Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json)
Hash identifier: ctQwXPVTlLstRccrS5BOcrtjWYrl+wbJ1aOGp+QJ8+0=
Subject key identifier: FE:81:52:3B:86:B0:7A:D2:D0:96:F9:25:45:92:08:1B:A9:E3:A4:F9
Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Certificate serial: 019CAA58530500325A04B5839EF4E26DF3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
Manifest number: 07D7
Signing time: Sun 01 Mar 2026 17:00:40 +0000
Manifest this update: Sun 01 Mar 2026 17:00:40 +0000
Manifest next update: Mon 02 Mar 2026 17:00:40 +0000
Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: 1vMwVOjGg0tTyphyw7GuuoKBYokVgUSXuYrKWEFxbzA=)
2: zegCreMAsWuVQ_WHgf--0l2ZG3E.roa (hash: hG7GTDgQ0+UKynRc4qSwZNfDUaAY6uCRSrC2M4o4Fvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:53:05:00:32:5a:04:b5:83:9e:f4:e2:6d:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622
Validity
Not Before: Mar 1 17:00:40 2026 GMT
Not After : Mar 2 17:00:40 2026 GMT
Subject: CN=fe81523b86b07ad2d096f9254592081ba9e3a4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:64:da:30:c6:34:25:7b:2b:eb:28:96:f5:07:
01:d9:46:89:b4:6c:f2:5b:8a:77:33:b8:91:09:7d:
09:90:26:db:55:50:47:fc:c2:fc:b4:a0:ff:33:4b:
01:34:2e:a2:03:4a:30:3b:8a:e7:a8:5a:1f:79:ec:
ae:89:27:f7:ff:f7:51:77:0d:62:2d:a2:66:83:e7:
4d:60:5a:5e:5b:b1:ff:b8:dd:33:c8:22:03:ba:91:
ae:64:5a:e5:0a:13:42:16:4d:95:45:0a:81:0d:31:
10:02:8c:d2:51:7a:e7:81:85:27:49:c2:83:f3:31:
b9:2d:71:dd:f0:cb:0f:0b:77:f8:1c:f2:af:1b:63:
0f:7d:67:a0:d8:2b:b3:30:33:23:bd:12:ee:dc:b4:
7f:83:f4:d8:41:2b:db:da:4e:29:a4:4d:58:98:0c:
34:70:6e:eb:45:93:0c:73:07:83:8b:19:6b:f5:ee:
61:6d:d9:b2:76:2f:50:c1:df:3c:60:81:2d:49:dc:
df:48:a9:14:e3:e1:3f:5a:42:9a:9c:75:78:7b:59:
e1:62:b0:b4:4f:3b:2c:89:ea:15:cf:c3:06:aa:e2:
f9:f2:d7:f0:36:33:91:a8:a1:53:09:49:67:f5:65:
b0:96:73:b6:93:c3:9c:a2:d8:86:d8:d9:b4:b5:f0:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:81:52:3B:86:B0:7A:D2:D0:96:F9:25:45:92:08:1B:A9:E3:A4:F9
X509v3 Authority Key Identifier:
keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:77:96:f4:df:db:27:43:9a:b9:c5:49:a0:98:37:9f:86:89:
95:dc:95:ba:3b:9d:fe:d0:60:3e:24:be:4b:82:cc:9c:bf:cd:
04:6e:96:e7:7a:91:b0:d1:94:8c:8b:79:29:25:dc:b0:99:79:
4c:6b:f3:c1:cf:cf:cd:40:eb:c3:d2:f5:78:f2:d9:e1:7c:67:
e4:a1:19:d1:ad:f6:aa:26:96:9d:0e:44:27:46:9a:71:af:7a:
1d:cc:61:34:f9:1c:30:53:35:15:d7:ac:e7:90:3e:ea:a2:c0:
fa:86:2d:12:1a:36:2d:a7:80:9b:4f:81:7b:04:a8:b8:fd:7c:
d8:bc:66:15:40:42:97:ea:13:fc:9c:b2:5a:07:05:07:aa:33:
25:f4:7b:bc:68:ed:c9:cd:11:5a:5e:11:ac:d4:cf:57:a2:ee:
84:d7:52:e4:cf:77:cb:88:b7:b1:ab:54:61:8d:4f:cf:50:cb:
59:fc:0b:cd:eb:f5:bd:e2:c8:5a:30:97:87:0a:6d:7f:c9:8e:
fc:8c:52:b2:6a:ba:82:e2:a5:7d:1a:0b:52:28:ba:d3:a0:6c:
51:54:28:80:d2:99:bf:a5:ad:69:65:af:c9:f1:1c:18:d2:13:
a4:6a:3d:13:ff:e8:aa:77:90:dc:3c:2d:52:9b:35:19:6a:80:
30:15:c0:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWFMFADJaBLWDnvTibfPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNDRhZDUzMjU0MGQyZDJkYWViYTk1ZTEzZDYxNGI3ODU1
YWQ2MjIwHhcNMjYwMzAxMTcwMDQwWhcNMjYwMzAyMTcwMDQwWjAzMTEwLwYDVQQD
EyhmZTgxNTIzYjg2YjA3YWQyZDA5NmY5MjU0NTkyMDgxYmE5ZTNhNGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmTaMMY0JXsr6yiW9QcB2UaJtGzy
W4p3M7iRCX0JkCbbVVBH/ML8tKD/M0sBNC6iA0owO4rnqFofeeyuiSf3//dRdw1i
LaJmg+dNYFpeW7H/uN0zyCIDupGuZFrlChNCFk2VRQqBDTEQAozSUXrngYUnScKD
8zG5LXHd8MsPC3f4HPKvG2MPfWeg2CuzMDMjvRLu3LR/g/TYQSvb2k4ppE1YmAw0
cG7rRZMMcweDixlr9e5hbdmydi9Qwd88YIEtSdzfSKkU4+E/WkKanHV4e1nhYrC0
TzssieoVz8MGquL58tfwNjORqKFTCUln9WWwlnO2k8OcotiG2Nm0tfBdEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6BUjuGsHrS0Jb5JUWSCBup46T5MB8GA1UdIwQY
MBaAFHxErVMlQNLS2uupXhPWFLeFWtYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMt
NjU5Y2I0MjdkY2Y3LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMtNjU5Y2I0MjdkY2Y3
LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXeW9N/b
J0OaucVJoJg3n4aJldyVujud/tBgPiS+S4LMnL/NBG6W53qRsNGUjIt5KSXcsJl5
TGvzwc/PzUDrw9L1ePLZ4Xxn5KEZ0a32qiaWnQ5EJ0aaca96HcxhNPkcMFM1Fdes
55A+6qLA+oYtEho2LaeAm0+BewSouP182LxmFUBCl+oT/JyyWgcFB6ozJfR7vGjt
yc0RWl4RrNTPV6LuhNdS5M93y4i3satUYY1Pz1DLWfwLzev1veLIWjCXhwptf8mO
/IxSsmq6guKlfRoLUii606BsUVQogNKZv6WtaWWvyfEcGNITpGo9E//oqneQ3Dwt
Ups1GWqAMBXALw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:57 2026 by rpki-client