Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
File: fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft (raw, json)
Hash identifier: p58kzSGa+A2bSa+jRb3U7cDEL2YJ0h1cNEEmwJOygAs=
Subject key identifier: AB:FD:1E:B2:61:57:85:80:76:9F:4A:47:6A:DB:9D:9B:5C:94:33:52
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 019CABD9E0567EA38E4BBADFB491A484D200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
Manifest number: 1605
Signing time: Mon 02 Mar 2026 00:01:48 +0000
Manifest this update: Mon 02 Mar 2026 00:01:48 +0000
Manifest next update: Tue 03 Mar 2026 00:01:48 +0000
Files and hashes: 1: 6HTx2YeWwDr3S2VVILbwB2Jafj8.roa (hash: hsBw1ez3yUj6UmH6NZMF2hQl/djg3G8hjk0Okprj7r0=)
2: VqGEMx7_g1oCR5PMih3sF1ICV0I.roa (hash: 2XQimBCsGUGReAdNUI71pDg4FSroIYJhgCkB4L3gVZQ=)
3: fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl (hash: 56JgDGfjXDLCIvxk0nIXuYg0eBxH5+fwJi/yW8lXpIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e0:56:7e:a3:8e:4b:ba:df:b4:91:a4:84:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: Mar 2 00:01:48 2026 GMT
Not After : Mar 3 00:01:48 2026 GMT
Subject: CN=abfd1eb261578580769f4a476adb9d9b5c943352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:e6:b3:f1:42:f2:14:56:8f:56:60:2a:f4:
35:88:18:7c:37:43:81:bb:5f:9b:e9:ce:0d:31:85:
1e:f0:e8:be:f8:b4:3c:98:9a:1d:fd:43:b3:fa:66:
e1:5b:19:03:67:71:a5:1d:df:81:cb:3d:3e:f7:e8:
fc:e8:93:03:3c:8e:c6:ba:c0:7a:9b:7e:38:8f:b7:
06:83:44:b1:da:2a:3a:e8:25:7b:57:62:d4:c2:1c:
5e:38:e9:4d:5a:77:39:86:2a:3a:78:08:53:fe:4c:
75:06:ef:14:b5:c9:c4:58:a7:a0:62:12:a0:2d:a9:
92:d7:2b:b7:af:7a:e5:cf:c2:43:88:6e:96:be:03:
f7:df:f0:a2:d4:0f:4a:81:06:0f:72:62:c3:d0:37:
d1:e1:29:2f:ef:55:75:42:26:92:c3:0c:f0:3f:f3:
06:dc:ab:a2:cf:5f:60:04:e2:80:b8:25:1f:8e:90:
2c:27:59:4b:d5:3d:82:68:6d:42:95:78:6e:99:7a:
14:86:14:a2:27:0d:c7:d9:57:e0:55:fb:a6:68:99:
18:bd:b9:d0:57:89:4c:05:d2:da:f5:b7:c7:ff:d8:
b1:a5:2a:07:43:ed:d8:6e:f1:52:3a:6c:02:66:21:
5a:de:18:a0:77:9a:4f:09:15:a5:0d:2a:d2:18:17:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FD:1E:B2:61:57:85:80:76:9F:4A:47:6A:DB:9D:9B:5C:94:33:52
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b0:35:65:19:b1:e2:e8:03:d8:5f:4d:6a:47:ef:eb:41:22:
a9:a2:c4:a6:d7:38:b2:b3:5a:ac:8e:9f:9c:27:8f:c3:95:f0:
29:cd:a4:f5:73:ef:93:e4:b5:76:f6:c2:13:8d:41:bc:92:8b:
33:be:28:6c:b1:ff:34:79:e6:b2:ec:80:c5:e5:95:66:7a:d6:
5f:1f:8e:f3:b2:ba:4c:45:5f:26:2e:86:80:eb:ea:02:5f:61:
0b:8c:45:ea:2d:1c:38:9e:aa:69:69:fe:91:78:94:94:fc:5d:
ca:18:b3:22:5f:71:4c:e7:95:ae:c3:b7:37:ec:2c:f9:91:fb:
6c:f5:23:52:93:26:f2:51:db:37:1a:6c:25:b9:c8:d4:35:c9:
f3:98:5a:6a:a2:76:87:9c:b4:ae:58:d2:40:79:d4:b0:a3:dc:
09:7e:4e:03:2f:2a:8d:23:7e:2d:6b:97:df:81:18:c1:b4:d6:
e5:aa:5b:80:07:b0:8e:84:bf:b9:74:61:b3:86:3f:62:c4:02:
5c:1b:65:39:45:93:f0:11:b9:7a:b4:64:ae:b0:25:c5:22:c0:
d3:14:80:84:ce:7d:e9:bb:f7:e2:2a:fc:70:1d:62:1c:de:92:
76:e0:69:16:ea:ae:83:1e:fc:f0:5f:b8:cc:c7:22:dd:87:3f:
e8:06:e7:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2eBWfqOOS7rftJGkhNIAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkN2I0YmNhYmViMjk2MDVlYTUxMWRlOTczZTQ2NzVjNGI4
YTI5ZGYwHhcNMjYwMzAyMDAwMTQ4WhcNMjYwMzAzMDAwMTQ4WjAzMTEwLwYDVQQD
EyhhYmZkMWViMjYxNTc4NTgwNzY5ZjRhNDc2YWRiOWQ5YjVjOTQzMzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmILms/FC8hRWj1ZgKvQ1iBh8N0OB
u1+b6c4NMYUe8Oi++LQ8mJod/UOz+mbhWxkDZ3GlHd+Byz0+9+j86JMDPI7GusB6
m344j7cGg0Sx2io66CV7V2LUwhxeOOlNWnc5hio6eAhT/kx1Bu8UtcnEWKegYhKg
LamS1yu3r3rlz8JDiG6WvgP33/Ci1A9KgQYPcmLD0DfR4Skv71V1QiaSwwzwP/MG
3Kuiz19gBOKAuCUfjpAsJ1lL1T2CaG1ClXhumXoUhhSiJw3H2VfgVfumaJkYvbnQ
V4lMBdLa9bfH/9ixpSoHQ+3YbvFSOmwCZiFa3higd5pPCRWlDSrSGBcctwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKv9HrJhV4WAdp9KR2rbnZtclDNSMB8GA1UdIwQY
MBaAFH17S8q+spYF6lEd6XPkZ1xLiinfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGIt
NDQ3NjE3YTRhNzQ0LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGItNDQ3NjE3YTRhNzQ0
LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrA1ZRmx
4ugD2F9Nakfv60EiqaLEptc4srNarI6fnCePw5XwKc2k9XPvk+S1dvbCE41BvJKL
M74obLH/NHnmsuyAxeWVZnrWXx+O87K6TEVfJi6GgOvqAl9hC4xF6i0cOJ6qaWn+
kXiUlPxdyhizIl9xTOeVrsO3N+ws+ZH7bPUjUpMm8lHbNxpsJbnI1DXJ85haaqJ2
h5y0rljSQHnUsKPcCX5OAy8qjSN+LWuX34EYwbTW5apbgAewjoS/uXRhs4Y/YsQC
XBtlOUWT8BG5erRkrrAlxSLA0xSAhM596bv34ir8cB1iHN6SduBpFuqugx788F+4
zMci3Yc/6Abn8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:57 2026 by rpki-client