Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: kToGMMNykc+DRCYxLD+w4ATFOWUDaNRkL9U/J5P5jzg=
Subject key identifier: 9D:51:64:08:40:15:31:76:CC:94:C5:39:2D:EF:B9:47:8A:DA:D9:DC
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 019CAB345D9C2E4A572036F1ACFD248507A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 1527
Signing time: Sun 01 Mar 2026 21:01:01 +0000
Manifest this update: Sun 01 Mar 2026 21:01:01 +0000
Manifest next update: Mon 02 Mar 2026 21:01:01 +0000
Files and hashes: 1: N611FyyDWK9ug4tcbq7YvkQysOc.roa (hash: cBgwqk8mDKhuXD2KmuvuFfz0Mfhld+DUNOT4u8hWcPE=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: 1aVjYnAL2uHaONh3Zz+iQ0HvmImRZxrNHpXcpu0eQlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5d:9c:2e:4a:57:20:36:f1:ac:fd:24:85:07:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Mar 1 21:01:01 2026 GMT
Not After : Mar 2 21:01:01 2026 GMT
Subject: CN=9d51640840153176cc94c5392defb9478adad9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:07:88:d5:ce:cb:ef:98:b5:37:7f:c7:d5:
ac:9c:9b:44:11:44:ec:f6:22:c1:24:f1:4d:27:52:
e7:95:61:fe:db:76:73:af:87:68:9d:5a:be:3b:10:
84:2b:c7:cd:01:91:aa:36:6f:6a:3b:bf:14:53:9d:
6c:2c:ac:96:3c:e3:f9:e3:cf:86:68:5a:86:3f:ff:
f0:d2:e1:e6:12:1d:8c:45:9f:8a:ef:12:24:c7:12:
60:1d:77:b9:03:9c:0a:f0:e0:bb:b8:a6:3e:8e:62:
cc:78:6b:e6:40:43:19:b2:2d:5e:e1:96:8c:04:ac:
56:4b:f0:60:04:87:a6:ba:cf:50:ef:54:05:0d:8b:
89:71:4c:00:76:e6:0f:96:5f:da:a5:1d:a9:8a:d0:
80:67:61:44:ea:38:5c:91:b8:66:cf:33:6f:f5:0c:
8d:87:84:d0:82:bf:c8:fb:69:42:54:af:56:86:02:
13:2d:ed:44:3f:41:79:a7:2e:94:de:64:81:75:e8:
cc:5c:13:85:9c:19:d7:31:8b:c1:b3:5b:51:6a:8c:
09:9e:2d:4d:7e:2a:db:75:2a:1a:1f:a7:e0:6b:86:
53:98:a1:e8:be:70:2f:21:1d:11:4e:77:9c:00:f2:
e6:d3:d2:fe:57:1e:d1:5d:c4:dc:fc:8c:a9:ec:42:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:51:64:08:40:15:31:76:CC:94:C5:39:2D:EF:B9:47:8A:DA:D9:DC
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:77:e3:f0:dd:f5:1b:f0:79:bf:68:94:ee:7f:f4:18:73:72:
c6:b8:d5:66:ef:2c:10:7f:13:9f:62:02:da:1f:54:5d:2b:77:
54:bf:36:03:bb:dd:3a:29:fa:2a:0c:67:67:ec:7c:44:b0:e3:
f1:6f:13:b0:8f:25:0c:b1:6f:cd:21:ab:b3:19:b8:d5:d1:1d:
c6:79:aa:4e:0f:54:d9:7a:3f:32:a3:8c:7a:3f:d9:03:7a:52:
12:5f:07:43:52:13:4e:a1:40:a3:05:6a:da:4b:0a:1d:f8:25:
c3:a8:c5:09:48:1d:bb:39:20:99:a6:39:d8:dc:32:f2:78:fe:
f4:3a:59:3b:83:59:28:d7:e0:6b:18:d0:90:86:5d:78:a9:d9:
05:2f:18:83:5f:1c:98:c6:ec:ea:50:30:42:d8:a0:be:1d:c0:
77:1e:3f:97:c8:bb:16:0b:47:63:03:58:1a:c3:8d:a7:2a:c3:
89:c6:b7:c5:7f:00:38:e0:45:dd:58:5f:69:5c:71:6a:58:db:
b4:9e:45:ff:9a:a2:53:13:2b:65:75:79:71:77:32:72:09:cb:
23:66:a1:42:39:c0:14:a8:2c:d1:67:0c:88:8f:a4:7d:09:7e:
06:db:17:06:37:cd:2d:29:c4:94:c0:cd:cc:27:79:a9:95:4f:
10:2a:21:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNF2cLkpXIDbxrP0khQehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNmRjNzM5NTgxNWFmMDQ1MDQ4ZjRjZTM5MTBkMDQwMDhm
ZjNhN2MwHhcNMjYwMzAxMjEwMTAxWhcNMjYwMzAyMjEwMTAxWjAzMTEwLwYDVQQD
Eyg5ZDUxNjQwODQwMTUzMTc2Y2M5NGM1MzkyZGVmYjk0NzhhZGFkOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4EHiNXOy++YtTd/x9WsnJtEEUTs
9iLBJPFNJ1LnlWH+23Zzr4donVq+OxCEK8fNAZGqNm9qO78UU51sLKyWPOP548+G
aFqGP//w0uHmEh2MRZ+K7xIkxxJgHXe5A5wK8OC7uKY+jmLMeGvmQEMZsi1e4ZaM
BKxWS/BgBIemus9Q71QFDYuJcUwAduYPll/apR2pitCAZ2FE6jhckbhmzzNv9QyN
h4TQgr/I+2lCVK9WhgITLe1EP0F5py6U3mSBdejMXBOFnBnXMYvBs1tRaowJni1N
firbdSoaH6fga4ZTmKHovnAvIR0RTnecAPLm09L+Vx7RXcTc/Iyp7EKOvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1RZAhAFTF2zJTFOS3vuUeK2tncMB8GA1UdIwQY
MBaAFHxtxzlYFa8EUEj0zjkQ0EAI/zp8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkczSE9WZ1Zyd1JRU1BUT09SRFFRQWpfT253LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NDY4N2YtZWZhNS00NjIwLTg2MTkt
MzE1NWJhOGNiNzRmLzEvZkczSE9WZ1Zyd1JRU1BUT09SRFFRQWpfT253Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81NDY4N2YtZWZhNS00NjIwLTg2MTktMzE1NWJhOGNiNzRm
LzEvZkczSE9WZ1Zyd1JRU1BUT09SRFFRQWpfT253LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXfj8N31
G/B5v2iU7n/0GHNyxrjVZu8sEH8Tn2IC2h9UXSt3VL82A7vdOin6KgxnZ+x8RLDj
8W8TsI8lDLFvzSGrsxm41dEdxnmqTg9U2Xo/MqOMej/ZA3pSEl8HQ1ITTqFAowVq
2ksKHfglw6jFCUgduzkgmaY52Nwy8nj+9DpZO4NZKNfgaxjQkIZdeKnZBS8Yg18c
mMbs6lAwQtigvh3Adx4/l8i7FgtHYwNYGsONpyrDica3xX8AOOBF3VhfaVxxaljb
tJ5F/5qiUxMrZXV5cXcycgnLI2ahQjnAFKgs0WcMiI+kfQl+BtsXBjfNLSnElMDN
zCd5qZVPECohRQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:46 2026 by rpki-client