Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: 2wVUyuX0qgvj4nrxjfXqGDJ09nx6+Kr1J8HhQYyoz10=
Subject key identifier: E2:1A:A4:75:3B:23:7C:2C:7B:60:01:6D:52:8C:2F:53:0E:2F:1F:B7
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 019CAAFD64E4B531902B177744E2450DC951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 11BB
Signing time: Sun 01 Mar 2026 20:00:58 +0000
Manifest this update: Sun 01 Mar 2026 20:00:58 +0000
Manifest next update: Mon 02 Mar 2026 20:00:58 +0000
Files and hashes: 1: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: HqfStSriiAqQ+crAQlSIGoVntU/pyCm3mkHXhvdP0VI=)
2: ZYVhpFZbN06CUe59j1pMT24apfY.roa (hash: 9KVaBH7C5jrjUC4AJ6bt9vp9SMTJAC7tn9CsEVo1BYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:64:e4:b5:31:90:2b:17:77:44:e2:45:0d:c9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Mar 1 20:00:58 2026 GMT
Not After : Mar 2 20:00:58 2026 GMT
Subject: CN=e21aa4753b237c2c7b60016d528c2f530e2f1fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:d5:f7:c2:af:17:ea:73:30:5c:24:10:62:
32:df:52:51:5d:d1:00:c7:79:f6:f5:f1:a7:f3:ac:
4c:10:36:a2:d6:4b:f9:23:86:fc:1e:77:b4:4e:81:
45:36:4d:62:af:03:d0:b8:c9:ee:77:27:70:30:5c:
0e:92:88:15:58:2d:77:c2:d3:e1:fe:02:a0:3d:da:
8d:f1:6e:08:0d:95:87:22:ab:3d:86:25:38:83:18:
a2:f6:db:03:60:7e:98:2f:97:86:fb:bc:83:11:8e:
6e:83:69:d4:f7:16:b5:88:15:c6:f9:2b:47:44:7b:
e0:d1:5f:b5:fc:12:44:28:07:34:e6:78:15:1a:3d:
e7:78:f5:1a:e2:61:1c:3b:d5:3c:63:81:59:8a:3f:
f3:9c:4a:10:95:3b:45:da:a7:6a:e7:d3:36:85:8d:
d5:53:6a:4a:60:42:83:da:35:74:42:1b:22:85:ab:
de:95:b1:96:f1:a2:d5:ae:c1:5e:63:e2:4f:d9:ae:
e9:c2:0e:99:75:9e:64:48:e1:b4:8a:3b:dc:10:e9:
0e:5a:05:cf:51:62:8f:a1:76:71:61:71:46:17:bc:
d6:aa:f6:e1:19:7a:54:18:1d:53:81:7e:8e:cf:b7:
12:c2:6f:ba:f6:46:74:8b:f9:4d:f5:43:60:75:1f:
b6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:A4:75:3B:23:7C:2C:7B:60:01:6D:52:8C:2F:53:0E:2F:1F:B7
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a5:8f:ba:28:ac:67:b9:a8:bc:0a:77:2e:d5:54:7d:64:64:
68:8a:5c:95:17:e8:93:13:2e:b5:d6:67:89:ba:11:0f:53:1c:
56:8b:16:69:19:e5:7a:bb:84:31:e3:8d:9f:19:6f:d2:42:96:
ac:52:5e:00:7e:db:aa:ac:65:48:5f:d4:78:27:d3:49:cc:69:
68:3c:c9:ce:3d:31:4f:93:f2:e3:ef:37:de:79:43:67:55:ed:
6a:10:f6:d7:f9:8b:ef:a8:32:e6:91:1a:7a:fc:08:d5:fc:ff:
3d:22:d0:86:f5:8e:c1:8a:9b:24:34:1c:b7:53:fb:53:9b:0e:
a5:e9:cd:21:df:65:78:08:b3:3a:fd:49:99:84:f7:f3:d8:a5:
e4:26:8e:ac:71:d8:28:fe:13:23:df:66:6d:8f:fc:2c:20:df:
87:c9:a5:97:9a:3d:98:0c:77:a2:c7:7f:cd:fc:18:d5:78:57:
5d:fc:5d:11:37:c0:b8:83:b7:b4:0a:ad:71:92:6b:40:8a:73:
69:5a:55:a8:c2:27:30:54:aa:71:d4:a7:4b:01:a9:3b:0a:ae:
6c:56:73:ca:3b:8c:53:5b:ad:4f:0a:e3:77:f6:82:e8:2f:da:
c1:91:46:41:cb:6e:8f:6b:7e:8c:7d:78:7d:48:1f:9c:b5:4c:
9f:e7:ec:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/WTktTGQKxd3ROJFDclRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NGIzMTVhZTBmMjRjODkxZmNhMTg0NTZjNjY5MTc3OTJh
ZjE2NWUwHhcNMjYwMzAxMjAwMDU4WhcNMjYwMzAyMjAwMDU4WjAzMTEwLwYDVQQD
EyhlMjFhYTQ3NTNiMjM3YzJjN2I2MDAxNmQ1MjhjMmY1MzBlMmYxZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9PV98KvF+pzMFwkEGIy31JRXdEA
x3n29fGn86xMEDai1kv5I4b8Hne0ToFFNk1irwPQuMnudydwMFwOkogVWC13wtPh
/gKgPdqN8W4IDZWHIqs9hiU4gxii9tsDYH6YL5eG+7yDEY5ug2nU9xa1iBXG+StH
RHvg0V+1/BJEKAc05ngVGj3nePUa4mEcO9U8Y4FZij/znEoQlTtF2qdq59M2hY3V
U2pKYEKD2jV0QhsihavelbGW8aLVrsFeY+JP2a7pwg6ZdZ5kSOG0ijvcEOkOWgXP
UWKPoXZxYXFGF7zWqvbhGXpUGB1TgX6Oz7cSwm+69kZ0i/lN9UNgdR+2HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIapHU7I3wse2ABbVKML1MOLx+3MB8GA1UdIwQY
MBaAFBRLMVrg8kyJH8oYRWxmkXeSrxZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAt
MTE4MjhlMGU0MjdiLzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAtMTE4MjhlMGU0Mjdi
LzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6WPuiis
Z7movAp3LtVUfWRkaIpclRfokxMutdZniboRD1McVosWaRnleruEMeONnxlv0kKW
rFJeAH7bqqxlSF/UeCfTScxpaDzJzj0xT5Py4+833nlDZ1XtahD21/mL76gy5pEa
evwI1fz/PSLQhvWOwYqbJDQct1P7U5sOpenNId9leAizOv1JmYT389il5CaOrHHY
KP4TI99mbY/8LCDfh8mll5o9mAx3osd/zfwY1XhXXfxdETfAuIO3tAqtcZJrQIpz
aVpVqMInMFSqcdSnSwGpOwqubFZzyjuMU1utTwrjd/aC6C/awZFGQctuj2t+jH14
fUgfnLVMn+fseg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:17 2026 by rpki-client