Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: 14nCr0I5I0fP3xfgahD20l89jqZBfnqBNcthB8bc9ZM=
Subject key identifier: 2E:90:0E:A7:0A:3D:05:90:90:DA:12:C1:47:7C:50:42:AE:0E:2D:B5
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 019CABD9DF8B0D097AD162CC4430A876B4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0D7C
Signing time: Mon 02 Mar 2026 00:01:48 +0000
Manifest this update: Mon 02 Mar 2026 00:01:48 +0000
Manifest next update: Tue 03 Mar 2026 00:01:48 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: CV1jru/Y5/jOVhfRISsMv+7WsRnV/Qfmy/jyWcRnNXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:df:8b:0d:09:7a:d1:62:cc:44:30:a8:76:b4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Mar 2 00:01:48 2026 GMT
Not After : Mar 3 00:01:48 2026 GMT
Subject: CN=2e900ea70a3d059090da12c1477c5042ae0e2db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:f9:9b:56:2b:30:e0:03:36:98:9c:a4:b5:
2c:ea:47:f2:89:5b:a2:5d:ca:b7:13:33:c1:2c:ce:
a1:55:cd:90:8e:72:84:61:cb:eb:b4:e0:5b:c8:0f:
28:e9:6f:50:e8:61:ab:3c:5f:44:8c:2d:81:fe:0b:
ce:a7:19:0c:38:48:a2:64:78:8b:3e:00:ee:95:c6:
6c:b9:d6:c5:d3:f1:10:d7:ff:3b:a4:8a:13:f2:13:
35:85:bb:df:85:2f:16:ae:49:ed:4e:3c:77:1c:98:
45:01:69:fe:c9:2c:3b:0b:97:5b:54:2a:8d:f7:03:
56:b6:45:5b:4e:67:d6:4e:6e:89:07:d3:36:32:1a:
6a:f0:96:a0:0c:a3:6f:6d:86:2a:3c:ad:49:76:9c:
56:7f:7c:5f:4c:3c:cc:27:be:b6:28:5f:36:44:30:
a5:b9:a8:c7:47:a2:c2:06:8b:b3:31:77:cc:f5:44:
cd:2b:59:80:68:c3:12:c3:52:4b:ce:01:3f:7b:05:
ba:69:d5:96:fd:ee:34:6e:35:3b:20:57:cc:ac:91:
2b:54:1e:cf:b0:00:71:53:cf:c3:1f:49:d9:e6:9d:
ad:8f:f7:29:5a:a1:1a:93:cb:98:b8:e3:25:7a:a3:
80:2a:7c:31:c3:ee:0c:65:36:a0:bb:98:26:99:91:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:90:0E:A7:0A:3D:05:90:90:DA:12:C1:47:7C:50:42:AE:0E:2D:B5
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:48:33:3a:53:bb:45:06:85:35:fc:f2:b0:65:d0:7f:5e:c4:
a5:22:9c:97:5b:92:e4:5f:cb:18:12:3e:f8:e0:9e:a7:1a:87:
fb:fd:3b:01:b6:22:a9:24:5b:41:1f:ea:09:de:fc:60:f6:c3:
3c:92:75:3d:52:9f:6e:02:29:ce:cd:77:77:68:41:19:3b:15:
4c:24:49:71:26:73:2b:f7:eb:7d:5c:4b:97:fe:83:24:f8:ca:
ae:ea:b0:f0:51:bd:71:c8:ce:09:16:99:74:14:a0:9d:4e:85:
f2:7d:9a:06:6e:e1:70:0b:ea:e1:eb:4e:e9:20:06:a5:ab:d0:
1c:f9:7c:d9:df:43:79:6c:c8:5d:4f:65:6c:e9:c7:f4:4e:d1:
ee:e0:99:60:c1:e7:15:3a:ca:4a:df:97:23:6e:dc:03:11:89:
ff:c3:e7:55:e6:f7:aa:82:f9:f0:d4:19:ee:8d:cc:53:ac:b5:
7f:52:d8:c6:09:de:e1:39:9d:28:28:b7:69:4b:99:68:47:0a:
87:76:00:46:70:0d:65:49:08:92:fc:70:31:7d:f6:06:d8:34:
fb:b3:ca:2a:1e:04:8e:0a:61:11:ae:b4:15:88:2d:f0:04:07:
d4:b2:0f:b2:7e:e2:a9:98:c5:0c:a1:ab:6d:f0:30:11:8c:ee:
cb:d0:6e:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2d+LDQl60WLMRDCodrTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMjM4MGQ3NjRhOTYxMWRmZTJmYmMwY2UwY2M0MDQ5NmVj
MWU4M2UwHhcNMjYwMzAyMDAwMTQ4WhcNMjYwMzAzMDAwMTQ4WjAzMTEwLwYDVQQD
EygyZTkwMGVhNzBhM2QwNTkwOTBkYTEyYzE0NzdjNTA0MmFlMGUyZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgr5m1YrMOADNpicpLUs6kfyiVui
Xcq3EzPBLM6hVc2QjnKEYcvrtOBbyA8o6W9Q6GGrPF9EjC2B/gvOpxkMOEiiZHiL
PgDulcZsudbF0/EQ1/87pIoT8hM1hbvfhS8WrkntTjx3HJhFAWn+ySw7C5dbVCqN
9wNWtkVbTmfWTm6JB9M2Mhpq8JagDKNvbYYqPK1JdpxWf3xfTDzMJ762KF82RDCl
uajHR6LCBouzMXfM9UTNK1mAaMMSw1JLzgE/ewW6adWW/e40bjU7IFfMrJErVB7P
sABxU8/DH0nZ5p2tj/cpWqEak8uYuOMleqOAKnwxw+4MZTagu5gmmZE3ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6QDqcKPQWQkNoSwUd8UEKuDi21MB8GA1UdIwQY
MBaAFHwjgNdkqWEd/i+8DODMQEluweg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMt
NWQ4Y2E2MzY4MWFkLzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NWZhODQtNWQ5OS00YWE4LTg3NTMtNWQ4Y2E2MzY4MWFk
LzEvZkNPQTEyU3BZUjMtTDd3TTRNeEFTVzdCNkQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUgzOlO7
RQaFNfzysGXQf17EpSKcl1uS5F/LGBI++OCepxqH+/07AbYiqSRbQR/qCd78YPbD
PJJ1PVKfbgIpzs13d2hBGTsVTCRJcSZzK/frfVxLl/6DJPjKruqw8FG9ccjOCRaZ
dBSgnU6F8n2aBm7hcAvq4etO6SAGpavQHPl82d9DeWzIXU9lbOnH9E7R7uCZYMHn
FTrKSt+XI27cAxGJ/8PnVeb3qoL58NQZ7o3MU6y1f1LYxgne4TmdKCi3aUuZaEcK
h3YARnANZUkIkvxwMX32Btg0+7PKKh4EjgphEa60FYgt8AQH1LIPsn7iqZjFDKGr
bfAwEYzuy9BufA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:40 2026 by rpki-client