Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: mCY684py2RgWoxDySRVW/2HygMqeg9JTODwx/dZfhvI=
Subject key identifier: 07:8E:2D:93:36:30:C4:1E:52:4A:98:F4:AD:4A:B7:C5:E7:BF:31:66
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 019CAEA3A9E37FEBAD9767088BDC05AD5D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 1820
Signing time: Mon 02 Mar 2026 13:01:27 +0000
Manifest this update: Mon 02 Mar 2026 13:01:27 +0000
Manifest next update: Tue 03 Mar 2026 13:01:27 +0000
Files and hashes: 1: O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa (hash: LffxuYhlhgmo9uurPfnZvk9c5Vb5QUT4U1yEBcpzUI0=)
2: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: xQ7cziuqLHC9BE9Y5yNkVOUM7kDWlK7bj9xNj6GkHpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:a9:e3:7f:eb:ad:97:67:08:8b:dc:05:ad:5d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Mar 2 13:01:27 2026 GMT
Not After : Mar 3 13:01:27 2026 GMT
Subject: CN=078e2d933630c41e524a98f4ad4ab7c5e7bf3166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e5:c1:d9:e4:c2:70:b8:74:ff:f1:0c:3e:9f:
33:42:2b:95:22:fb:cb:b8:01:5a:3c:21:14:74:a7:
94:68:f7:53:f8:df:5f:5b:4e:cb:4d:fb:74:50:d3:
3d:9c:ec:aa:2a:72:e9:f5:b4:98:fc:7c:a9:ca:95:
7a:be:79:f2:57:15:ca:56:af:0e:1b:df:25:b3:47:
89:47:3e:f2:0c:72:4e:08:99:5c:b4:63:e3:95:00:
7e:56:ac:b1:2a:7c:c9:10:43:de:98:1d:32:62:0c:
2e:b9:37:e4:1a:7e:a7:7b:f7:a2:31:ea:e2:37:f4:
db:ee:e1:3b:9c:bb:9f:60:fa:2a:aa:5d:c7:e7:7b:
45:d3:35:7a:77:7d:e2:b6:10:fb:b6:e6:8a:a4:b3:
ca:e9:ba:00:23:8e:db:a0:03:e2:91:a5:6b:f1:2d:
88:b2:75:75:83:ca:b9:1b:b8:b6:f1:d9:b3:c9:29:
44:34:a9:4e:7a:ea:66:8f:3c:ba:20:27:9d:07:d6:
41:9c:25:ea:f3:23:73:d5:94:38:28:1d:9e:62:aa:
ba:5c:82:23:00:bb:e3:7e:ab:15:1e:f9:12:7e:b7:
8e:8b:14:9c:c0:5a:c5:d1:cb:72:78:ae:de:43:cc:
26:de:80:57:63:a8:fb:a2:65:6e:a3:78:51:88:2a:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8E:2D:93:36:30:C4:1E:52:4A:98:F4:AD:4A:B7:C5:E7:BF:31:66
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8b:75:19:ee:b6:6b:c9:3b:ea:1a:52:7a:d3:9d:4c:cc:eb:
b6:d6:3f:8f:06:e4:60:dd:a0:09:7c:d5:c0:45:40:c5:62:ef:
44:63:93:cb:14:3a:a6:3d:8e:b5:c6:fa:3d:64:84:33:26:8d:
08:a2:12:b8:f0:df:66:6d:59:3f:7d:5e:66:36:a6:69:73:a0:
f9:3b:35:fe:68:94:f5:29:0c:18:97:31:cc:d8:57:cc:b8:9c:
42:8b:8e:61:c3:c8:85:37:a2:a0:cc:8d:58:08:ca:5d:9a:a7:
b1:4a:c4:25:0a:72:ad:35:81:21:1b:42:65:63:98:02:37:1b:
57:f3:76:f0:09:bd:92:51:84:a7:54:ac:70:3b:e4:98:b2:21:
06:57:f2:bf:a1:87:ed:2e:b4:79:46:f0:af:d3:55:b5:47:24:
df:05:dd:23:96:d3:ef:13:38:74:5b:39:51:fa:0f:4c:e5:77:
95:73:48:5c:cb:68:9f:4a:0d:7c:7a:41:d7:0f:7c:6e:fc:f9:
e5:61:1f:86:37:7c:ab:17:c9:15:b2:ef:de:4c:a7:58:91:4f:
a8:aa:26:06:2c:07:f1:46:9b:0b:b6:1b:71:b3:fb:a7:b6:37:
d2:91:27:7b:37:b8:1e:2e:2e:9a:e8:ce:ea:8f:4d:77:c7:13:
55:3a:1f:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo6njf+utl2cIi9wFrV18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkM2IyYzMzM2I3Mjk1NTdhYzBiZTAyNzQwYjIyMjk2ZDgw
MmJmODEwHhcNMjYwMzAyMTMwMTI3WhcNMjYwMzAzMTMwMTI3WjAzMTEwLwYDVQQD
EygwNzhlMmQ5MzM2MzBjNDFlNTI0YTk4ZjRhZDRhYjdjNWU3YmYzMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseXB2eTCcLh0//EMPp8zQiuVIvvL
uAFaPCEUdKeUaPdT+N9fW07LTft0UNM9nOyqKnLp9bSY/HypypV6vnnyVxXKVq8O
G98ls0eJRz7yDHJOCJlctGPjlQB+VqyxKnzJEEPemB0yYgwuuTfkGn6ne/eiMeri
N/Tb7uE7nLufYPoqql3H53tF0zV6d33ithD7tuaKpLPK6boAI47boAPikaVr8S2I
snV1g8q5G7i28dmzySlENKlOeupmjzy6ICedB9ZBnCXq8yNz1ZQ4KB2eYqq6XIIj
ALvjfqsVHvkSfreOixScwFrF0ctyeK7eQ8wm3oBXY6j7omVuo3hRiCqaqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeOLZM2MMQeUkqY9K1Kt8XnvzFmMB8GA1UdIwQY
MBaAFH07LDM7cpVXrAvgJ0CyIpbYAr+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEt
NTI4MzVkYjY1MTJjLzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82YjFiNjQtMjU2NC00N2E3LWIxYzEtNTI4MzVkYjY1MTJj
LzEvZlRzc016dHlsVmVzQy1BblFMSWlsdGdDdjRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYt1Ge62
a8k76hpSetOdTMzrttY/jwbkYN2gCXzVwEVAxWLvRGOTyxQ6pj2Otcb6PWSEMyaN
CKISuPDfZm1ZP31eZjamaXOg+Ts1/miU9SkMGJcxzNhXzLicQouOYcPIhTeioMyN
WAjKXZqnsUrEJQpyrTWBIRtCZWOYAjcbV/N28Am9klGEp1SscDvkmLIhBlfyv6GH
7S60eUbwr9NVtUck3wXdI5bT7xM4dFs5UfoPTOV3lXNIXMton0oNfHpB1w98bvz5
5WEfhjd8qxfJFbLv3kynWJFPqKomBiwH8UabC7YbcbP7p7Y30pEneze4Hi4umujO
6o9Nd8cTVTofTw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:41 2026 by rpki-client