Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File: fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier: PZaSpLDM/sidOo+kLbbJDlUAdi0gngvVxGsqN40enS8=
Subject key identifier: 58:37:94:A9:29:D9:B4:05:47:20:16:85:50:AB:86:52:1A:04:3B:6E
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 019CAD595401C4E0869AA7FCA0E2D2B346B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number: 181F
Signing time: Mon 02 Mar 2026 07:00:38 +0000
Manifest this update: Mon 02 Mar 2026 07:00:38 +0000
Manifest next update: Tue 03 Mar 2026 07:00:38 +0000
Files and hashes: 1: 7S2s5NvMEWjMmdP4tHVPuR44TrM.roa (hash: tQYbzfuvYbUtsAHpJGcR8MOd0wYit8Udr+nLe5FW+kY=)
2: N_rd1-iO2Zco7czWxcygCkfPMco.roa (hash: fNgSQr1pcqvcbsbdFSVdiphe05QVeyRTAnd6yBvX/h0=)
3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: kxuQ+i1N8SIHhIz06gnTg6KBVc1w1nZRsdpsKcfaFlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:54:01:c4:e0:86:9a:a7:fc:a0:e2:d2:b3:46:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Mar 2 07:00:38 2026 GMT
Not After : Mar 3 07:00:38 2026 GMT
Subject: CN=583794a929d9b4054720168550ab86521a043b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e9:a1:ae:1e:20:96:ff:5b:74:f4:27:d4:c4:
97:6a:24:8f:75:fc:c5:38:f1:4d:82:46:87:ff:df:
71:d0:ed:8e:ad:81:fb:33:97:1d:4f:6a:7b:8f:ca:
e5:18:e8:54:d2:7b:69:58:d4:01:9a:e2:cd:00:3a:
bd:b2:39:74:38:4d:98:66:30:25:75:5c:c2:88:0b:
7c:24:65:53:50:58:0b:91:a5:57:73:56:42:fd:e1:
2d:2c:f5:13:c5:2b:46:8d:a7:eb:de:24:fe:18:a1:
4b:de:c8:91:d6:94:19:1a:13:0a:18:ab:51:04:4b:
e5:5b:83:72:4a:79:9f:cc:26:7a:19:44:b6:8c:a9:
ca:0b:f6:c0:87:a9:62:3b:e8:a9:5d:1f:c2:7d:2c:
68:c0:d1:35:e2:18:ed:4e:a7:f1:e5:87:b5:27:16:
e5:b8:c1:9c:c6:64:6f:3f:9b:d4:9f:31:5b:bd:c1:
12:f5:62:a1:c9:6a:d9:e3:00:a7:29:4d:96:42:cc:
74:9f:72:a0:96:aa:ed:a5:e2:49:2b:88:32:b3:0e:
da:98:33:5d:8d:11:a3:e1:6d:c0:f4:9f:02:0a:8b:
71:c6:db:45:b8:8f:fd:b5:db:46:22:b5:c2:e7:16:
3e:71:c1:ed:88:44:bf:86:53:99:60:e7:2b:91:b9:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:37:94:A9:29:D9:B4:05:47:20:16:85:50:AB:86:52:1A:04:3B:6E
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1c:09:3c:9e:4d:02:d3:20:f5:1c:f1:a2:75:68:64:41:c0:
43:b8:1d:21:17:41:2c:57:a4:e4:76:1c:21:5c:1a:7e:e5:67:
0d:57:e6:55:41:99:5b:2c:3f:9e:6a:e6:38:8a:68:e3:74:35:
bb:f8:b4:d8:75:e3:2a:8c:54:fe:c6:96:db:38:32:d4:c5:d7:
de:e3:2b:f4:7e:56:d7:8e:4a:83:c7:06:2b:f7:64:5d:91:82:
41:f4:88:b3:aa:51:36:3f:f3:d0:60:e7:43:15:7e:f5:77:b3:
25:1a:61:aa:e4:75:17:02:6d:02:9b:87:3f:76:ef:5a:df:48:
1f:08:d4:52:5c:56:96:17:c2:7d:8b:f2:c2:4d:d9:91:a3:ce:
66:ee:9b:fc:bb:4d:c7:5f:11:b3:8e:8f:6b:29:37:26:5e:f3:
d4:54:09:43:ad:8a:54:18:01:13:52:ed:5f:66:2c:9d:40:14:
45:45:6a:4e:4f:41:ae:c1:f3:fd:a9:a9:a4:8b:13:ab:ce:6b:
06:a1:93:d5:a1:e8:94:4a:29:2e:c0:ac:f5:58:48:4c:b6:21:
38:52:dd:c9:1d:13:79:a9:0e:3f:99:c3:fb:0a:d3:87:2c:6c:
bb:73:c3:3a:5b:a1:9d:5b:10:3f:23:f5:9a:f6:87:0f:3f:f9:
ef:79:4a:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWVQBxOCGmqf8oOLSs0a4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz
OWE3YzQwHhcNMjYwMzAyMDcwMDM4WhcNMjYwMzAzMDcwMDM4WjAzMTEwLwYDVQQD
Eyg1ODM3OTRhOTI5ZDliNDA1NDcyMDE2ODU1MGFiODY1MjFhMDQzYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9umhrh4glv9bdPQn1MSXaiSPdfzF
OPFNgkaH/99x0O2OrYH7M5cdT2p7j8rlGOhU0ntpWNQBmuLNADq9sjl0OE2YZjAl
dVzCiAt8JGVTUFgLkaVXc1ZC/eEtLPUTxStGjafr3iT+GKFL3siR1pQZGhMKGKtR
BEvlW4NySnmfzCZ6GUS2jKnKC/bAh6liO+ipXR/CfSxowNE14hjtTqfx5Ye1Jxbl
uMGcxmRvP5vUnzFbvcES9WKhyWrZ4wCnKU2WQsx0n3KglqrtpeJJK4gysw7amDNd
jRGj4W3A9J8CCotxxttFuI/9tdtGIrXC5xY+ccHtiES/hlOZYOcrkbm/eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg3lKkp2bQFRyAWhVCrhlIaBDtuMB8GA1UdIwQY
MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt
OGMzMmMzNTFlZTcwLzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw
LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhwJPJ5N
AtMg9RzxonVoZEHAQ7gdIRdBLFek5HYcIVwafuVnDVfmVUGZWyw/nmrmOIpo43Q1
u/i02HXjKoxU/saW2zgy1MXX3uMr9H5W145Kg8cGK/dkXZGCQfSIs6pRNj/z0GDn
QxV+9XezJRphquR1FwJtApuHP3bvWt9IHwjUUlxWlhfCfYvywk3ZkaPOZu6b/LtN
x18Rs46Payk3Jl7z1FQJQ62KVBgBE1LtX2YsnUAURUVqTk9BrsHz/amppIsTq85r
BqGT1aHolEopLsCs9VhITLYhOFLdyR0TeakOP5nD+wrThyxsu3PDOluhnVsQPyP1
mvaHDz/573lKiQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:33:24 2026 by rpki-client