Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: 2PmRyLjtLJo0VAJC0ABMD+6qgCh8+WKKCOP1lPCiLYY=
Subject key identifier: CD:5D:D8:56:95:2B:63:82:EE:54:97:52:1C:8B:F0:C2:EF:BD:55:EF
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 019CAD59C40E0E53A067D34754202AA77317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:01:07 +0000
Manifest this update: Mon 02 Mar 2026 07:01:07 +0000
Manifest next update: Tue 03 Mar 2026 07:01:07 +0000
Files and hashes: 1: Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa (hash: 6wCn2sStp7lMoBisyxoOVg7CQrVyP+8JEmZ6TdkNK6k=)
2: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: bsVWvzA2xnzAJfFVrP7Num+WkwAHAPlTgdyYV7snmnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:c4:0e:0e:53:a0:67:d3:47:54:20:2a:a7:73:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Mar 2 07:01:07 2026 GMT
Not After : Mar 3 07:01:07 2026 GMT
Subject: CN=cd5dd856952b6382ee5497521c8bf0c2efbd55ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:36:16:5c:0b:d2:38:25:87:41:43:0c:af:
55:a5:55:da:23:5f:d5:33:3f:4f:ff:e0:3c:0d:43:
ba:e8:1a:69:6c:a7:6f:40:18:a5:e9:18:7b:ea:e4:
b4:25:35:50:6e:80:ab:f6:1a:38:6c:e2:49:f2:c8:
c6:33:24:7f:f0:41:26:88:52:47:86:f8:d8:1d:70:
f0:59:a2:2e:b2:3d:20:e2:fa:b4:c1:50:e7:a4:97:
0e:d3:ac:d8:cc:bf:3c:7a:b5:c2:05:35:ca:d9:cd:
be:f5:6e:1c:66:c1:d7:d9:20:2b:aa:9c:8f:dc:3c:
15:58:00:b3:f0:23:a7:65:18:9d:3c:02:02:3b:02:
ab:c7:ab:cd:69:9a:92:c0:37:38:08:29:91:f9:d6:
18:c9:19:b3:2e:e5:a9:69:59:9c:30:ad:82:46:23:
4d:a6:b7:fb:29:4c:e1:48:9e:23:79:dc:14:b8:f9:
53:5c:ef:5b:db:8f:ee:c8:55:54:e1:47:87:c2:26:
6f:92:a9:ea:2d:42:29:93:bc:e9:88:8b:2f:e0:40:
f6:67:71:19:8b:ac:fe:d8:78:4c:f6:e9:a8:78:09:
aa:20:39:77:7b:2c:72:3e:87:08:62:12:1d:ab:00:
ae:ea:0f:05:7a:6e:3c:21:23:75:a2:69:9d:e9:03:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5D:D8:56:95:2B:63:82:EE:54:97:52:1C:8B:F0:C2:EF:BD:55:EF
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ad:68:0a:27:6d:b7:21:e6:a5:4b:77:ed:ae:82:c0:ea:df:
12:58:34:b1:cf:80:7a:f0:00:4f:7c:ee:69:63:b7:1f:f9:72:
e8:7a:44:3d:75:3c:1b:b7:09:7b:b4:f8:72:e8:20:82:7d:a7:
cc:3c:77:b9:eb:1a:0e:14:96:17:67:05:e5:67:cd:76:d7:01:
4b:20:39:61:42:d9:bc:08:d1:9b:36:42:8f:4f:ff:f7:c5:ab:
05:87:94:72:90:63:89:cf:15:43:b1:d9:22:ff:5c:87:0a:6a:
2e:32:c1:b8:2f:1e:a1:2f:5a:c0:67:ef:15:47:92:53:94:2a:
c9:44:60:13:18:6b:83:c7:ce:6d:e6:64:d3:8a:db:81:a4:65:
9c:41:86:36:52:9c:14:57:ef:3e:d0:5d:49:a5:15:7e:0e:d6:
f9:cd:f0:26:e5:44:f7:2a:bc:87:9c:ff:f9:58:ec:df:cf:22:
14:fc:4a:5c:7d:ee:d3:27:77:10:4a:90:39:53:92:fc:6f:66:
e5:d2:cc:64:ea:6b:6e:e1:3b:06:d9:e8:a0:bd:43:8c:9b:24:
ad:af:ba:11:d0:42:3a:5a:9a:f6:41:cd:bf:12:9c:61:3f:97:
96:7d:68:7e:33:52:f9:9b:2d:1e:d5:fc:bd:9c:98:31:62:93:
13:5f:0e:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWcQODlOgZ9NHVCAqp3MXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNzUwZDZmY2I4YTQwY2Q2NjFjZjczZDFhY2FiZDgzMDVl
ODc3ZmQwHhcNMjYwMzAyMDcwMTA3WhcNMjYwMzAzMDcwMTA3WjAzMTEwLwYDVQQD
EyhjZDVkZDg1Njk1MmI2MzgyZWU1NDk3NTIxYzhiZjBjMmVmYmQ1NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNY2FlwL0jglh0FDDK9VpVXaI1/V
Mz9P/+A8DUO66BppbKdvQBil6Rh76uS0JTVQboCr9ho4bOJJ8sjGMyR/8EEmiFJH
hvjYHXDwWaIusj0g4vq0wVDnpJcO06zYzL88erXCBTXK2c2+9W4cZsHX2SArqpyP
3DwVWACz8COnZRidPAICOwKrx6vNaZqSwDc4CCmR+dYYyRmzLuWpaVmcMK2CRiNN
prf7KUzhSJ4jedwUuPlTXO9b24/uyFVU4UeHwiZvkqnqLUIpk7zpiIsv4ED2Z3EZ
i6z+2HhM9umoeAmqIDl3eyxyPocIYhIdqwCu6g8Fem48ISN1ommd6QMUcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1d2FaVK2OC7lSXUhyL8MLvvVXvMB8GA1UdIwQY
MBaAFH51DW/LikDNZhz3PRrKvYMF6Hf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUt
YTJjNGMyMzFkZGY3LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUtYTJjNGMyMzFkZGY3
LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALq1oCidt
tyHmpUt37a6CwOrfElg0sc+AevAAT3zuaWO3H/ly6HpEPXU8G7cJe7T4cugggn2n
zDx3uesaDhSWF2cF5WfNdtcBSyA5YULZvAjRmzZCj0//98WrBYeUcpBjic8VQ7HZ
Iv9chwpqLjLBuC8eoS9awGfvFUeSU5QqyURgExhrg8fObeZk04rbgaRlnEGGNlKc
FFfvPtBdSaUVfg7W+c3wJuVE9yq8h5z/+Vjs388iFPxKXH3u0yd3EEqQOVOS/G9m
5dLMZOprbuE7BtnooL1DjJskra+6EdBCOlqa9kHNvxKcYT+Xln1ofjNS+ZstHtX8
vZyYMWKTE18O+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:57 2026 by rpki-client