Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
File: fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft (raw, json)
Hash identifier: h2n6jVb8kItj02pUTKVLucCQoZTZtTjchdIbtiY/Xw8=
Subject key identifier: 3B:BF:87:55:18:13:25:39:4A:FF:2A:78:1B:5F:51:2A:84:87:BE:F1
Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
Certificate issuer: /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Certificate serial: 019CA97D17E0CC0A2BCE7231A074DA42FB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
Manifest number: 6D
Signing time: Sun 01 Mar 2026 13:01:13 +0000
Manifest this update: Sun 01 Mar 2026 13:01:13 +0000
Manifest next update: Mon 02 Mar 2026 13:01:13 +0000
Files and hashes: 1: F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa (hash: O9ss77MomSSt907FsLWzdFo2wbDsc9Vaw/c7NY0bUPI=)
2: Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa (hash: kAeb16gDeMymOsy5vSRtUWw4R89UmFmfcQyy8hoRkQs=)
3: a6ILxs7AfRiz-iaAF-l64QD3g3c.asa (hash: 7o07rC7UvT5It+u+RtYxdmApc9D4ts/fYHhAKB3o4vs=)
4: fl-aO37XXQmTdf9bFQvR4sML3I8.asa (hash: 095zE2TxY8ZX1/zGISHc5yzKNCHD1HSK1z5BPh0SZNU=)
5: fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl (hash: Zh/qvnXk5Z/pXleMSxQQ+iaQVEhpYDAKhtu9yqHJC9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:17:e0:cc:0a:2b:ce:72:31:a0:74:da:42:fb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Validity
Not Before: Mar 1 13:01:13 2026 GMT
Not After : Mar 2 13:01:13 2026 GMT
Subject: CN=3bbf8755181325394aff2a781b5f512a8487bef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:02:19:89:f6:ef:43:27:d5:54:75:a1:63:
60:f4:e6:99:07:e6:76:f1:3b:4b:fa:23:8c:89:c0:
85:52:15:28:bb:68:a2:ee:64:97:2e:d6:c7:65:05:
39:20:34:7a:ee:7c:84:bb:48:50:81:82:0b:13:74:
9a:68:40:28:65:56:73:5b:71:32:8e:fc:a1:cc:9c:
8e:f4:1c:ab:cd:c8:2e:a2:08:a3:6e:ec:13:37:ff:
8d:4c:2f:a0:bd:f4:f8:aa:ea:a0:20:76:b4:25:15:
34:56:c5:02:9c:bf:48:fa:cc:66:95:86:9c:1d:5f:
08:b7:79:43:0c:c7:59:2a:6d:5e:ae:1c:dd:a4:97:
58:7c:69:99:04:bb:a7:27:80:e6:67:15:22:9c:0f:
04:3a:01:44:2e:39:f3:49:da:c7:61:2b:66:8e:5d:
64:69:a6:bb:b9:1d:4f:79:64:45:e7:f5:4c:67:66:
27:03:0e:be:ff:9a:9c:fe:11:95:4b:9d:8b:2b:14:
7d:50:74:d8:9f:1b:51:9c:8a:fa:7e:f0:72:e6:b1:
23:b6:e2:fe:6e:35:39:0a:86:7b:13:13:a4:8d:e5:
1e:08:af:e2:c5:b5:41:6d:50:b1:1f:6a:e2:65:69:
b9:5f:13:11:f4:f8:f4:3d:22:86:77:97:1a:c4:e0:
f6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BF:87:55:18:13:25:39:4A:FF:2A:78:1B:5F:51:2A:84:87:BE:F1
X509v3 Authority Key Identifier:
keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d8:e3:40:e1:5e:e7:e0:6d:f5:ef:10:94:1d:dd:28:72:5a:
7c:7f:1f:35:9a:4d:1b:ee:1f:62:ce:1f:f2:00:9e:74:cd:27:
1e:fd:28:e7:b0:8d:46:ce:45:db:8b:0e:00:39:86:8d:78:8b:
e0:8e:a3:bb:e9:0b:a8:ad:51:8d:f0:b8:f5:f2:27:69:ef:ff:
73:31:77:49:f5:db:cf:21:d4:ae:3f:25:ec:4c:5b:47:72:05:
a1:8f:a9:63:06:bd:71:a4:7f:e9:da:7c:18:32:1c:04:1b:76:
f1:0e:9e:10:d4:95:d9:a5:04:86:55:dd:6e:76:43:52:aa:b7:
1a:ea:f8:51:44:cb:6b:81:ab:05:e4:b7:18:99:0e:de:8c:24:
48:be:11:ba:95:e9:23:10:37:56:71:2e:1b:a9:45:71:ef:5f:
eb:20:ac:d1:51:19:51:ef:f0:38:83:eb:d7:5b:33:ba:d6:9e:
1f:7a:9a:ba:cf:d5:02:1d:ff:4c:ec:b2:75:21:69:81:bf:e4:
9c:0d:12:bc:2d:35:9e:ad:28:fc:dc:aa:80:61:aa:ff:d1:16:
45:f0:f4:4b:87:dd:92:d3:6e:c2:3d:c0:28:29:f4:94:f3:a9:
02:8b:bf:1e:da:17:1a:df:60:10:7f:06:2a:fd:e5:d2:8f:00:
75:57:1c:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypfRfgzAorznIxoHTaQvuIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOGUwOTcyNGY0NzJlNzY2ODljNjFkY2E2MGE3YzY0MWYy
YWM4ZjkwHhcNMjYwMzAxMTMwMTEzWhcNMjYwMzAyMTMwMTEzWjAzMTEwLwYDVQQD
EygzYmJmODc1NTE4MTMyNTM5NGFmZjJhNzgxYjVmNTEyYTg0ODdiZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl64CGYn270Mn1VR1oWNg9OaZB+Z2
8TtL+iOMicCFUhUou2ii7mSXLtbHZQU5IDR67nyEu0hQgYILE3SaaEAoZVZzW3Ey
jvyhzJyO9ByrzcguogijbuwTN/+NTC+gvfT4quqgIHa0JRU0VsUCnL9I+sxmlYac
HV8It3lDDMdZKm1erhzdpJdYfGmZBLunJ4DmZxUinA8EOgFELjnzSdrHYStmjl1k
aaa7uR1PeWRF5/VMZ2YnAw6+/5qc/hGVS52LKxR9UHTYnxtRnIr6fvBy5rEjtuL+
bjU5CoZ7ExOkjeUeCK/ixbVBbVCxH2riZWm5XxMR9Pj0PSKGd5caxOD24QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu/h1UYEyU5Sv8qeBtfUSqEh77xMB8GA1UdIwQY
MBaAFH6OCXJPRy52aJxh3KYKfGQfKsj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGMyN2MtNzkzNy00NTYwLWJlMjIt
ZGNiNWZiMzNjMTc4LzEvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kZGMyN2MtNzkzNy00NTYwLWJlMjItZGNiNWZiMzNjMTc4
LzEvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdjjQOFe
5+Bt9e8QlB3dKHJafH8fNZpNG+4fYs4f8gCedM0nHv0o57CNRs5F24sOADmGjXiL
4I6ju+kLqK1RjfC49fInae//czF3SfXbzyHUrj8l7ExbR3IFoY+pYwa9caR/6dp8
GDIcBBt28Q6eENSV2aUEhlXdbnZDUqq3Gur4UUTLa4GrBeS3GJkO3owkSL4RupXp
IxA3VnEuG6lFce9f6yCs0VEZUe/wOIPr11szutaeH3qaus/VAh3/TOyydSFpgb/k
nA0SvC01nq0o/NyqgGGq/9EWRfD0S4fdktNuwj3AKCn0lPOpAou/HtoXGt9gEH8G
Kv3l0o8AdVccZw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:46 2026 by rpki-client