Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json)
Hash identifier: 3mg0hLxlb5XZUPJmNkX+tLqXSXdkKeSZVeRv9x/MjGU=
Subject key identifier: C9:D1:9C:49:08:50:1A:E7:85:58:FB:AA:A0:A7:31:AD:F4:E6:BE:A4
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 019CACB55D5948F30701B3B5D5A883020A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
Manifest number: 0FE4
Signing time: Mon 02 Mar 2026 04:01:32 +0000
Manifest this update: Mon 02 Mar 2026 04:01:32 +0000
Manifest next update: Tue 03 Mar 2026 04:01:32 +0000
Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: 0gHlWULGkS/6oQGbFJXTkwLccwV9sWwfCumX7VJhats=)
2: tauHtMalszupNYYuBs8Guj0KLFg.roa (hash: gc2v8u+MqnwJxcknut+JafkulUVpld8Kb67/cVdhhLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:5d:59:48:f3:07:01:b3:b5:d5:a8:83:02:0a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Mar 2 04:01:32 2026 GMT
Not After : Mar 3 04:01:32 2026 GMT
Subject: CN=c9d19c4908501ae78558fbaaa0a731adf4e6bea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:32:59:7d:d4:3c:50:bd:11:39:b3:9e:a8:
9f:a4:fe:e0:e2:1f:f2:07:d6:b7:41:a7:ae:17:68:
e3:a1:0f:cd:63:d8:bb:92:e5:ae:dd:c8:49:f7:fc:
04:ea:10:cb:9c:39:e9:fb:2a:d1:f5:6f:42:9b:fa:
eb:cf:9c:57:61:1d:ad:cb:67:c8:40:0f:fe:84:82:
ce:a7:8d:63:8c:da:f6:46:c6:1e:fe:ab:f2:52:c5:
12:2b:52:5a:e7:24:bf:56:05:a3:b6:52:db:7f:40:
ea:63:ea:e6:76:60:f5:3b:05:72:e0:ea:a3:a4:5b:
cb:db:1b:b1:54:73:cf:dd:52:4f:12:01:e6:b1:12:
8d:73:bb:22:88:a9:22:b5:ca:3a:b7:ba:2c:f5:a6:
d1:e1:d8:97:5f:70:1f:e9:20:ef:e0:3c:93:fd:e0:
31:05:7c:25:cf:bc:30:33:f8:f3:e0:b2:28:f8:13:
85:ee:dd:9f:96:cb:dd:de:e9:75:ff:4d:d2:b9:a0:
78:fd:95:1a:50:32:65:01:89:e8:9b:26:12:a8:c5:
f5:e5:68:9c:54:4d:74:9c:9b:9a:49:a7:92:74:b2:
6c:58:dc:f7:23:9d:b1:db:5f:84:38:39:7f:b6:a3:
36:c4:3f:12:47:93:10:f1:8c:18:66:dd:77:e8:0d:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D1:9C:49:08:50:1A:E7:85:58:FB:AA:A0:A7:31:AD:F4:E6:BE:A4
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:47:e5:f8:39:61:4a:14:f8:d0:a8:9e:8e:75:9c:34:14:6a:
a7:ea:c8:57:ee:e9:f3:19:14:f5:12:12:77:df:26:4d:83:e4:
75:cc:2b:48:2d:b1:25:a3:ec:e0:cc:47:9b:fb:2a:e5:3a:7b:
91:58:7b:49:cb:4d:6e:3a:1e:71:62:21:ed:50:c0:24:04:df:
67:cb:db:2f:d4:bf:2b:8c:f5:71:33:3e:23:33:cf:3a:be:a9:
f9:86:87:64:50:a8:61:fb:3a:b6:d6:9a:d0:d1:c8:ea:64:e1:
0f:70:22:4b:6a:2d:b3:9e:45:a3:bf:41:03:5b:ee:72:46:59:
42:66:e2:ec:54:d4:17:16:06:0e:11:b6:8b:86:42:ca:88:fd:
8b:c4:94:c8:f9:2e:f2:e0:fd:80:79:a9:13:6b:e1:1c:f2:df:
f7:8d:ec:76:cf:fc:e8:57:45:86:b1:26:71:a2:69:11:01:4c:
35:d2:b7:15:cd:cf:29:13:9b:0d:c0:d3:f8:e8:27:02:fe:4f:
6d:d1:6c:1f:90:ec:9f:4e:87:ce:d7:5a:af:5d:95:c1:62:70:
f2:a8:64:50:6c:b9:0c:74:61:b1:82:e1:1f:9d:7f:d0:bf:e7:
da:0b:63:64:86:aa:ac:28:43:dc:5d:16:10:88:40:c2:5a:2d:
24:e8:73:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystV1ZSPMHAbO11aiDAgp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNDJkMjdjMjFkYTg2YzdlOWZiZjQ0YWUwZTU2Yzk4ZjNk
MmY4MGIwHhcNMjYwMzAyMDQwMTMyWhcNMjYwMzAzMDQwMTMyWjAzMTEwLwYDVQQD
EyhjOWQxOWM0OTA4NTAxYWU3ODU1OGZiYWFhMGE3MzFhZGY0ZTZiZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgMyWX3UPFC9ETmznqifpP7g4h/y
B9a3QaeuF2jjoQ/NY9i7kuWu3chJ9/wE6hDLnDnp+yrR9W9Cm/rrz5xXYR2ty2fI
QA/+hILOp41jjNr2RsYe/qvyUsUSK1Ja5yS/VgWjtlLbf0DqY+rmdmD1OwVy4Oqj
pFvL2xuxVHPP3VJPEgHmsRKNc7siiKkitco6t7os9abR4diXX3Af6SDv4DyT/eAx
BXwlz7wwM/jz4LIo+BOF7t2flsvd3ul1/03SuaB4/ZUaUDJlAYnomyYSqMX15Wic
VE10nJuaSaeSdLJsWNz3I52x21+EODl/tqM2xD8SR5MQ8YwYZt136A0f5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnRnEkIUBrnhVj7qqCnMa305r6kMB8GA1UdIwQY
MBaAFH9C0nwh2obH6fv0SuDlbJjz0vgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTkt
MGFmYjdjM2ZiZjMwLzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTktMGFmYjdjM2ZiZjMw
LzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEfl+Dlh
ShT40KiejnWcNBRqp+rIV+7p8xkU9RISd98mTYPkdcwrSC2xJaPs4MxHm/sq5Tp7
kVh7SctNbjoecWIh7VDAJATfZ8vbL9S/K4z1cTM+IzPPOr6p+YaHZFCoYfs6ttaa
0NHI6mThD3AiS2ots55Fo79BA1vuckZZQmbi7FTUFxYGDhG2i4ZCyoj9i8SUyPku
8uD9gHmpE2vhHPLf943sds/86FdFhrEmcaJpEQFMNdK3Fc3PKRObDcDT+OgnAv5P
bdFsH5Dsn06Hztdar12VwWJw8qhkUGy5DHRhsYLhH51/0L/n2gtjZIaqrChD3F0W
EIhAwlotJOhzPg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:18 2026 by rpki-client