Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
File: FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft (raw, json)
Hash identifier: g+Bs4o7o05U1CuVIAU0e2LPObglEQjzqzmnu/Db4fxU=
Subject key identifier: 60:E8:19:AB:5A:5E:53:49:06:C1:31:A6:A0:73:76:BF:18:AB:24:EC
Authority key identifier: 15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4
Certificate issuer: /CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
Certificate serial: 019CAD59DC75946E32779998113028B3698D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
Manifest number: 011D
Signing time: Mon 02 Mar 2026 07:01:13 +0000
Manifest this update: Mon 02 Mar 2026 07:01:13 +0000
Manifest next update: Tue 03 Mar 2026 07:01:13 +0000
Files and hashes: 1: 6Qw2qfKOtpd_LKkKsTDZ3ejOc18.roa (hash: bj0QwSywJCHEKu3qq7k1s6hD+djiOxQDSPNiFdM0bYw=)
2: FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl (hash: 7Ok7Y65K2VMx7mSeJK3YgcKG5mpHtzsty/FFv10qUdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:dc:75:94:6e:32:77:99:98:11:30:28:b3:69:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
Validity
Not Before: Mar 2 07:01:13 2026 GMT
Not After : Mar 3 07:01:13 2026 GMT
Subject: CN=60e819ab5a5e534906c131a6a07376bf18ab24ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d2:9c:87:0e:1c:40:e6:e7:ba:e7:32:24:35:
4b:8a:0d:73:ef:92:39:a3:49:4d:bf:dc:68:45:88:
2f:cb:ea:95:0c:5d:2b:a9:69:30:8a:c2:f2:5d:59:
f2:63:cf:c7:6b:e0:93:f9:4a:53:d8:20:cd:34:f9:
f8:9d:a0:4f:b1:24:92:f2:c0:dc:1d:11:c2:56:85:
a4:0a:99:2e:a6:78:c1:7e:90:11:45:35:c3:a1:c3:
04:a1:57:ac:67:dd:fb:3b:dc:33:cf:f5:c8:e9:2a:
7e:b3:90:f6:f4:a2:3a:b8:4d:44:30:57:22:b1:be:
46:c0:d2:53:db:a9:8c:fa:80:ca:55:02:66:38:ba:
d7:97:c0:3d:06:37:3b:5d:6a:df:7b:9b:f1:35:f3:
0a:c4:51:45:aa:4f:57:f9:4d:52:e3:84:d4:97:35:
0f:df:e0:3d:48:ab:b9:da:78:f3:96:7e:51:ce:9a:
37:b8:c1:74:f5:42:5d:78:03:43:05:1a:0b:85:dd:
b6:a6:f4:83:f3:11:43:f9:79:df:c1:07:46:91:1c:
39:65:3c:55:6b:17:6e:ce:fb:b1:3e:95:68:01:41:
b4:42:d0:2f:a1:76:45:fa:85:08:c1:46:34:55:5c:
f5:b4:21:54:f1:b3:b4:a6:6f:25:fa:69:46:34:ad:
b5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:19:AB:5A:5E:53:49:06:C1:31:A6:A0:73:76:BF:18:AB:24:EC
X509v3 Authority Key Identifier:
keyid:15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1f:b3:49:9b:de:b7:99:d3:8d:7a:b7:c9:5f:b5:8a:35:01:
17:9c:27:27:8e:47:2b:88:60:d1:5d:5c:9c:f7:f4:bd:e4:92:
e8:9d:47:e4:ba:23:f5:39:52:86:bb:cc:86:c7:f3:c8:cc:5c:
f4:96:cb:bc:47:eb:8a:8a:cd:ec:71:d3:18:7f:84:b1:eb:a0:
db:12:2f:8d:48:4a:ae:c3:ae:b7:84:69:3d:ad:d6:16:c8:87:
0a:32:c9:af:5e:f7:13:d8:a2:a6:7b:d4:cf:15:31:88:8e:a8:
5e:ba:6d:a6:41:b0:c6:37:fb:75:8f:00:48:f0:20:9a:f2:11:
13:cf:eb:bc:8b:f3:6f:c1:a2:bd:65:2c:81:64:31:93:63:53:
3c:96:b6:39:fb:48:08:d2:88:b6:8c:69:7e:56:fa:9d:6c:a1:
19:e8:d5:6b:4d:7c:c9:41:1b:a5:63:29:32:2f:32:6a:e2:1a:
f6:61:7c:4c:14:b9:de:fc:29:65:d8:fb:af:e5:20:0c:54:56:
33:d9:fe:2c:85:70:8c:af:ae:4e:7d:1f:f8:bd:81:ef:7c:60:
45:07:b8:9c:01:a8:fb:35:12:cb:95:a5:ef:4d:82:4f:23:9c:
89:76:56:e9:44:38:b8:7a:79:9e:3e:4f:fa:26:b4:c3:19:e4:
f4:57:55:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWdx1lG4yd5mYETAos2mNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OGQyYTVmNTJjZGZmMTVhZTk2YWM1ZjRjOTc2MTBlNDQ0
YjYyYjQwHhcNMjYwMzAyMDcwMTEzWhcNMjYwMzAzMDcwMTEzWjAzMTEwLwYDVQQD
Eyg2MGU4MTlhYjVhNWU1MzQ5MDZjMTMxYTZhMDczNzZiZjE4YWIyNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdKchw4cQObnuucyJDVLig1z75I5
o0lNv9xoRYgvy+qVDF0rqWkwisLyXVnyY8/Ha+CT+UpT2CDNNPn4naBPsSSS8sDc
HRHCVoWkCpkupnjBfpARRTXDocMEoVesZ937O9wzz/XI6Sp+s5D29KI6uE1EMFci
sb5GwNJT26mM+oDKVQJmOLrXl8A9Bjc7XWrfe5vxNfMKxFFFqk9X+U1S44TUlzUP
3+A9SKu52njzln5Rzpo3uMF09UJdeANDBRoLhd22pvSD8xFD+XnfwQdGkRw5ZTxV
axduzvuxPpVoAUG0QtAvoXZF+oUIwUY0VVz1tCFU8bO0pm8l+mlGNK215QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDoGataXlNJBsExpqBzdr8YqyTsMB8GA1UdIwQY
MBaAFBWNKl9Szf8VrpasX0yXYQ5ES2K0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wZTM2ZTYtZGZiNy00ZDAyLTgzYjAt
NTYyNDk4YzY4YTc4LzEvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wZTM2ZTYtZGZiNy00ZDAyLTgzYjAtNTYyNDk4YzY4YTc4
LzEvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHB+zSZve
t5nTjXq3yV+1ijUBF5wnJ45HK4hg0V1cnPf0veSS6J1H5Loj9TlShrvMhsfzyMxc
9JbLvEfriorN7HHTGH+Eseug2xIvjUhKrsOut4RpPa3WFsiHCjLJr173E9iipnvU
zxUxiI6oXrptpkGwxjf7dY8ASPAgmvIRE8/rvIvzb8GivWUsgWQxk2NTPJa2OftI
CNKItoxpflb6nWyhGejVa018yUEbpWMpMi8yauIa9mF8TBS53vwpZdj7r+UgDFRW
M9n+LIVwjK+uTn0f+L2B73xgRQe4nAGo+zUSy5Wl702CTyOciXZW6UQ4uHp5nj5P
+ia0wxnk9FdVRw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:49 2026 by rpki-client