Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
File: fkL5qpHFODs-cnVy67GVWRqHYM4.mft (raw, json)
Hash identifier: Gh/WQOsfpVv8Kx/PQGKi07PoUbgAvwB5KE8u1d8iCos=
Subject key identifier: 6A:A2:9A:E2:1C:98:23:D9:93:F0:A5:79:BD:D1:84:AC:5A:EF:24:2E
Authority key identifier: 7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
Certificate issuer: /CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Certificate serial: 019CAB6B45EE3C2F21DB5EAA963D244D8F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
Manifest number: 08DD
Signing time: Sun 01 Mar 2026 22:00:59 +0000
Manifest this update: Sun 01 Mar 2026 22:00:59 +0000
Manifest next update: Mon 02 Mar 2026 22:00:59 +0000
Files and hashes: 1: fkL5qpHFODs-cnVy67GVWRqHYM4.crl (hash: P8hpVkVzRaB3QP9IUHJXVGOh907etyM8T9f91UfkmPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:45:ee:3c:2f:21:db:5e:aa:96:3d:24:4d:8f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Validity
Not Before: Mar 1 22:00:59 2026 GMT
Not After : Mar 2 22:00:59 2026 GMT
Subject: CN=6aa29ae21c9823d993f0a579bdd184ac5aef242e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:75:0d:09:07:4f:f0:4a:2b:2f:e2:98:42:09:
11:0f:6d:e6:24:30:0d:53:c3:c7:17:95:75:cd:0e:
f7:01:e3:c5:3b:26:60:88:1c:97:63:11:a3:38:c5:
f1:8d:b4:73:12:ec:b8:d9:b7:9b:36:4d:27:11:d8:
17:9a:b5:f2:f9:7e:2e:35:94:39:7d:27:dd:ef:6d:
b7:43:57:60:03:d1:d9:24:89:ea:4e:7b:5b:44:f4:
30:42:90:66:a6:5e:ef:08:89:65:3b:33:bb:8d:90:
0e:db:33:da:4b:e6:eb:35:35:9c:fb:34:5a:32:bb:
b0:3a:d2:d2:27:45:eb:32:ab:3a:c9:49:08:08:01:
73:73:16:56:25:0b:5a:02:d8:7d:41:18:f8:ac:a9:
e8:62:c6:1b:89:6b:8a:66:23:ee:91:46:c7:a2:97:
b9:ba:7d:8d:ae:29:08:16:ad:41:d3:86:a1:97:4a:
19:b4:b8:1f:15:85:51:af:ec:86:85:a6:e4:bc:72:
f5:59:d8:87:71:f4:d9:39:0f:9d:e8:0b:ea:9d:db:
f1:af:6c:86:7f:46:48:70:fe:70:a6:fb:94:7a:20:
f3:91:dd:e5:b0:50:dc:51:5d:94:ac:07:9b:f5:c9:
b2:50:4a:b1:67:c4:c8:2c:39:11:ee:14:97:4c:6c:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:9A:E2:1C:98:23:D9:93:F0:A5:79:BD:D1:84:AC:5A:EF:24:2E
X509v3 Authority Key Identifier:
keyid:7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0a:e6:b4:db:e9:d7:20:fe:97:4c:5c:dd:6c:67:3b:7e:23:
01:cb:74:ba:da:bb:b0:57:7a:c6:a4:d3:a6:8d:07:46:af:5d:
01:88:5c:64:71:c3:e0:25:05:81:76:47:6f:59:4c:13:73:df:
58:5f:af:70:1d:45:e9:d8:92:a1:6f:12:81:a4:b2:fc:ef:a5:
7e:75:94:98:60:c9:eb:9d:c9:e6:78:20:f4:17:7a:b8:38:d9:
e4:d4:fc:e3:e0:da:b3:4f:9e:d3:40:df:95:02:2c:6c:10:86:
58:79:4f:60:76:a3:ab:c0:3c:ef:da:34:23:c2:1f:2b:e7:5a:
03:f3:3f:6d:c8:ce:82:6b:10:08:32:d6:bf:b1:80:9f:86:20:
08:00:17:48:a6:b7:f0:6f:08:5c:14:03:59:bc:e3:89:20:2f:
a8:65:90:2b:4b:33:71:e3:91:46:6e:f0:ab:4a:82:c2:b4:6b:
1d:a5:6a:3f:0f:b6:d7:5e:9a:31:05:fc:bf:9d:a3:5b:dd:af:
98:2b:fc:3d:0e:7e:3b:96:78:6b:2e:1a:80:8e:b5:bc:cb:a0:
5e:83:c1:c7:d3:7b:0d:3d:86:1b:a7:c7:9d:33:31:a4:58:fc:
38:af:66:76:13:b8:09:ea:81:2b:cb:f1:22:1c:89:c2:f6:37:
b4:c0:8c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra0XuPC8h216qlj0kTY8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNDJmOWFhOTFjNTM4M2IzZTcyNzU3MmViYjE5NTU5MWE4
NzYwY2UwHhcNMjYwMzAxMjIwMDU5WhcNMjYwMzAyMjIwMDU5WjAzMTEwLwYDVQQD
Eyg2YWEyOWFlMjFjOTgyM2Q5OTNmMGE1NzliZGQxODRhYzVhZWYyNDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HUNCQdP8EorL+KYQgkRD23mJDAN
U8PHF5V1zQ73AePFOyZgiByXYxGjOMXxjbRzEuy42bebNk0nEdgXmrXy+X4uNZQ5
fSfd7223Q1dgA9HZJInqTntbRPQwQpBmpl7vCIllOzO7jZAO2zPaS+brNTWc+zRa
MruwOtLSJ0XrMqs6yUkICAFzcxZWJQtaAth9QRj4rKnoYsYbiWuKZiPukUbHope5
un2NrikIFq1B04ahl0oZtLgfFYVRr+yGhabkvHL1WdiHcfTZOQ+d6Avqndvxr2yG
f0ZIcP5wpvuUeiDzkd3lsFDcUV2UrAeb9cmyUEqxZ8TILDkR7hSXTGxtkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqimuIcmCPZk/Cleb3RhKxa7yQuMB8GA1UdIwQY
MBaAFH5C+aqRxTg7PnJ1cuuxlVkah2DOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84MWQ4ZGQtNGNkMy00Mzc4LWIwNjct
N2NkNDcyODY0YmY4LzEvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC84MWQ4ZGQtNGNkMy00Mzc4LWIwNjctN2NkNDcyODY0YmY4
LzEvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQrmtNvp
1yD+l0xc3WxnO34jAct0utq7sFd6xqTTpo0HRq9dAYhcZHHD4CUFgXZHb1lME3Pf
WF+vcB1F6diSoW8SgaSy/O+lfnWUmGDJ653J5ngg9Bd6uDjZ5NT84+Das0+e00Df
lQIsbBCGWHlPYHajq8A879o0I8IfK+daA/M/bcjOgmsQCDLWv7GAn4YgCAAXSKa3
8G8IXBQDWbzjiSAvqGWQK0szceORRm7wq0qCwrRrHaVqPw+2116aMQX8v52jW92v
mCv8PQ5+O5Z4ay4agI61vMugXoPBx9N7DT2GG6fHnTMxpFj8OK9mdhO4CeqBK8vx
IhyJwvY3tMCMdQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:05 2026 by rpki-client