Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
File: FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft (raw, json)
Hash identifier: fK2CwRVQHI3A4FCjfv24ysgZEi92iMbVQsNnhWzrx40=
Subject key identifier: 0D:41:F4:A9:77:25:97:2B:A4:0E:5F:6D:39:1F:77:56:BB:F1:F2:EB
Authority key identifier: 16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
Certificate issuer: /CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Certificate serial: 019CAB6ACFC36AE268A9B7419DCAFE883A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
Manifest number: 5E
Signing time: Sun 01 Mar 2026 22:00:29 +0000
Manifest this update: Sun 01 Mar 2026 22:00:29 +0000
Manifest next update: Mon 02 Mar 2026 22:00:29 +0000
Files and hashes: 1: EYbnkdsGi0cWbkFU3UiOzuHllwM.roa (hash: FBbq4acRcJHICFhiug0/npiuCo5RqLFSogoLF21zVfA=)
2: FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl (hash: 1ZEZx4u7bYxAcr8X5o9tZlhoUpyol9OtecijA6FH87g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:cf:c3:6a:e2:68:a9:b7:41:9d:ca:fe:88:3a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Validity
Not Before: Mar 1 22:00:29 2026 GMT
Not After : Mar 2 22:00:29 2026 GMT
Subject: CN=0d41f4a97725972ba40e5f6d391f7756bbf1f2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2f:01:58:b4:52:f1:6f:cd:88:f6:43:49:fd:
e3:cc:7c:d3:43:05:da:e6:3d:63:e1:fa:75:81:08:
9a:ff:73:ae:0a:54:ba:06:c5:89:11:f1:9d:b9:b5:
aa:ee:df:61:cd:b3:25:6b:f4:e9:3a:b8:20:e2:94:
c0:3a:ba:f0:60:cd:20:a3:68:c3:08:4e:ca:d4:72:
19:f2:e9:e7:0a:c7:ff:25:32:ac:bf:8d:b2:45:ca:
22:f5:f8:a6:e0:6a:fa:8e:3e:b7:98:f1:83:b3:1a:
c4:bf:c6:ed:d4:47:6e:1a:a5:3a:30:34:22:53:a6:
6a:76:97:18:5f:0d:ba:6b:a8:3b:85:92:eb:c3:3d:
d4:67:37:86:57:fe:fe:81:c1:4e:e0:3e:41:65:11:
3c:7b:c5:e1:0b:5a:e7:9e:c2:e1:e3:ec:48:8f:cc:
43:0c:ae:26:db:45:9e:d3:10:26:48:e7:48:fd:42:
0b:b0:05:bc:1c:10:c8:70:ff:20:19:ca:c9:96:3c:
53:dc:52:03:c6:c9:0d:e1:13:63:12:a0:15:cd:76:
cb:c9:76:f1:51:c7:4c:80:bc:a3:e5:b1:e6:2e:e5:
8b:f4:50:28:bb:9f:7d:94:75:f0:b4:30:09:7e:1b:
5b:44:55:2b:31:54:35:da:51:26:92:97:36:53:ff:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:41:F4:A9:77:25:97:2B:A4:0E:5F:6D:39:1F:77:56:BB:F1:F2:EB
X509v3 Authority Key Identifier:
keyid:16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:17:1f:67:84:59:fe:54:f6:fe:c9:f3:fa:7b:8f:0f:86:ea:
08:1d:68:9d:68:c2:1f:8f:28:18:b0:41:a8:ef:5c:8a:b6:b0:
80:07:b5:9e:c7:57:5f:48:4e:ae:4b:8b:ff:52:d7:4a:ed:a3:
a2:70:5d:ed:bc:d3:03:38:6b:69:a6:71:f3:d7:87:22:bf:47:
2c:f9:1a:7a:37:14:3e:76:c6:e8:5d:b5:8f:99:2a:38:0c:ef:
80:68:55:52:c8:74:09:d3:8c:2b:a9:b5:05:c7:3f:2c:6a:9e:
91:ee:f7:07:a0:7b:a7:d1:2e:8f:ab:4f:b3:4a:5d:c5:1e:06:
d5:cc:ae:a6:1d:bb:3a:0f:e5:bd:f0:99:78:44:1b:fb:97:46:
bb:06:b6:f6:0e:ea:07:1e:0f:b9:2e:e5:4d:d1:08:10:bd:53:
61:01:8f:6d:eb:21:f5:31:09:b5:c3:97:2c:60:06:ec:0d:42:
5b:1c:b4:e3:9d:6e:58:7b:9f:ff:d0:bd:2f:bc:3a:29:60:20:
0f:a1:a1:48:d1:7e:71:57:0f:e0:39:ac:1a:b5:f3:80:4b:38:
61:9e:b4:fe:63:32:e5:ef:3b:7a:ea:aa:9a:26:70:8d:8a:41:
f1:ff:4a:97:a7:d7:b0:60:a7:26:6e:b4:2a:c4:5b:4d:19:ce:
aa:f1:3b:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyras/DauJoqbdBncr+iDoeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTkyZjQ1MTM3MmM3YTIwYjYyNGJjZmFhM2Q5NzUzOTI2
YzVjMTYwHhcNMjYwMzAxMjIwMDI5WhcNMjYwMzAyMjIwMDI5WjAzMTEwLwYDVQQD
EygwZDQxZjRhOTc3MjU5NzJiYTQwZTVmNmQzOTFmNzc1NmJiZjFmMmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S8BWLRS8W/NiPZDSf3jzHzTQwXa
5j1j4fp1gQia/3OuClS6BsWJEfGdubWq7t9hzbMla/TpOrgg4pTAOrrwYM0go2jD
CE7K1HIZ8unnCsf/JTKsv42yRcoi9fim4Gr6jj63mPGDsxrEv8bt1EduGqU6MDQi
U6ZqdpcYXw26a6g7hZLrwz3UZzeGV/7+gcFO4D5BZRE8e8XhC1rnnsLh4+xIj8xD
DK4m20We0xAmSOdI/UILsAW8HBDIcP8gGcrJljxT3FIDxskN4RNjEqAVzXbLyXbx
UcdMgLyj5bHmLuWL9FAou599lHXwtDAJfhtbRFUrMVQ12lEmkpc2U/+wXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1B9Kl3JZcrpA5fbTkfd1a78fLrMB8GA1UdIwQY
MBaAFBaZL0UTcseiC2JLz6o9l1OSbFwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBrdlJSTnl4NklMWWt2UHFqMlhVNUpzWEJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kMzMzYjAtMzE4YS00NmM4LTk3MjEt
M2VhYWJiMDMyNTc5LzEvRnBrdlJSTnl4NklMWWt2UHFqMlhVNUpzWEJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9kMzMzYjAtMzE4YS00NmM4LTk3MjEtM2VhYWJiMDMyNTc5
LzEvRnBrdlJSTnl4NklMWWt2UHFqMlhVNUpzWEJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhcfZ4RZ
/lT2/snz+nuPD4bqCB1onWjCH48oGLBBqO9cirawgAe1nsdXX0hOrkuL/1LXSu2j
onBd7bzTAzhraaZx89eHIr9HLPkaejcUPnbG6F21j5kqOAzvgGhVUsh0CdOMK6m1
Bcc/LGqeke73B6B7p9Euj6tPs0pdxR4G1cyuph27Og/lvfCZeEQb+5dGuwa29g7q
Bx4PuS7lTdEIEL1TYQGPbesh9TEJtcOXLGAG7A1CWxy0451uWHuf/9C9L7w6KWAg
D6GhSNF+cVcP4DmsGrXzgEs4YZ60/mMy5e87euqqmiZwjYpB8f9Kl6fXsGCnJm60
KsRbTRnOqvE7nw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:26:47 2026 by rpki-client