Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
File: f8lWpStzUEpPH_NFRxmSl6f13p0.mft (raw, json)
Hash identifier: 8+k2RRu2CpduLM2KPB11pkgZvDZCNRnKCF0k0w8m1V0=
Subject key identifier: C4:C7:12:42:1C:96:CA:D8:F9:46:94:88:DE:4A:73:91:60:9C:B5:3F
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Certificate issuer: /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial: 019DA41CF2A8DBBB8183A9C1C399AAC71316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
Manifest number: 0C7A
Signing time: Sun 19 Apr 2026 05:00:53 +0000
Manifest this update: Sun 19 Apr 2026 05:00:53 +0000
Manifest next update: Mon 20 Apr 2026 05:00:53 +0000
Files and hashes: 1: UJVP39MP0a98z-vs1ITaLznv-Ng.roa (hash: VF6p8kiAtBBS2svfl/i9xWe417imO3ZaV515/+Pjex8=)
2: f8lWpStzUEpPH_NFRxmSl6f13p0.crl (hash: 4xw1hx/X4qMcITNYrvaxWC029BsOn7vTVBvH5XwozYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:f2:a8:db:bb:81:83:a9:c1:c3:99:aa:c7:13:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Validity
Not Before: Apr 19 05:00:53 2026 GMT
Not After : Apr 20 05:00:53 2026 GMT
Subject: CN=c4c712421c96cad8f9469488de4a7391609cb53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5c:4b:8b:eb:b6:f7:94:39:08:b0:73:10:1a:
36:7e:4a:12:49:bb:28:f9:85:84:3e:55:18:74:56:
65:0b:fe:43:96:94:e5:6c:ca:9f:d7:bb:75:09:30:
68:0a:5c:39:c9:d9:67:c4:8a:c4:43:78:9f:bd:59:
e7:82:00:ca:6f:e5:64:28:f5:80:ee:27:11:0d:7c:
d9:34:6d:80:fa:74:19:5e:8b:42:e5:50:de:70:a6:
49:1f:d4:9f:a8:7f:6a:be:b9:35:be:d1:1d:59:c5:
2f:71:d6:58:a1:70:2f:26:7b:46:1a:48:61:ec:79:
da:5b:44:bd:b8:3c:a1:b4:82:fe:8a:03:36:f2:5f:
ed:cd:79:b9:a5:ed:c3:4e:1a:10:26:56:89:f9:f1:
a2:aa:f3:36:9e:36:a4:6b:a8:e5:2f:30:f9:c7:98:
ba:aa:43:36:11:55:c0:c3:9a:0b:3b:3e:d5:af:f7:
8c:93:a9:51:2d:bc:f7:2e:8f:07:ce:e2:e5:25:0f:
32:bd:d8:f7:11:77:76:17:78:71:8c:a9:e5:b4:79:
86:33:e4:76:93:af:eb:0f:cf:47:59:59:35:63:d1:
41:39:18:43:5b:6d:d7:3e:a1:b3:9f:52:cb:4b:b2:
f2:80:f3:82:79:6a:11:41:53:48:7a:42:94:32:fb:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C7:12:42:1C:96:CA:D8:F9:46:94:88:DE:4A:73:91:60:9C:B5:3F
X509v3 Authority Key Identifier:
keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6f:ea:b9:5c:0a:a7:45:9c:e2:ce:c4:80:12:46:ea:b8:9e:
62:45:d2:cf:cd:a0:8c:02:66:08:2e:f1:4d:95:31:9f:e2:3b:
4f:30:c6:f2:c1:d8:0d:34:cb:29:64:bf:7f:2b:96:b6:7d:cf:
4e:97:8e:7b:5f:9e:46:ad:a0:db:dc:4d:19:fb:cb:eb:ee:cc:
70:f7:80:d6:6a:76:e4:e8:c0:c1:a1:f3:d9:80:f3:67:02:c4:
93:99:c8:4a:4e:0d:d3:c1:3d:92:2b:79:81:b0:25:a4:8e:2c:
96:e1:08:db:92:b4:95:2b:f8:7c:4e:cf:fb:0d:f6:15:f3:02:
4c:1a:79:84:a1:c1:2a:27:c7:76:04:19:d2:e2:32:73:36:bc:
a1:6b:d2:b5:d7:43:a7:af:17:b8:70:11:50:c9:b6:1c:0d:59:
1a:91:33:e8:49:d4:af:da:09:6b:47:e5:47:5b:b1:62:1d:0a:
97:b2:5a:93:48:68:bb:11:93:37:7d:4c:d8:2f:da:f5:61:6c:
eb:0a:01:63:bd:53:c3:90:46:23:1a:76:7e:f7:0e:3a:cf:9f:
07:e6:66:61:b1:c9:0a:0b:93:a4:31:2e:ba:eb:26:0e:53:c7:
ea:47:bf:29:2e:46:dc:cd:a5:45:d9:52:45:ef:de:79:ef:05:
08:0b:9d:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHPKo27uBg6nBw5mqxxMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYzk1NmE1MmI3MzUwNGE0ZjFmZjM0NTQ3MTk5Mjk3YTdm
NWRlOWQwHhcNMjYwNDE5MDUwMDUzWhcNMjYwNDIwMDUwMDUzWjAzMTEwLwYDVQQD
EyhjNGM3MTI0MjFjOTZjYWQ4Zjk0Njk0ODhkZTRhNzM5MTYwOWNiNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVxLi+u295Q5CLBzEBo2fkoSSbso
+YWEPlUYdFZlC/5DlpTlbMqf17t1CTBoClw5ydlnxIrEQ3ifvVnnggDKb+VkKPWA
7icRDXzZNG2A+nQZXotC5VDecKZJH9SfqH9qvrk1vtEdWcUvcdZYoXAvJntGGkhh
7HnaW0S9uDyhtIL+igM28l/tzXm5pe3DThoQJlaJ+fGiqvM2njaka6jlLzD5x5i6
qkM2EVXAw5oLOz7Vr/eMk6lRLbz3Lo8HzuLlJQ8yvdj3EXd2F3hxjKnltHmGM+R2
k6/rD89HWVk1Y9FBORhDW23XPqGzn1LLS7LygPOCeWoRQVNIekKUMvvnoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTHEkIclsrY+UaUiN5Kc5FgnLU/MB8GA1UdIwQY
MBaAFH/JVqUrc1BKTx/zRUcZkpen9d6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQt
YmI1N2E0ZWY3MTUzLzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83MWFiNjktNjk2NS00YjcwLTk2OGQtYmI1N2E0ZWY3MTUz
LzEvZjhsV3BTdHpVRXBQSF9ORlJ4bVNsNmYxM3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdm/quVwK
p0Wc4s7EgBJG6rieYkXSz82gjAJmCC7xTZUxn+I7TzDG8sHYDTTLKWS/fyuWtn3P
TpeOe1+eRq2g29xNGfvL6+7McPeA1mp25OjAwaHz2YDzZwLEk5nISk4N08E9kit5
gbAlpI4sluEI25K0lSv4fE7P+w32FfMCTBp5hKHBKifHdgQZ0uIycza8oWvStddD
p68XuHARUMm2HA1ZGpEz6EnUr9oJa0flR1uxYh0Kl7Jak0houxGTN31M2C/a9WFs
6woBY71Tw5BGIxp2fvcOOs+fB+ZmYbHJCguTpDEuuusmDlPH6ke/KS5G3M2lRdlS
Re/eee8FCAudsw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:38 2026 by rpki-client