Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier: Zara4WK9vLQXXs7fom1CByAaW0EDU9GoJNqIGE4SYNE=
Subject key identifier: 76:A7:E8:8D:C9:C2:E8:F4:78:43:B9:98:FD:BC:18:6F:4D:EC:34:66
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 019CAA215E9740B5761F2BB228BA71D5B25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number: 1785
Signing time: Sun 01 Mar 2026 16:00:39 +0000
Manifest this update: Sun 01 Mar 2026 16:00:39 +0000
Manifest next update: Mon 02 Mar 2026 16:00:39 +0000
Files and hashes: 1: DP2ZVF5XMtIlb8PSMaOqb9pBnpY.roa (hash: jGqjs9xozz6rpTqRrKhgcskeRFoVeCtnOBzJB/wnJHI=)
2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: i3eY3GMigYB5svBkH2l8jJUOffIbE9VdH7iW2isE6WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:5e:97:40:b5:76:1f:2b:b2:28:ba:71:d5:b2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Mar 1 16:00:39 2026 GMT
Not After : Mar 2 16:00:39 2026 GMT
Subject: CN=76a7e88dc9c2e8f47843b998fdbc186f4dec3466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:cf:f7:b6:5c:e3:a8:a2:86:37:40:45:66:
5c:b6:0b:cd:35:58:29:70:4d:63:80:51:88:43:72:
27:83:ee:13:58:3a:e5:9a:3e:4f:b7:fe:a4:e9:a0:
8b:50:99:e7:8c:d8:07:58:41:05:41:68:9d:84:8c:
f1:c1:55:2c:fa:37:b6:71:69:58:a3:43:f6:cb:2c:
67:05:12:f5:e6:c8:5a:97:ce:5c:74:ea:b1:a6:7b:
1b:85:35:3b:78:bd:3f:04:25:a3:3d:4c:ea:28:9d:
69:29:c0:c1:37:a9:eb:1d:c6:7e:d0:9e:f5:39:f7:
05:f7:ea:bc:c0:1c:c0:09:03:16:68:a5:fa:c4:23:
93:e4:49:51:31:0a:38:22:e5:0d:46:86:fc:a7:7d:
ae:42:28:ed:15:ac:df:20:b2:f7:06:39:9c:7c:80:
d8:e5:9f:09:cb:ed:47:06:23:aa:c9:18:b3:29:c8:
48:62:5b:6b:4e:fe:29:32:4c:6e:55:e7:70:d7:df:
db:7c:36:43:9f:65:63:e1:ce:e7:26:7d:46:60:02:
09:40:8f:9f:b1:eb:db:20:06:18:57:b9:48:ed:bb:
d2:7b:6a:f0:e2:87:e2:e5:cc:b5:52:d4:a9:8a:b7:
8a:39:21:0b:2b:de:39:e2:1b:f1:cf:ea:ed:1e:07:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A7:E8:8D:C9:C2:E8:F4:78:43:B9:98:FD:BC:18:6F:4D:EC:34:66
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c7:86:1f:b8:2e:5f:d8:b7:08:79:5c:c1:ca:0a:4b:33:c4:
16:ea:cb:e1:73:ec:a4:3d:08:80:30:f0:c0:92:13:c7:a1:32:
37:94:db:23:ab:1b:42:51:04:e9:31:1f:93:20:3f:0d:92:c0:
74:2d:ef:48:e0:07:a3:ba:bd:95:db:00:e1:27:54:c1:92:6a:
93:2d:c9:6a:b0:63:3c:1a:c9:78:06:8f:6e:c7:e1:07:2e:fa:
16:86:95:2b:71:df:22:4c:6a:6d:48:64:2a:dd:46:f8:76:be:
36:25:ac:73:a1:d9:67:98:f3:e2:f6:d8:84:bd:06:ca:a1:8e:
f6:39:d3:38:2b:60:58:96:d5:76:7c:5e:19:5b:e5:93:b8:65:
0d:c4:35:ad:fc:2f:ba:27:6b:0c:48:f2:26:09:a3:be:9f:e6:
e3:08:4b:f9:8f:79:1a:a6:80:03:aa:46:c2:0a:b5:60:2a:42:
28:a5:6c:9c:33:34:e1:cf:3e:e4:8a:81:07:91:12:f9:40:ea:
24:ed:ea:1e:bc:5a:d7:c7:fd:48:11:24:07:63:d6:32:4e:6b:
3a:85:b6:26:ee:45:59:e4:78:cc:cf:ca:10:9a:5a:96:46:ca:
58:19:85:a9:f3:18:a6:72:75:21:fd:bb:80:a5:5b:57:fe:22:
1f:92:a8:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIV6XQLV2HyuyKLpx1bJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YWYwNzJmOWUxNTZhYmMyMGM0Njg0OThlMjMyMzE1MmM3
MzZhZTgwHhcNMjYwMzAxMTYwMDM5WhcNMjYwMzAyMTYwMDM5WjAzMTEwLwYDVQQD
Eyg3NmE3ZTg4ZGM5YzJlOGY0Nzg0M2I5OThmZGJjMTg2ZjRkZWMzNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsHP97Zc46iihjdARWZctgvNNVgp
cE1jgFGIQ3Ing+4TWDrlmj5Pt/6k6aCLUJnnjNgHWEEFQWidhIzxwVUs+je2cWlY
o0P2yyxnBRL15shal85cdOqxpnsbhTU7eL0/BCWjPUzqKJ1pKcDBN6nrHcZ+0J71
OfcF9+q8wBzACQMWaKX6xCOT5ElRMQo4IuUNRob8p32uQijtFazfILL3BjmcfIDY
5Z8Jy+1HBiOqyRizKchIYltrTv4pMkxuVedw19/bfDZDn2Vj4c7nJn1GYAIJQI+f
sevbIAYYV7lI7bvSe2rw4ofi5cy1UtSpireKOSELK9454hvxz+rtHgccnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHan6I3Jwuj0eEO5mP28GG9N7DRmMB8GA1UdIwQY
MBaAFBWvBy+eFWq8IMRoSY4jIxUsc2roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2Mt
Mzk2OWVjYTdiN2Q0LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2MtMzk2OWVjYTdiN2Q0
LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlseGH7gu
X9i3CHlcwcoKSzPEFurL4XPspD0IgDDwwJITx6EyN5TbI6sbQlEE6TEfkyA/DZLA
dC3vSOAHo7q9ldsA4SdUwZJqky3JarBjPBrJeAaPbsfhBy76FoaVK3HfIkxqbUhk
Kt1G+Ha+NiWsc6HZZ5jz4vbYhL0GyqGO9jnTOCtgWJbVdnxeGVvlk7hlDcQ1rfwv
uidrDEjyJgmjvp/m4whL+Y95GqaAA6pGwgq1YCpCKKVsnDM04c8+5IqBB5ES+UDq
JO3qHrxa18f9SBEkB2PWMk5rOoW2Ju5FWeR4zM/KEJpalkbKWBmFqfMYpnJ1If27
gKVbV/4iH5KoGg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:01 2026 by rpki-client