Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
File: FRRT9ILNp468mWJdgLD_w2YPlfI.mft (raw, json)
Hash identifier: GlgLhTGhVXRHAd+WokGDgBNRwgBiNLVB6XQTQv7lY/g=
Subject key identifier: 85:1C:D7:68:E3:5F:15:82:36:B7:DF:DE:3D:82:47:92:53:69:04:9F
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial: 019CACB49CD43F6590D824A4778557B65807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
Manifest number: 1856
Signing time: Mon 02 Mar 2026 04:00:43 +0000
Manifest this update: Mon 02 Mar 2026 04:00:43 +0000
Manifest next update: Tue 03 Mar 2026 04:00:43 +0000
Files and hashes: 1: EqM2uQDUV3EtJlQIhiZ248LRU80.roa (hash: LrXepb2bBzqPdwODtMI9Sq5W4GGZQAYaJUawmfJC0iE=)
2: FRRT9ILNp468mWJdgLD_w2YPlfI.crl (hash: 730ZBYxQ98GbrybbtXFJdCFdng5KENE6gpV8+hOyqD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:9c:d4:3f:65:90:d8:24:a4:77:85:57:b6:58:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Validity
Not Before: Mar 2 04:00:43 2026 GMT
Not After : Mar 3 04:00:43 2026 GMT
Subject: CN=851cd768e35f158236b7dfde3d8247925369049f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:79:cd:4e:2e:86:24:9c:17:3b:69:26:ae:
f9:ab:f2:73:f7:93:1a:a4:f0:8f:2f:90:c9:f9:f6:
ef:b8:0f:af:64:d6:c3:50:d7:9d:85:07:eb:73:ad:
eb:96:41:92:d4:b7:f1:ab:4f:4f:93:22:e0:f0:ce:
40:b0:67:91:57:68:dd:ea:fd:7b:6e:05:9d:cf:5f:
50:cf:5e:1a:b6:70:f5:b9:91:09:2d:10:4b:49:1e:
9d:a0:86:b0:3c:2d:c5:f7:29:3e:b6:cf:c9:71:c3:
5f:29:4f:4d:a0:01:99:54:61:b6:22:5b:81:ed:8d:
94:e2:3f:18:b4:97:e6:93:2d:b1:7e:d0:b8:9e:56:
9b:a5:99:2c:32:82:bf:f3:4d:e9:14:7c:64:77:92:
31:d0:60:18:9d:4b:37:f7:8e:2c:4c:36:92:f7:94:
9c:27:c0:15:d7:a1:cb:a1:86:cb:42:13:08:8a:0b:
ae:1c:b4:43:e5:e1:8a:29:8f:3f:25:c9:99:c5:eb:
50:82:5b:2b:4e:da:1b:1c:1d:14:f6:71:ea:5a:44:
c6:5e:e6:b7:7c:1f:44:4c:11:54:ad:9a:92:ac:f3:
57:e0:a5:6d:cf:18:1b:1f:c6:58:dc:e7:c0:d9:4d:
62:23:8f:6a:65:00:e4:3a:03:b8:e7:7e:26:87:72:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1C:D7:68:E3:5F:15:82:36:B7:DF:DE:3D:82:47:92:53:69:04:9F
X509v3 Authority Key Identifier:
keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6d:81:6f:ec:e7:64:33:3f:9c:0a:56:a1:ed:34:13:18:bb:
71:37:0e:51:5e:e9:cb:2d:09:40:24:30:01:60:1e:b3:03:24:
de:54:b3:2b:8a:18:37:0c:99:e7:22:6d:a6:91:3f:d2:a7:68:
2f:46:99:4d:8d:bf:04:63:44:54:f8:39:17:b9:b1:4c:14:22:
55:02:6e:a1:45:45:d8:3c:74:7f:85:cb:f5:77:90:0d:62:06:
bf:3f:b3:63:4b:87:8f:fc:55:06:06:6a:bc:5e:ad:64:1d:13:
3b:51:93:39:e7:fc:17:4e:73:6b:6e:5b:65:ef:15:55:07:d3:
a0:7b:73:76:16:f0:c9:cf:06:6d:34:a5:07:f1:5e:f3:24:2d:
8d:9c:83:11:44:fc:81:12:8c:f0:28:5c:d0:5a:f7:8f:45:be:
dd:72:36:6b:da:54:44:78:5b:b8:4c:82:ba:73:72:40:39:d7:
0f:d0:a4:00:5f:b2:b2:49:78:64:a5:3b:a7:d5:97:37:49:3a:
f2:c8:90:fa:5a:8e:40:11:7b:42:a6:9d:71:71:0d:8e:19:85:
96:85:b1:64:b1:54:1d:61:f9:a7:26:07:03:62:61:5c:d8:c9:
89:8b:d9:09:ae:d8:53:dc:21:f0:4c:d8:7b:72:1a:18:c2:3d:
cf:7f:2d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystJzUP2WQ2CSkd4VXtlgHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTQ1M2Y0ODJjZGE3OGViYzk5NjI1ZDgwYjBmZmMzNjYw
Zjk1ZjIwHhcNMjYwMzAyMDQwMDQzWhcNMjYwMzAzMDQwMDQzWjAzMTEwLwYDVQQD
Eyg4NTFjZDc2OGUzNWYxNTgyMzZiN2RmZGUzZDgyNDc5MjUzNjkwNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdt5zU4uhiScFztpJq75q/Jz95Ma
pPCPL5DJ+fbvuA+vZNbDUNedhQfrc63rlkGS1Lfxq09PkyLg8M5AsGeRV2jd6v17
bgWdz19Qz14atnD1uZEJLRBLSR6doIawPC3F9yk+ts/JccNfKU9NoAGZVGG2IluB
7Y2U4j8YtJfmky2xftC4nlabpZksMoK/803pFHxkd5Ix0GAYnUs3944sTDaS95Sc
J8AV16HLoYbLQhMIiguuHLRD5eGKKY8/JcmZxetQglsrTtobHB0U9nHqWkTGXua3
fB9ETBFUrZqSrPNX4KVtzxgbH8ZY3OfA2U1iI49qZQDkOgO4534mh3KuXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUc12jjXxWCNrff3j2CR5JTaQSfMB8GA1UdIwQY
MBaAFBUUU/SCzaeOvJliXYCw/8NmD5XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODct
M2JjYjhiZjhiYmZlLzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODctM2JjYjhiZjhiYmZl
LzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkm2Bb+zn
ZDM/nApWoe00Exi7cTcOUV7pyy0JQCQwAWAeswMk3lSzK4oYNwyZ5yJtppE/0qdo
L0aZTY2/BGNEVPg5F7mxTBQiVQJuoUVF2Dx0f4XL9XeQDWIGvz+zY0uHj/xVBgZq
vF6tZB0TO1GTOef8F05za25bZe8VVQfToHtzdhbwyc8GbTSlB/Fe8yQtjZyDEUT8
gRKM8Chc0Fr3j0W+3XI2a9pURHhbuEyCunNyQDnXD9CkAF+yskl4ZKU7p9WXN0k6
8siQ+lqOQBF7QqadcXENjhmFloWxZLFUHWH5pyYHA2JhXNjJiYvZCa7YU9wh8EzY
e3IaGMI9z38tjA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:35 2026 by rpki-client