Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: Q1HAp5M38HC8qNiUnSicLC+807ug+aDTaApG/j+TDak=
Subject key identifier: 08:F9:B4:6F:97:B0:52:AA:7E:70:4D:77:C7:55:72:A4:F8:A7:4F:1E
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 019CAD22DB99886FCCC87F91DD45F9C1C93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 1120
Signing time: Mon 02 Mar 2026 06:01:08 +0000
Manifest this update: Mon 02 Mar 2026 06:01:08 +0000
Manifest next update: Tue 03 Mar 2026 06:01:08 +0000
Files and hashes: 1: MSIj_pvmmWV611TPzznzhVyMajg.roa (hash: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: w2vYHIXU0iZrKZE/PWcnNo+iBT8HkwMe9Ht0KKTW7ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:db:99:88:6f:cc:c8:7f:91:dd:45:f9:c1:c9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Mar 2 06:01:08 2026 GMT
Not After : Mar 3 06:01:08 2026 GMT
Subject: CN=08f9b46f97b052aa7e704d77c75572a4f8a74f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bb:3e:92:e5:1e:19:7c:42:b9:d3:21:e4:31:
8d:33:0c:8c:46:7a:ee:ab:ad:cd:ef:47:a6:38:c7:
29:9a:19:38:ea:0e:8b:e1:7d:5c:3a:41:a6:2b:43:
7c:0b:b7:85:73:c7:4e:d3:70:75:8d:c0:45:4a:6a:
58:dc:25:e5:9e:f1:72:24:c0:5d:53:bd:bd:ce:cb:
e1:86:31:41:49:e9:58:54:95:6b:ae:8a:c0:44:be:
96:0c:dc:59:d7:15:1c:fc:50:05:97:99:c4:c7:c5:
46:2a:ca:91:e2:37:e5:1e:9c:1e:8c:7d:0a:0d:ce:
48:b0:b3:9d:97:13:25:b8:cc:44:af:78:4c:4c:85:
29:65:cd:e9:be:ee:3a:92:8c:af:7b:1c:ca:97:d9:
84:61:7d:1c:76:0e:50:83:cf:46:81:6e:48:1c:08:
c8:f5:01:d5:24:0d:57:df:c9:32:af:b1:54:90:4e:
a5:d5:aa:19:48:77:75:e1:7e:07:3d:d8:65:5a:a6:
54:b5:f8:24:fc:39:9d:c6:66:38:21:ce:d7:2a:fe:
6c:0c:a4:5d:9a:58:7f:6a:dd:02:55:52:51:3e:dd:
76:b3:92:d3:0c:a2:bf:a5:15:4f:bb:77:0d:d1:56:
52:62:7a:87:b4:58:a0:07:bc:65:a3:32:c2:38:ee:
11:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F9:B4:6F:97:B0:52:AA:7E:70:4D:77:C7:55:72:A4:F8:A7:4F:1E
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:14:a8:f7:b1:3f:fb:1e:00:3d:de:2d:ed:3c:a6:73:86:31:
20:e4:42:27:d0:07:af:b6:13:3d:70:79:23:3d:74:39:93:96:
71:ad:a0:97:35:14:0f:bb:34:8a:b6:c3:34:fc:ba:16:06:7c:
58:9a:15:4e:a4:2a:de:03:c7:cb:36:cf:dd:e7:ea:17:73:f6:
90:75:e3:82:93:56:e7:5a:f3:10:2b:7d:d9:ce:b3:b4:c4:b3:
45:0f:2b:b5:46:2b:73:f8:6e:a9:6e:16:8c:e9:ee:2a:bd:3f:
c9:13:81:34:04:37:36:35:38:ac:5c:85:e3:0b:fd:65:f4:a8:
a7:4d:d8:51:47:2e:3e:21:08:99:35:68:3c:cc:2a:31:11:e0:
7f:42:77:e9:e4:3e:e9:29:09:de:3a:81:69:8d:0e:b6:d3:5b:
6a:2b:44:a0:e6:ef:ed:0f:4c:a9:cd:6c:09:e4:d1:3b:bd:32:
c9:44:42:cb:e6:f0:6f:ad:39:d3:83:6d:fc:32:d4:f7:b5:ee:
63:ee:4a:f8:a1:42:60:b8:d7:58:b9:a3:dc:1e:29:0b:87:47:
86:50:ef:15:86:15:05:8e:21:6d:c5:c1:cd:1a:cf:92:27:01:
d5:75:5b:42:e2:18:5d:7b:02:56:fa:1f:17:54:d9:96:c8:c7:
16:4c:20:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytItuZiG/MyH+R3UX5wck/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjZkMTllNTM4OGYxMmMxZDI4YTE2YzMyOGQ4NmMzNjRl
OWNjNzkwHhcNMjYwMzAyMDYwMTA4WhcNMjYwMzAzMDYwMTA4WjAzMTEwLwYDVQQD
EygwOGY5YjQ2Zjk3YjA1MmFhN2U3MDRkNzdjNzU1NzJhNGY4YTc0ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rs+kuUeGXxCudMh5DGNMwyMRnru
q63N70emOMcpmhk46g6L4X1cOkGmK0N8C7eFc8dO03B1jcBFSmpY3CXlnvFyJMBd
U729zsvhhjFBSelYVJVrrorARL6WDNxZ1xUc/FAFl5nEx8VGKsqR4jflHpwejH0K
Dc5IsLOdlxMluMxEr3hMTIUpZc3pvu46koyvexzKl9mEYX0cdg5Qg89GgW5IHAjI
9QHVJA1X38kyr7FUkE6l1aoZSHd14X4HPdhlWqZUtfgk/DmdxmY4Ic7XKv5sDKRd
mlh/at0CVVJRPt12s5LTDKK/pRVPu3cN0VZSYnqHtFigB7xlozLCOO4RwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAj5tG+XsFKqfnBNd8dVcqT4p08eMB8GA1UdIwQY
MBaAFH1m0Z5TiPEsHSihbDKNhsNk6cx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQt
ZjBkMDc1YTQzN2YxLzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQtZjBkMDc1YTQzN2Yx
LzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBSo97E/
+x4APd4t7Tymc4YxIORCJ9AHr7YTPXB5Iz10OZOWca2glzUUD7s0irbDNPy6FgZ8
WJoVTqQq3gPHyzbP3efqF3P2kHXjgpNW51rzECt92c6ztMSzRQ8rtUYrc/huqW4W
jOnuKr0/yROBNAQ3NjU4rFyF4wv9ZfSop03YUUcuPiEImTVoPMwqMRHgf0J36eQ+
6SkJ3jqBaY0OttNbaitEoObv7Q9Mqc1sCeTRO70yyURCy+bwb60504Nt/DLU97Xu
Y+5K+KFCYLjXWLmj3B4pC4dHhlDvFYYVBY4hbcXBzRrPkicB1XVbQuIYXXsCVvof
F1TZlsjHFkwg8g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:19 2026 by rpki-client