Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier: I6MveVw+4SuF/hcFyd0dHeruvmMML62uOg/XJkR8eIA=
Subject key identifier: B5:4B:2C:3F:33:6E:77:C1:75:10:8F:3A:BA:34:20:6F:32:70:58:2D
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 019CAAC663D3DABBFAE69D0737D983325388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number: 070E
Signing time: Sun 01 Mar 2026 19:00:54 +0000
Manifest this update: Sun 01 Mar 2026 19:00:54 +0000
Manifest next update: Mon 02 Mar 2026 19:00:54 +0000
Files and hashes: 1: 1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa (hash: 1Isp4qEhUMW8RbXIHRvEykaShiBFWYANN4lo8FswOgU=)
2: OF8_FWobXxZIravQspxAerLsQCQ.roa (hash: Y7S5oVSgN9LGWqLS5miIXFy0ldxtoJVgFrZlsFrthM8=)
3: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: pHli/ub8mg2TqHw58tdcPiK2OUA9eVZK6pdEQktssSA=)
4: iYC8lbhytTD32pOwIBpaKnVh070.roa (hash: YM6e3l9qg3NAPYfHxGGt9x27m8gykxKp/xuSfybtvWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:63:d3:da:bb:fa:e6:9d:07:37:d9:83:32:53:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Mar 1 19:00:54 2026 GMT
Not After : Mar 2 19:00:54 2026 GMT
Subject: CN=b54b2c3f336e77c175108f3aba34206f3270582d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:42:ce:8d:8d:26:7d:f8:b6:af:7a:3b:ac:
a7:bc:f1:9a:9a:65:77:b7:43:64:36:da:67:e5:56:
39:60:00:84:62:91:be:bf:04:05:0f:8d:9d:73:3d:
89:62:52:1c:e3:c9:4f:1d:09:85:54:20:a1:7a:78:
7d:b3:2e:da:4d:c8:2b:99:ae:6b:c9:78:ce:d9:4a:
63:e8:6f:db:1b:ac:74:58:fe:d8:39:70:72:3d:e8:
df:c5:4b:34:76:a0:3a:b3:90:d2:f2:10:bf:57:71:
67:54:d0:8f:02:26:d2:56:6e:ef:75:63:f3:4f:ee:
6e:1d:ac:aa:32:bf:01:e5:8a:bc:3d:11:ec:91:be:
bc:52:86:ff:a9:be:1d:31:f1:03:4f:52:c7:7a:f9:
a5:e3:aa:a2:06:51:89:fc:56:0a:33:14:dc:23:ad:
66:6d:d9:a6:6a:4f:b2:fa:2f:c8:5c:78:0c:43:eb:
62:74:89:4c:3a:6a:f9:f1:4c:83:a3:07:41:7d:dc:
20:e6:b4:e6:a4:2b:b9:15:19:8e:42:b8:0f:b8:2d:
c1:36:84:27:b8:9c:9f:77:82:0c:3b:9a:e1:08:d2:
c6:49:ea:f9:73:ef:95:ff:42:ba:1a:fe:7c:f2:01:
3d:f5:2c:e6:06:52:78:01:18:c1:b6:a8:a8:2a:ad:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4B:2C:3F:33:6E:77:C1:75:10:8F:3A:BA:34:20:6F:32:70:58:2D
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9b:99:65:a7:e3:d4:5f:95:60:b7:cb:de:5f:34:e5:3d:f0:
ea:e5:2e:34:b9:02:b2:8e:4f:3d:08:91:10:00:05:9b:3d:95:
65:66:73:5b:a9:e7:8c:30:fd:ff:57:a4:38:d8:79:ef:b5:05:
b4:51:fd:1b:55:34:20:b3:56:64:a2:e6:ee:bb:92:3f:cd:c2:
fb:e7:9b:c0:b9:d1:da:84:31:64:7e:90:de:f4:2d:76:ee:7f:
05:bc:2f:e1:0f:5d:4a:49:b2:81:95:7b:17:b5:e1:37:ca:15:
17:63:1d:67:a0:16:80:bb:2e:7c:58:90:da:ab:2d:23:d8:36:
d2:a1:3b:c8:a0:39:eb:13:dd:a3:3e:70:bc:48:bb:a1:cf:5a:
ce:ff:f5:79:89:c5:49:25:dc:77:6a:25:20:00:87:f0:ef:27:
68:bb:6f:f6:f1:12:2a:7f:16:c5:c5:fd:9d:b7:7d:df:f3:ba:
41:3a:68:0e:2e:bd:b3:92:2b:bf:af:c9:63:ff:00:6c:63:3c:
d9:7b:27:2f:9f:e6:d4:d3:ac:68:93:2d:1c:64:07:f9:5b:01:
b3:f5:e3:bd:0e:fd:dc:c1:b0:41:d8:9c:2b:24:9a:d6:74:64:
84:6c:44:50:d6:54:fd:0a:0b:da:de:d6:8d:70:92:3a:f6:e4:
33:19:d8:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxmPT2rv65p0HN9mDMlOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk
NWRiMzQwHhcNMjYwMzAxMTkwMDU0WhcNMjYwMzAyMTkwMDU0WjAzMTEwLwYDVQQD
EyhiNTRiMmMzZjMzNmU3N2MxNzUxMDhmM2FiYTM0MjA2ZjMyNzA1ODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZlCzo2NJn34tq96O6ynvPGammV3
t0NkNtpn5VY5YACEYpG+vwQFD42dcz2JYlIc48lPHQmFVCChenh9sy7aTcgrma5r
yXjO2Upj6G/bG6x0WP7YOXByPejfxUs0dqA6s5DS8hC/V3FnVNCPAibSVm7vdWPz
T+5uHayqMr8B5Yq8PRHskb68Uob/qb4dMfEDT1LHevml46qiBlGJ/FYKMxTcI61m
bdmmak+y+i/IXHgMQ+tidIlMOmr58UyDowdBfdwg5rTmpCu5FRmOQrgPuC3BNoQn
uJyfd4IMO5rhCNLGSer5c++V/0K6Gv588gE99SzmBlJ4ARjBtqioKq0FtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVLLD8zbnfBdRCPOro0IG8ycFgtMB8GA1UdIwQY
MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt
ZjdhYmVmM2M4YTJiLzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi
LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJuZZafj
1F+VYLfL3l805T3w6uUuNLkCso5PPQiREAAFmz2VZWZzW6nnjDD9/1ekONh577UF
tFH9G1U0ILNWZKLm7ruSP83C++ebwLnR2oQxZH6Q3vQtdu5/Bbwv4Q9dSkmygZV7
F7XhN8oVF2MdZ6AWgLsufFiQ2qstI9g20qE7yKA56xPdoz5wvEi7oc9azv/1eYnF
SSXcd2olIACH8O8naLtv9vESKn8WxcX9nbd93/O6QTpoDi69s5Irv6/JY/8AbGM8
2XsnL5/m1NOsaJMtHGQH+VsBs/XjvQ793MGwQdicKySa1nRkhGxEUNZU/QoL2t7W
jXCSOvbkMxnYcw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:39 2026 by rpki-client