Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: TFjsb1Kd49mH8AyzkF0d6OAvinsveSiLPS6qmYwj0vM=
Subject key identifier: D5:E7:76:C4:4D:69:DD:E6:DB:72:AB:B2:15:3B:8B:38:29:90:BD:F9
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 019CAAFD79367B4E7A689A947FC377979EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 14F1
Signing time: Sun 01 Mar 2026 20:01:04 +0000
Manifest this update: Sun 01 Mar 2026 20:01:04 +0000
Manifest next update: Mon 02 Mar 2026 20:01:04 +0000
Files and hashes: 1: M81Qxbtts07Ib9z19i7shUVMtA8.roa (hash: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: Xc9QEX1bomNxV8ctN5cLiPR1Ue5cESUWTmGjN+OsA+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:79:36:7b:4e:7a:68:9a:94:7f:c3:77:97:9e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Mar 1 20:01:04 2026 GMT
Not After : Mar 2 20:01:04 2026 GMT
Subject: CN=d5e776c44d69dde6db72abb2153b8b382990bdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:0c:d3:49:1c:d6:28:1e:a8:40:34:6e:3e:
05:1d:e4:62:b8:af:89:ef:a6:77:de:f2:71:c2:34:
18:71:4f:99:7c:0a:d3:ba:e3:9c:48:89:30:22:c5:
bf:f6:35:d7:e7:74:9a:12:e4:64:6e:aa:69:d3:1f:
7c:2b:71:ea:02:bb:6d:74:28:79:10:c6:01:23:ff:
d3:c4:ee:39:94:2b:7d:92:ca:7b:d8:b2:d0:63:05:
7b:36:fa:a6:c3:db:61:1f:e4:f4:7a:b3:27:ad:80:
2a:1e:f1:7d:8d:50:8d:c1:5b:e6:b8:13:7f:0d:a7:
4e:4f:4d:14:7c:68:c9:60:29:e5:2d:b9:4a:6f:aa:
84:6c:a4:03:51:5a:ba:2b:f0:e2:75:2c:7e:22:f2:
d9:4f:a5:9c:fb:65:05:f8:4a:9f:0e:2b:e9:88:61:
89:9a:1f:d5:ab:1e:75:3b:f4:69:07:fc:83:a5:a6:
6a:6a:3c:bf:d6:18:f1:de:95:b4:5b:59:91:80:60:
83:3e:65:3e:41:c9:09:27:cb:4e:f4:d7:2a:c2:93:
ed:50:d0:03:80:3d:e1:70:57:cd:75:2d:8d:35:97:
5c:11:60:c4:e9:0e:a0:06:b8:f7:60:09:9b:a7:64:
46:f2:2f:90:f5:69:b6:13:0e:bc:bc:a6:79:10:d0:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E7:76:C4:4D:69:DD:E6:DB:72:AB:B2:15:3B:8B:38:29:90:BD:F9
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f8:87:d6:0f:05:a7:ff:d3:23:67:5a:18:35:ef:b0:ff:f8:
c1:b1:6a:36:70:62:79:93:1f:67:04:fd:41:86:1a:ed:ff:6d:
3f:1c:75:9c:67:5e:37:ac:80:f8:b4:00:a7:c0:65:3f:6c:de:
00:9e:b3:8c:5d:7a:d8:a5:f5:d1:36:be:02:44:c5:cf:1a:dc:
c2:56:37:5f:7b:84:8c:1c:ea:5b:f9:05:7e:e2:a1:00:a9:de:
e1:17:42:e9:4a:e9:23:90:74:ea:de:ba:bf:13:80:af:c4:97:
de:46:31:23:54:55:91:f1:1d:54:20:a5:c1:ca:87:13:c6:8d:
86:de:0a:54:5f:74:7c:7d:cf:65:1e:17:04:52:73:f0:cf:ed:
66:ee:e4:bb:63:2b:11:a7:e9:fc:a3:24:c5:93:28:2d:c5:ce:
12:84:01:b9:bb:d5:fa:d6:5c:f3:c8:aa:2b:ef:e0:1d:12:56:
ad:87:dc:d8:fa:e3:99:4c:b7:fb:92:f1:2f:59:c1:27:bf:64:
64:70:d4:20:59:c8:3e:b3:de:0b:d5:60:cb:28:35:4b:59:61:
bd:cf:ac:cd:8b:73:b4:2e:21:04:f0:09:55:9b:e6:e4:c2:9a:
06:d0:7d:bc:9a:7e:f7:22:cc:17:2f:9e:aa:22:a4:f5:5a:19:
9b:e5:d6:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Xk2e056aJqUf8N3l56hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjY2Q2ZGVjNjdiMDg4MmQxNWUzMjgyNTI2OTgwYTE2N2I0
MjA4YjcwHhcNMjYwMzAxMjAwMTA0WhcNMjYwMzAyMjAwMTA0WjAzMTEwLwYDVQQD
EyhkNWU3NzZjNDRkNjlkZGU2ZGI3MmFiYjIxNTNiOGIzODI5OTBiZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBkM00kc1igeqEA0bj4FHeRiuK+J
76Z33vJxwjQYcU+ZfArTuuOcSIkwIsW/9jXX53SaEuRkbqpp0x98K3HqArttdCh5
EMYBI//TxO45lCt9ksp72LLQYwV7Nvqmw9thH+T0erMnrYAqHvF9jVCNwVvmuBN/
DadOT00UfGjJYCnlLblKb6qEbKQDUVq6K/DidSx+IvLZT6Wc+2UF+EqfDivpiGGJ
mh/Vqx51O/RpB/yDpaZqajy/1hjx3pW0W1mRgGCDPmU+QckJJ8tO9NcqwpPtUNAD
gD3hcFfNdS2NNZdcEWDE6Q6gBrj3YAmbp2RG8i+Q9Wm2Ew68vKZ5ENDkwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXndsRNad3m23KrshU7izgpkL35MB8GA1UdIwQY
MBaAFHzNbexnsIgtFeMoJSaYChZ7Qgi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iNGNlOWEtNDg3Ny00MTU5LWJkODAt
YmVhY2IwOTRmODBjLzEvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iNGNlOWEtNDg3Ny00MTU5LWJkODAtYmVhY2IwOTRmODBj
LzEvZk0xdDdHZXdpQzBWNHlnbEpwZ0tGbnRDQ0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHviH1g8F
p//TI2daGDXvsP/4wbFqNnBieZMfZwT9QYYa7f9tPxx1nGdeN6yA+LQAp8BlP2ze
AJ6zjF162KX10Ta+AkTFzxrcwlY3X3uEjBzqW/kFfuKhAKne4RdC6UrpI5B06t66
vxOAr8SX3kYxI1RVkfEdVCClwcqHE8aNht4KVF90fH3PZR4XBFJz8M/tZu7ku2Mr
Eafp/KMkxZMoLcXOEoQBubvV+tZc88iqK+/gHRJWrYfc2PrjmUy3+5LxL1nBJ79k
ZHDUIFnIPrPeC9Vgyyg1S1lhvc+szYtztC4hBPAJVZvm5MKaBtB9vJp+9yLMFy+e
qiKk9VoZm+XWhA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:16 2026 by rpki-client