Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json)
Hash identifier: hD6Eq0MSceWJTvgrK1ZXFvS2LqPR4U32ONspE3SqejA=
Subject key identifier: E9:AC:34:EB:14:29:88:5D:43:23:68:DD:1F:E7:48:1D:8E:FA:F5:B3
Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Certificate serial: 019CABA2273DC5CDD720040FA09D2A9D2D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
Manifest number: 157B
Signing time: Sun 01 Mar 2026 23:00:56 +0000
Manifest this update: Sun 01 Mar 2026 23:00:56 +0000
Manifest next update: Mon 02 Mar 2026 23:00:56 +0000
Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: D4XsXjPlO0iVH64PijOk558wXhxSUw4ZBOkaGGwKr/4=)
2: lVcBo5vuxQrLHVx-CazpWVzHmK8.roa (hash: vG4AHQ6D6vSRnjokMxDtiTnVibG0s89z9DApsJwgQrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:27:3d:c5:cd:d7:20:04:0f:a0:9d:2a:9d:2d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9
Validity
Not Before: Mar 1 23:00:56 2026 GMT
Not After : Mar 2 23:00:56 2026 GMT
Subject: CN=e9ac34eb1429885d432368dd1fe7481d8efaf5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:4a:30:39:83:8d:38:b4:0e:c2:42:66:aa:
82:0a:56:4e:4d:a6:34:c7:2f:d9:cf:11:d3:96:8c:
67:5a:9d:b1:87:50:56:df:80:19:99:e4:85:5a:fd:
6a:db:f8:68:3a:92:0a:a5:11:de:2b:b8:c2:59:8b:
36:e5:10:c5:42:21:97:bb:52:fc:6d:24:32:3f:21:
14:8c:a0:2a:0f:25:c4:3c:e3:b5:b8:a9:a9:62:18:
10:65:b7:6c:7f:6c:70:b7:df:f4:98:49:50:de:f1:
bc:06:05:c2:2b:65:02:69:43:f6:8e:da:00:ba:ed:
47:76:89:dc:2c:03:b2:e3:3d:d0:19:21:c8:35:3e:
d1:3b:93:6e:d4:c0:2c:56:2f:49:ca:cf:49:50:6b:
82:63:69:fb:df:94:9d:79:d9:d1:21:30:ad:37:fc:
1b:c9:d8:2c:28:ad:fc:da:3d:0b:e6:30:fe:3b:51:
4d:6b:75:73:bc:ed:75:5c:7a:1b:9c:af:99:b3:7b:
fe:52:95:1a:cd:04:d8:2d:00:be:55:97:49:ee:4d:
be:20:88:ec:c5:a1:14:c9:d8:a7:b2:db:a9:33:37:
08:cc:56:5a:38:79:c7:bf:c1:1a:bd:a9:be:4f:00:
e9:9d:fd:a4:38:58:b6:6f:30:be:75:0b:d4:7d:ed:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AC:34:EB:14:29:88:5D:43:23:68:DD:1F:E7:48:1D:8E:FA:F5:B3
X509v3 Authority Key Identifier:
keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3a:f7:3b:3e:d6:00:17:89:36:94:8e:9f:90:30:02:2e:5a:
20:97:9a:bb:10:fd:30:5d:a4:cc:b3:9a:bd:e4:9b:c7:94:4a:
30:34:2a:6f:f4:bc:11:b1:ee:77:10:ea:59:3a:ea:ed:7d:7b:
b1:86:48:c1:2d:99:35:c0:34:c5:93:f6:23:cc:5d:d3:bf:b7:
bd:37:d1:2a:c1:2b:3d:0c:e2:34:77:15:b2:d5:c9:ee:28:2e:
a8:e7:11:78:f8:1f:b6:d7:20:bc:d3:ed:4d:0c:28:6d:37:79:
c0:9b:ac:93:38:32:4f:31:25:1d:f9:3e:e4:8c:2a:96:1c:61:
63:47:5c:37:87:1b:0a:2e:ae:18:98:c1:05:2c:12:4d:44:26:
d8:1d:c6:6e:60:82:e8:23:2a:5d:bf:15:87:1a:91:89:11:aa:
90:6e:a3:25:2e:06:5f:a5:2b:11:1e:f7:5f:a0:0b:bf:ee:52:
6a:57:2a:a6:97:97:97:34:ed:9c:d9:75:49:cf:57:12:a1:74:
ab:cf:92:88:77:fe:f2:0c:28:5a:b9:d1:74:99:5b:ef:78:96:
ff:6e:9b:6b:44:38:ba:ca:a0:04:9e:d6:c7:2c:3d:cd:c9:e3:
7a:04:26:0f:47:1a:1f:13:2c:e8:48:43:9a:bc:d9:33:75:2a:
ee:9b:25:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroic9xc3XIAQPoJ0qnS0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVjZDY1MmFmZDFmMmYzMzdjMjBkOGZmNzI4NmNkMmNm
MWJkZjkwHhcNMjYwMzAxMjMwMDU2WhcNMjYwMzAyMjMwMDU2WjAzMTEwLwYDVQQD
EyhlOWFjMzRlYjE0Mjk4ODVkNDMyMzY4ZGQxZmU3NDgxZDhlZmFmNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RdKMDmDjTi0DsJCZqqCClZOTaY0
xy/ZzxHTloxnWp2xh1BW34AZmeSFWv1q2/hoOpIKpRHeK7jCWYs25RDFQiGXu1L8
bSQyPyEUjKAqDyXEPOO1uKmpYhgQZbdsf2xwt9/0mElQ3vG8BgXCK2UCaUP2jtoA
uu1HdoncLAOy4z3QGSHINT7RO5Nu1MAsVi9Jys9JUGuCY2n735SdednRITCtN/wb
ydgsKK382j0L5jD+O1FNa3VzvO11XHobnK+Zs3v+UpUazQTYLQC+VZdJ7k2+IIjs
xaEUydinstupMzcIzFZaOHnHv8Eavam+TwDpnf2kOFi2bzC+dQvUfe0LLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmsNOsUKYhdQyNo3R/nSB2O+vWzMB8GA1UdIwQY
MBaAFH2lzWUq/R8vM3wg2P9yhs0s8b35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83M2UwMDktZjJmNC00M2FjLTgxYTEt
ODlhYThkMmU4MDA0LzEvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83M2UwMDktZjJmNC00M2FjLTgxYTEtODlhYThkMmU4MDA0
LzEvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejr3Oz7W
ABeJNpSOn5AwAi5aIJeauxD9MF2kzLOaveSbx5RKMDQqb/S8EbHudxDqWTrq7X17
sYZIwS2ZNcA0xZP2I8xd07+3vTfRKsErPQziNHcVstXJ7iguqOcRePgfttcgvNPt
TQwobTd5wJuskzgyTzElHfk+5IwqlhxhY0dcN4cbCi6uGJjBBSwSTUQm2B3GbmCC
6CMqXb8VhxqRiRGqkG6jJS4GX6UrER73X6ALv+5SalcqppeXlzTtnNl1Sc9XEqF0
q8+SiHf+8gwoWrnRdJlb73iW/26ba0Q4usqgBJ7Wxyw9zcnjegQmD0caHxMs6EhD
mrzZM3Uq7pslPA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:33 2026 by rpki-client