Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
File: fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft (raw, json)
Hash identifier: 3BUUbJ05IkdJYOE8u1sKK0Loya1oLFb1v5O8cjCVLFI=
Subject key identifier: A7:C3:3F:CB:DD:D4:3B:3E:00:BD:02:B3:8C:20:34:4D:D0:4E:10:40
Authority key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
Certificate issuer: /CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Certificate serial: 019CAAC654D86ECE5E30E76C42B6CCFF9577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
Manifest number: 068F
Signing time: Sun 01 Mar 2026 19:00:50 +0000
Manifest this update: Sun 01 Mar 2026 19:00:50 +0000
Manifest next update: Mon 02 Mar 2026 19:00:50 +0000
Files and hashes: 1: A0kDV6HOq6FdY-LkUzRoio2xA9Q.roa (hash: i9DOUjMa7c5ZM14JioAbWMihtBuOPOBDq4Dq7r6lxQg=)
2: fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl (hash: UUqreqrFui7YbMcbuZaNoiVIud7a1EqWWTzlpOYP5eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:54:d8:6e:ce:5e:30:e7:6c:42:b6:cc:ff:95:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Validity
Not Before: Mar 1 19:00:50 2026 GMT
Not After : Mar 2 19:00:50 2026 GMT
Subject: CN=a7c33fcbddd43b3e00bd02b38c20344dd04e1040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:7e:29:f2:5d:61:7e:7a:3c:e1:62:4f:41:
5c:c5:0b:bf:96:2d:78:c9:28:fc:4d:ea:40:32:37:
ed:33:74:40:4d:64:de:ed:f5:e4:26:6b:11:b4:b4:
f8:49:db:49:7b:cf:8d:2f:65:66:fe:c1:bf:b4:e0:
38:97:e9:65:40:26:5e:17:38:cf:53:2c:26:70:2c:
04:2d:82:7c:1f:12:db:2e:99:57:41:15:53:75:cd:
99:d6:28:51:57:57:52:e8:07:a3:7c:a6:7c:27:03:
a0:b8:43:18:de:9e:d5:9c:a3:df:2d:7b:50:65:66:
46:44:3f:81:eb:fd:21:69:1b:76:ea:c9:06:b4:24:
c1:e0:8b:26:5c:26:4a:40:07:93:33:20:d2:04:64:
d0:08:95:3c:35:2f:1c:e6:b9:ad:29:58:8e:30:ad:
a5:79:0a:6f:ff:47:be:f6:d5:5a:b7:4c:8f:6c:28:
5d:ca:0d:42:09:3f:08:17:8a:2b:af:05:f2:1d:13:
70:98:09:58:bd:3b:69:af:a2:de:4f:e3:e8:60:9d:
d5:d4:0c:91:a3:44:79:af:01:a7:0d:77:34:77:22:
aa:f1:28:21:87:51:93:65:25:17:bf:86:02:84:df:
bd:92:91:86:59:32:1e:e8:f4:98:2e:8e:9b:4f:4e:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C3:3F:CB:DD:D4:3B:3E:00:BD:02:B3:8C:20:34:4D:D0:4E:10:40
X509v3 Authority Key Identifier:
keyid:7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f7:be:cd:92:57:55:f4:45:96:a9:49:e6:c1:ed:fe:3f:ff:
1e:fd:17:17:8e:58:61:6e:71:fb:c4:19:b7:96:59:4a:ee:27:
df:4e:eb:56:c2:d4:4e:f9:db:e5:c7:65:4a:32:bb:31:c0:b6:
b7:5f:9f:da:07:bf:55:0f:a5:bf:e6:ad:c3:1b:e4:4f:db:36:
46:03:2a:62:e3:9b:e3:2f:8c:33:52:f2:bb:41:90:ae:48:62:
6d:37:cb:e4:94:36:82:55:36:46:ba:5d:57:e1:2a:b5:f5:ac:
28:25:c6:bc:b3:4f:ac:78:f1:d5:e4:65:11:ec:ab:0d:98:09:
2c:f1:ce:49:83:15:b2:69:94:40:7e:61:9e:5d:d3:de:ad:51:
2a:6c:42:1a:ca:75:84:fa:a4:04:8c:6e:ae:e0:e9:87:04:92:
82:a0:2b:d0:86:4e:a5:3a:59:1b:4e:36:b7:73:fe:f4:e8:53:
ee:ee:8f:37:98:82:2a:20:d5:98:c6:32:a4:79:a0:b7:cd:ce:
3f:b9:72:73:9d:89:f8:93:44:8d:b0:e2:67:e5:5f:0a:cb:2e:
1b:93:af:07:dc:36:37:9e:5f:51:3e:fc:9a:5d:8c:fc:e0:1e:
ef:6c:30:e1:68:05:0e:c7:2b:c4:07:48:01:7f:46:c1:38:49:
1a:13:f5:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxlTYbs5eMOdsQrbM/5V3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNzg1NmM5N2JlYjk3YzJiMzg2ZmI5NThjMmRiMTIyYzU3
ZGIzNmMwHhcNMjYwMzAxMTkwMDUwWhcNMjYwMzAyMTkwMDUwWjAzMTEwLwYDVQQD
EyhhN2MzM2ZjYmRkZDQzYjNlMDBiZDAyYjM4YzIwMzQ0ZGQwNGUxMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgV+KfJdYX56POFiT0FcxQu/li14
ySj8TepAMjftM3RATWTe7fXkJmsRtLT4SdtJe8+NL2Vm/sG/tOA4l+llQCZeFzjP
UywmcCwELYJ8HxLbLplXQRVTdc2Z1ihRV1dS6AejfKZ8JwOguEMY3p7VnKPfLXtQ
ZWZGRD+B6/0haRt26skGtCTB4IsmXCZKQAeTMyDSBGTQCJU8NS8c5rmtKViOMK2l
eQpv/0e+9tVat0yPbChdyg1CCT8IF4orrwXyHRNwmAlYvTtpr6LeT+PoYJ3V1AyR
o0R5rwGnDXc0dyKq8Sghh1GTZSUXv4YChN+9kpGGWTIe6PSYLo6bT06xcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfDP8vd1Ds+AL0Cs4wgNE3QThBAMB8GA1UdIwQY
MBaAFH14Vsl765fCs4b7lYwtsSLFfbNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jMDNkMzctNGVmYy00YzNjLTgyODEt
M2M3Mzg1NDQ0ODJlLzEvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jMDNkMzctNGVmYy00YzNjLTgyODEtM2M3Mzg1NDQ0ODJl
LzEvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAove+zZJX
VfRFlqlJ5sHt/j//Hv0XF45YYW5x+8QZt5ZZSu4n307rVsLUTvnb5cdlSjK7McC2
t1+f2ge/VQ+lv+atwxvkT9s2RgMqYuOb4y+MM1Lyu0GQrkhibTfL5JQ2glU2Rrpd
V+EqtfWsKCXGvLNPrHjx1eRlEeyrDZgJLPHOSYMVsmmUQH5hnl3T3q1RKmxCGsp1
hPqkBIxuruDphwSSgqAr0IZOpTpZG042t3P+9OhT7u6PN5iCKiDVmMYypHmgt83O
P7lyc52J+JNEjbDiZ+VfCssuG5OvB9w2N55fUT78ml2M/OAe72ww4WgFDscrxAdI
AX9GwThJGhP1gg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:48 2026 by rpki-client