Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json)
Hash identifier: hPLYNwXecE3pGBFDcU6C3gqDN8CDhDBM683sMU1z634=
Subject key identifier: 2C:BC:04:CB:73:C6:C8:29:0F:35:38:37:C5:DA:7B:06:9E:75:7A:C9
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 019CAAC63D0130C07A693A9A1667C4A886DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:00:44 +0000
Manifest this update: Sun 01 Mar 2026 19:00:44 +0000
Manifest next update: Mon 02 Mar 2026 19:00:44 +0000
Files and hashes: 1: 4_Zg75KgBPP6BBMIFU4oYXsmHJE.roa (hash: 99GMcdSiV+hIImiUcGfIB2OPx0b9crsIvHTa4c9Qx/8=)
2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: riaWmIo0NZqsAxwbrWAMMk+KFBAO0V8y9+z0JQHPfGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3d:01:30:c0:7a:69:3a:9a:16:67:c4:a8:86:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: Mar 1 19:00:44 2026 GMT
Not After : Mar 2 19:00:44 2026 GMT
Subject: CN=2cbc04cb73c6c8290f353837c5da7b069e757ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:b0:cc:a9:44:b0:27:8f:df:d1:37:8c:12:
0e:84:8a:cd:45:d9:44:9a:6d:3b:6d:aa:af:18:a3:
d1:76:98:d5:b4:26:8f:1c:4c:86:ae:a9:4b:37:a7:
f1:8e:e6:62:49:9a:9d:d0:2b:47:a0:da:e6:d7:b8:
fa:02:c0:77:ae:81:73:1c:35:8a:b6:ee:bd:df:a1:
5a:16:56:74:09:bd:0e:f4:e4:53:37:16:e8:ec:8c:
24:1c:d1:1d:57:32:6c:3e:6e:67:2a:84:93:8f:fc:
57:6b:08:9e:5e:cc:b5:2c:68:79:a0:f2:e6:0e:0d:
3a:66:32:32:00:9e:35:f4:56:77:b8:c7:fc:d3:43:
69:48:c8:8b:b8:5d:61:57:a4:a7:c8:9c:e5:f0:26:
18:c2:28:79:98:1d:5e:75:53:35:db:13:b0:21:67:
f6:08:30:40:96:cc:1e:52:6f:31:d0:83:31:52:7c:
38:64:05:e1:9f:85:2a:d8:e6:71:ac:2c:cc:0e:f4:
54:94:1d:7a:fb:dd:da:d6:48:cd:2d:36:26:8d:47:
f6:bb:91:8e:28:b3:dd:35:07:7a:4c:aa:5d:98:cc:
1f:c0:24:57:d3:51:9c:c2:9d:62:f4:a1:22:59:21:
61:c8:f4:99:60:01:0c:ca:e7:5d:7e:9a:18:38:17:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BC:04:CB:73:C6:C8:29:0F:35:38:37:C5:DA:7B:06:9E:75:7A:C9
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f7:26:7d:9c:3b:c1:e1:b3:b4:53:50:5b:32:73:78:be:40:
9b:26:61:76:3b:77:f6:b2:96:6c:cf:6e:c5:f1:46:14:31:93:
44:70:7b:c5:07:c1:17:3c:e1:12:a8:47:27:1a:49:12:20:c0:
01:7a:91:d7:7a:76:d6:e2:2d:c2:46:57:7a:91:00:71:86:43:
3c:39:0c:de:f3:0e:d4:94:f3:a4:d1:f2:9d:f1:b3:60:32:51:
c4:b0:a5:64:9b:4a:dc:ab:6a:5f:16:d9:a1:fc:bd:ab:63:f9:
11:64:f2:e2:2e:49:67:01:38:b9:c9:73:bc:fc:a7:79:20:22:
b3:e2:8e:3b:cb:2f:ba:1c:89:40:d2:b3:1e:07:38:dc:95:ad:
16:ba:2b:93:6b:48:86:30:ba:ba:9a:ea:5b:27:07:98:5e:0e:
96:b5:2a:0a:d7:91:4c:8e:01:82:9d:87:56:b6:8f:43:21:41:
43:e9:3a:b0:e6:be:9b:72:ff:08:e6:06:27:92:d6:9c:29:ba:
83:d4:99:12:33:5a:47:3a:6f:ad:bd:93:9a:89:e3:f2:3a:13:
bb:d5:80:7d:93:70:f7:c2:80:e6:62:d7:97:d5:e7:4a:09:3a:
63:40:cf:35:1c:ee:16:0b:fc:c7:d3:70:e3:5a:b5:21:60:1c:
70:40:a3:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxj0BMMB6aTqaFmfEqIbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYjQ1NjVhMzJkYjNjOWM4YjhiMGY3YjRjMTFiZDExNTRl
MjBkZTkwHhcNMjYwMzAxMTkwMDQ0WhcNMjYwMzAyMTkwMDQ0WjAzMTEwLwYDVQQD
EygyY2JjMDRjYjczYzZjODI5MGYzNTM4MzdjNWRhN2IwNjllNzU3YWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn6wzKlEsCeP39E3jBIOhIrNRdlE
mm07baqvGKPRdpjVtCaPHEyGrqlLN6fxjuZiSZqd0CtHoNrm17j6AsB3roFzHDWK
tu6936FaFlZ0Cb0O9ORTNxbo7IwkHNEdVzJsPm5nKoSTj/xXawieXsy1LGh5oPLm
Dg06ZjIyAJ419FZ3uMf800NpSMiLuF1hV6SnyJzl8CYYwih5mB1edVM12xOwIWf2
CDBAlsweUm8x0IMxUnw4ZAXhn4Uq2OZxrCzMDvRUlB16+93a1kjNLTYmjUf2u5GO
KLPdNQd6TKpdmMwfwCRX01Gcwp1i9KEiWSFhyPSZYAEMyuddfpoYOBcefwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCy8BMtzxsgpDzU4N8XaewaedXrJMB8GA1UdIwQY
MBaAFH60Vloy2zyci4sPe0wRvRFU4g3pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81YjUzNWUtYjE0My00YjRhLTkwZTgt
MGU3OTQ5OTM1ZDgxLzEvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81YjUzNWUtYjE0My00YjRhLTkwZTgtMGU3OTQ5OTM1ZDgx
LzEvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvcmfZw7
weGztFNQWzJzeL5AmyZhdjt39rKWbM9uxfFGFDGTRHB7xQfBFzzhEqhHJxpJEiDA
AXqR13p21uItwkZXepEAcYZDPDkM3vMO1JTzpNHynfGzYDJRxLClZJtK3KtqXxbZ
ofy9q2P5EWTy4i5JZwE4uclzvPyneSAis+KOO8svuhyJQNKzHgc43JWtFrork2tI
hjC6uprqWycHmF4OlrUqCteRTI4Bgp2HVraPQyFBQ+k6sOa+m3L/COYGJ5LWnCm6
g9SZEjNaRzpvrb2Tmonj8joTu9WAfZNw98KA5mLXl9XnSgk6Y0DPNRzuFgv8x9Nw
41q1IWAccECjKQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:43 2026 by rpki-client