e5RlFxqhK0.roa (hash: xlN+ALxnfT16I39GA28ld/SZObT/EUbBFR6U8Cqh9cY=)
3: cjmMHNCt7ftsAclZWv1yu3UDwe4.roa (hash: mykIvp5CRZypfUSTPKMqrSzVuYDXX5lzutyA9f3+D/A=)
4: f1Eig3R0LfVEqpMFjFo709FkIZk.crl (hash: BDKB6I9vgBzsOSHNP91cZKBIPB502dN3qswuvskHdhA=)
5: v5LcK-vk19mPyJ4_jQDV_tIrM-I.roa (hash: pIXFlL3PfdAl4ychuA34yURFJsDDcX6O7/3+bFnUols=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c5:1d:d3:4e:d9:b2:69:6b:37:49:26:65:73:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f51228374742df544aa93058c5a3bd3d1642199
Validity
Not Before: Mar 2 00:01:41 2026 GMT
Not After : Mar 3 00:01:41 2026 GMT
Subject: CN=b93177ddded90c6abc4404a048f6b8d5e99ca907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:68:f3:a3:ca:87:09:7e:59:14:e3:c8:11:
3d:b5:06:77:ee:a3:7c:1c:00:57:69:24:c0:31:89:
a1:aa:ea:02:a8:d9:5c:b4:6b:39:72:f8:be:c8:25:
71:e4:31:b9:c2:47:fa:e2:d1:42:70:1e:a5:df:d9:
5d:05:5e:0c:8b:28:5b:d9:2f:f2:52:53:6e:8b:1a:
6a:8e:ca:64:3a:e2:84:b1:d0:5a:bb:39:7d:07:45:
29:98:75:e2:e1:97:db:5e:e2:32:f9:1c:17:d7:5e:
72:00:69:6e:fc:01:4e:9e:c6:ce:3b:7b:ea:9a:38:
21:8c:02:3e:8c:57:07:0c:6b:86:0e:6d:57:b4:d5:
46:45:54:6e:c8:40:c0:24:49:5c:db:9a:41:4d:3d:
9a:fd:e8:e1:4e:d7:55:16:f0:20:5b:fe:5c:b5:7c:
cd:fc:59:a5:fd:ec:61:27:c0:16:63:7b:7d:e8:fa:
1f:32:92:4e:4e:cd:33:07:7f:04:ff:f7:fa:d2:65:
8f:a4:c7:1f:74:80:53:5c:68:80:70:6a:c1:ff:45:
83:47:58:08:a9:d8:70:37:3a:1d:94:30:0f:81:dd:
16:c6:7a:1d:c1:88:52:10:25:fc:45:e0:70:3b:92:
44:d4:2e:7a:36:23:d5:93:65:34:4a:1a:0f:65:88:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:31:77:DD:DE:D9:0C:6A:BC:44:04:A0:48:F6:B8:D5:E9:9C:A9:07
X509v3 Authority Key Identifier:
keyid:7F:51:22:83:74:74:2D:F5:44:AA:93:05:8C:5A:3B:D3:D1:64:21:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1Eig3R0LfVEqpMFjFo709FkIZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9385aa-1b79-4a02-a092-01eb03684f09/1/f1Eig3R0LfVEqpMFjFo709FkIZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0a:a7:b3:d8:34:47:3b:c1:7a:c8:41:5c:96:76:be:61:52:
d2:c0:01:ef:38:6d:31:1c:cc:6d:b2:16:52:2e:00:b8:39:d8:
c0:7b:49:7e:b7:ce:17:15:8d:8b:0e:bc:36:08:a3:82:0b:30:
3b:5d:90:fa:87:26:6e:4a:78:f2:de:8b:66:91:14:48:56:24:
aa:c1:bc:1a:df:0a:b0:0a:81:e7:6b:27:31:a8:3d:41:d7:17:
81:ef:43:3a:95:bc:fd:5d:a0:34:de:0d:e9:fd:e6:15:9d:98:
7b:6c:b9:ea:fd:a8:8d:06:58:ec:ce:f0:51:7a:40:6b:d7:b8:
25:94:56:65:8e:78:46:f4:d4:51:7e:32:9d:a1:fa:1f:f1:a5:
5e:93:cc:03:23:90:2a:d6:49:71:b4:47:09:fd:b0:f1:00:e5:
67:20:a1:d3:19:5d:38:30:c2:b9:cd:7e:0f:20:25:88:a6:5d:
0f:c9:9c:59:cd:32:4f:63:45:4e:60:93:d5:79:03:30:9c:6a:
58:85:40:2f:a2:b1:9b:4f:56:0f:ac:e7:c1:c9:24:df:e5:cf:
62:06:5b:78:87:d8:fc:07:1a:9b:59:e1:ae:48:67:75:4b:ef:
da:27:6d:06:69:63:f2:6a:06:b9:9b:04:9c:b9:27:f2:5b:fb:
d6:04:7a:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2cUd007ZsmlrN0kmZXNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTEyMjgzNzQ3NDJkZjU0NGFhOTMwNThjNWEzYmQzZDE2
NDIxOTkwHhcNMjYwMzAyMDAwMTQxWhcNMjYwMzAzMDAwMTQxWjAzMTEwLwYDVQQD
EyhiOTMxNzdkZGRlZDkwYzZhYmM0NDA0YTA0OGY2YjhkNWU5OWNhOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB9o86PKhwl+WRTjyBE9tQZ37qN8
HABXaSTAMYmhquoCqNlctGs5cvi+yCVx5DG5wkf64tFCcB6l39ldBV4Miyhb2S/y
UlNuixpqjspkOuKEsdBauzl9B0UpmHXi4ZfbXuIy+RwX115yAGlu/AFOnsbOO3vq
mjghjAI+jFcHDGuGDm1XtNVGRVRuyEDAJElc25pBTT2a/ejhTtdVFvAgW/5ctXzN
/Fml/exhJ8AWY3t96PofMpJOTs0zB38E//f60mWPpMcfdIBTXGiAcGrB/0WDR1gI
qdhwNzodlDAPgd0WxnodwYhSECX8ReBwO5JE1C56NiPVk2U0ShoPZYizYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkxd93e2QxqvEQEoEj2uNXpnKkHMB8GA1UdIwQY
MBaAFH9RIoN0dC31RKqTBYxaO9PRZCGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85Mzg1YWEtMWI3OS00YTAyLWEwOTIt
MDFlYjAzNjg0ZjA5LzEvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS85Mzg1YWEtMWI3OS00YTAyLWEwOTItMDFlYjAzNjg0ZjA5
LzEvZjFFaWczUjBMZlZFcXBNRmpGbzcwOUZrSVprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAqns9g0
RzvBeshBXJZ2vmFS0sAB7zhtMRzMbbIWUi4AuDnYwHtJfrfOFxWNiw68Ngijggsw
O12Q+ocmbkp48t6LZpEUSFYkqsG8Gt8KsAqB52snMag9QdcXge9DOpW8/V2gNN4N
6f3mFZ2Ye2y56v2ojQZY7M7wUXpAa9e4JZRWZY54RvTUUX4ynaH6H/GlXpPMAyOQ
KtZJcbRHCf2w8QDlZyCh0xldODDCuc1+DyAliKZdD8mcWc0yT2NFTmCT1XkDMJxq
WIVAL6Kxm09WD6znwckk3+XPYgZbeIfY/Acam1nhrkhndUvv2idtBmlj8moGuZsE
nLkn8lv71gR6DA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:20 2026 by rpki-client