Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
File: Fi5IMpyL6O8gnplY2marAkAUXhk.mft (raw, json)
Hash identifier: QNBX9PL1fctfN0gZlvRf2bsGMDSLdv40+OBBjlwbGLY=
Subject key identifier: BF:89:06:97:D1:81:EA:73:52:7B:FA:5B:F0:D1:88:F2:5F:CD:A4:D2
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Certificate issuer: /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial: 019CAAFD8EFFA4FD6BF1B39AC1E831D5E0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
Manifest number: 0924
Signing time: Sun 01 Mar 2026 20:01:09 +0000
Manifest this update: Sun 01 Mar 2026 20:01:09 +0000
Manifest next update: Mon 02 Mar 2026 20:01:09 +0000
Files and hashes: 1: 62jZg4gngBAnPwivfw6fHLKrFR8.roa (hash: x5Xq81WhPxvz0KcW7Qb+lmuqrFvDsxsxDYK9R0dFh5A=)
2: Fi5IMpyL6O8gnplY2marAkAUXhk.crl (hash: 8FHYksLpqTVni+ikpeTftLxjPQNLQr/6l+vyVqavoDA=)
3: L1zbFMwgTo8k0cGpa43eL9rJSvs.roa (hash: 3nOYFWDqeUlGtXtuv/0p8OtC8pzPOMkeWtIsBYndPi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8e:ff:a4:fd:6b:f1:b3:9a:c1:e8:31:d5:e0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
Validity
Not Before: Mar 1 20:01:09 2026 GMT
Not After : Mar 2 20:01:09 2026 GMT
Subject: CN=bf890697d181ea73527bfa5bf0d188f25fcda4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:c8:97:b7:38:22:ee:b2:d9:ae:7b:9e:12:
1e:c6:8a:f5:dd:91:d1:5a:97:10:8d:c2:0b:af:3a:
7c:d7:8e:e5:35:09:f0:9d:0a:f1:28:64:15:ce:63:
5b:10:d8:59:b8:0e:7c:96:a2:44:05:04:38:85:56:
da:db:ee:a2:09:f4:51:7a:bd:d0:1e:33:00:6b:55:
9d:39:3b:58:cd:29:76:30:32:ae:16:e0:cf:b9:59:
f1:33:c4:3d:96:30:19:af:81:14:56:7a:b0:25:d3:
26:5f:62:15:a3:19:e2:00:e9:76:19:e6:18:3e:84:
b9:96:4d:ef:ce:1d:23:db:9d:14:95:80:1c:f6:7b:
a7:e0:7e:7a:d1:18:17:26:16:84:7a:2a:6d:fa:6b:
c2:9f:8d:63:4c:51:31:73:c5:1b:f0:b7:6a:93:d5:
d9:0c:f1:42:ff:d3:60:2c:9f:3c:c8:1f:ff:47:00:
6e:ba:58:b3:f9:d0:1f:62:ee:53:14:85:99:ee:89:
9c:ba:e8:d9:62:66:32:1d:9d:b2:a7:53:2f:73:d6:
db:e0:a1:25:fb:72:b5:31:46:ca:fc:1a:06:2d:ac:
12:fc:26:e0:2e:1a:46:60:a2:64:f5:2c:21:4c:fa:
bb:63:70:ee:33:4e:16:f8:c9:db:83:7b:49:06:72:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:89:06:97:D1:81:EA:73:52:7B:FA:5B:F0:D1:88:F2:5F:CD:A4:D2
X509v3 Authority Key Identifier:
keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d0:7c:2b:7d:60:dd:ff:2f:d2:b7:52:96:3d:91:fc:2c:19:
f4:82:ea:c2:d4:71:6a:9b:e9:d9:b0:a8:39:2a:04:5e:f2:2a:
ac:fe:3f:1d:c3:94:4a:e5:a3:64:85:35:db:2d:af:52:1a:e8:
87:73:36:c4:7e:60:d6:f1:16:4d:37:f0:2f:f8:f0:6c:f2:c0:
4f:7c:f2:3a:05:cc:4a:e4:05:7d:e4:e0:73:99:e6:5d:a6:45:
46:3f:f4:c4:b1:c3:6d:65:7d:da:73:b5:fd:f2:63:68:37:0c:
6c:b1:a4:bd:4f:3f:b2:93:39:21:c0:c0:ee:be:0f:9d:1c:7a:
49:75:d2:a8:e0:f0:19:1b:55:8b:88:ab:eb:19:9d:b9:fa:c2:
24:da:f3:e5:dc:c7:2f:e5:06:79:86:4d:95:d7:e3:d4:ee:45:
fe:26:21:4e:73:6a:2a:25:3a:2b:4d:1a:eb:a4:25:3a:69:9f:
de:3f:c5:71:01:78:a0:94:94:27:f1:dc:be:c5:e6:e1:73:88:
79:d2:23:3e:50:08:7d:bb:19:5e:fc:54:ba:de:f4:7f:49:e5:
68:e5:e3:bb:22:ac:d3:f6:f6:05:3d:e9:fe:7e:99:b3:ab:a3:
cc:b0:3c:47:a6:a7:ac:bd:2e:06:eb:3c:e7:12:4d:83:6b:e1:
7d:6e:f7:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Y7/pP1r8bOawegx1eDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmU0ODMyOWM4YmU4ZWYyMDllOTk1OGRhNjZhYjAyNDAx
NDVlMTkwHhcNMjYwMzAxMjAwMTA5WhcNMjYwMzAyMjAwMTA5WjAzMTEwLwYDVQQD
EyhiZjg5MDY5N2QxODFlYTczNTI3YmZhNWJmMGQxODhmMjVmY2RhNGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAognIl7c4Iu6y2a57nhIexor13ZHR
WpcQjcILrzp8147lNQnwnQrxKGQVzmNbENhZuA58lqJEBQQ4hVba2+6iCfRRer3Q
HjMAa1WdOTtYzSl2MDKuFuDPuVnxM8Q9ljAZr4EUVnqwJdMmX2IVoxniAOl2GeYY
PoS5lk3vzh0j250UlYAc9nun4H560RgXJhaEeipt+mvCn41jTFExc8Ub8Ldqk9XZ
DPFC/9NgLJ88yB//RwBuuliz+dAfYu5TFIWZ7omcuujZYmYyHZ2yp1Mvc9bb4KEl
+3K1MUbK/BoGLawS/CbgLhpGYKJk9SwhTPq7Y3DuM04W+Mnbg3tJBnKZdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+JBpfRgepzUnv6W/DRiPJfzaTSMB8GA1UdIwQY
MBaAFBYuSDKci+jvIJ6ZWNpmqwJAFF4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84ZTIwNjctMjgzYi00ZTRlLWI2N2Ut
NjlmMzNmZTFiNTMwLzEvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84ZTIwNjctMjgzYi00ZTRlLWI2N2UtNjlmMzNmZTFiNTMw
LzEvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdB8K31g
3f8v0rdSlj2R/CwZ9ILqwtRxapvp2bCoOSoEXvIqrP4/HcOUSuWjZIU12y2vUhro
h3M2xH5g1vEWTTfwL/jwbPLAT3zyOgXMSuQFfeTgc5nmXaZFRj/0xLHDbWV92nO1
/fJjaDcMbLGkvU8/spM5IcDA7r4PnRx6SXXSqODwGRtVi4ir6xmdufrCJNrz5dzH
L+UGeYZNldfj1O5F/iYhTnNqKiU6K00a66QlOmmf3j/FcQF4oJSUJ/HcvsXm4XOI
edIjPlAIfbsZXvxUut70f0nlaOXjuyKs0/b2BT3p/n6Zs6ujzLA8R6anrL0uBus8
5xJNg2vhfW73tw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:41 2026 by rpki-client