Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
File: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json)
Hash identifier: nKDsn6hwZWWL+G+nkOL1RzHs9dQvFsFfbGrof3+8yFs=
Subject key identifier: C1:46:95:56:E8:79:9E:19:8E:C1:EC:16:08:EB:AE:43:C2:4D:EB:33
Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Certificate serial: 019CAA58D8CF6169266CFE5E141B2589A3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
Manifest number: 01AC
Signing time: Sun 01 Mar 2026 17:01:15 +0000
Manifest this update: Sun 01 Mar 2026 17:01:15 +0000
Manifest next update: Mon 02 Mar 2026 17:01:15 +0000
Files and hashes: 1: 5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa (hash: Rd6vx0quono9MPD1F0vpd55eYapHMtF51xcO/Hw6eew=)
2: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: 3kwKHHzT0QWfUDP3u9nWMCiH/g3PK1yHbTh5l7KbTdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:d8:cf:61:69:26:6c:fe:5e:14:1b:25:89:a3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Validity
Not Before: Mar 1 17:01:15 2026 GMT
Not After : Mar 2 17:01:15 2026 GMT
Subject: CN=c1469556e8799e198ec1ec1608ebae43c24deb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:95:64:ff:e5:38:ab:b0:1d:f0:a6:2d:78:
2f:9b:ec:e4:e7:e8:8f:ca:4d:29:b7:f6:09:59:86:
1d:5f:17:30:d9:25:e7:41:0c:98:91:92:43:da:83:
9b:c5:9c:46:64:56:06:e4:a4:5e:5f:4c:c0:03:54:
dd:85:ee:7f:ff:77:27:24:22:64:c3:f1:a1:62:51:
86:e3:4e:7a:25:9b:0d:40:0b:21:3a:46:21:07:1f:
9a:ef:db:4c:a1:90:3c:02:cf:da:67:4a:1d:e8:56:
de:5a:af:1f:6b:c1:83:0c:91:60:86:7b:9d:43:21:
c5:f6:09:ad:07:7d:83:af:84:48:09:5a:ab:df:e3:
c5:cd:25:c7:44:35:bc:0b:b9:55:36:1b:20:fb:04:
30:e2:9f:6c:64:24:24:d4:6e:43:63:2f:d1:3e:8e:
16:a2:d1:bf:6e:25:26:0c:57:04:24:1a:02:f5:f7:
b5:13:f7:7e:d0:5e:10:f7:b0:e0:a1:b3:32:32:43:
1a:74:db:34:fe:75:bd:2f:13:6b:1a:e9:90:be:71:
5b:ab:27:8b:f9:91:bd:aa:f3:9f:7f:68:2f:a0:20:
59:56:98:54:a7:22:ea:52:b6:72:82:6d:27:b8:f1:
16:f0:8d:8b:58:e2:3d:8f:3d:b1:66:86:e2:1a:37:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:46:95:56:E8:79:9E:19:8E:C1:EC:16:08:EB:AE:43:C2:4D:EB:33
X509v3 Authority Key Identifier:
keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5f:ca:2e:59:56:ca:b3:c6:eb:b3:08:c9:f7:4c:0d:da:f9:
a9:fb:52:9a:23:14:18:19:85:2f:c3:71:cf:a4:d3:75:63:2e:
8e:f1:42:2a:f7:8f:cc:0c:d8:26:1e:aa:c9:61:ab:fe:28:0b:
30:80:b1:a9:56:aa:cb:69:21:54:cf:cd:1b:dc:8c:25:cf:c7:
8a:cb:97:76:f3:89:e7:c9:c7:47:d0:c4:89:60:25:56:87:4a:
4f:c7:47:63:af:47:32:bf:9f:ea:4d:73:02:e0:2b:39:7b:96:
c3:f3:b1:9f:9b:c4:34:46:48:85:a7:3b:57:84:2a:22:74:57:
b8:02:99:93:98:37:61:96:a5:f3:52:7c:a1:55:b7:42:2a:33:
54:71:13:2c:de:ad:df:34:08:ed:cf:1b:1d:7f:6c:8e:a7:3d:
b9:d1:cf:77:26:54:ee:07:9a:71:c9:95:92:43:95:b9:9d:4a:
d7:10:fe:57:5a:6a:1c:b1:d7:a5:9b:ac:82:63:f1:88:5c:41:
da:d6:62:58:ed:5f:c9:cc:01:74:14:02:89:6f:fc:ba:83:0c:
48:ec:02:c5:9e:6c:6a:b1:f7:b3:1f:83:11:94:dd:09:5c:95:
6e:74:7c:00:49:ec:1f:00:94:87:73:22:9e:fe:4b:41:c1:59:
01:06:79:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWNjPYWkmbP5eFBsliaPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzQ2YWNlNGU2NTI4NzBmMTY4NzQ1MGQ1YzM0ZTE0Y2Iw
MDk0YjUwHhcNMjYwMzAxMTcwMTE1WhcNMjYwMzAyMTcwMTE1WjAzMTEwLwYDVQQD
EyhjMTQ2OTU1NmU4Nzk5ZTE5OGVjMWVjMTYwOGViYWU0M2MyNGRlYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYaVZP/lOKuwHfCmLXgvm+zk5+iP
yk0pt/YJWYYdXxcw2SXnQQyYkZJD2oObxZxGZFYG5KReX0zAA1Tdhe5//3cnJCJk
w/GhYlGG4056JZsNQAshOkYhBx+a79tMoZA8As/aZ0od6FbeWq8fa8GDDJFghnud
QyHF9gmtB32Dr4RICVqr3+PFzSXHRDW8C7lVNhsg+wQw4p9sZCQk1G5DYy/RPo4W
otG/biUmDFcEJBoC9fe1E/d+0F4Q97DgobMyMkMadNs0/nW9LxNrGumQvnFbqyeL
+ZG9qvOff2gvoCBZVphUpyLqUrZygm0nuPEW8I2LWOI9jz2xZobiGjcK7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFGlVboeZ4ZjsHsFgjrrkPCTeszMB8GA1UdIwQY
MBaAFH00as5OZShw8Wh0UNXDThTLAJS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEt
MzI3YWNjMWIxZTU5LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEtMzI3YWNjMWIxZTU5
LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXV/KLllW
yrPG67MIyfdMDdr5qftSmiMUGBmFL8Nxz6TTdWMujvFCKvePzAzYJh6qyWGr/igL
MICxqVaqy2khVM/NG9yMJc/HisuXdvOJ58nHR9DEiWAlVodKT8dHY69HMr+f6k1z
AuArOXuWw/Oxn5vENEZIhac7V4QqInRXuAKZk5g3YZal81J8oVW3QiozVHETLN6t
3zQI7c8bHX9sjqc9udHPdyZU7geaccmVkkOVuZ1K1xD+V1pqHLHXpZusgmPxiFxB
2tZiWO1fycwBdBQCiW/8uoMMSOwCxZ5sarH3sx+DEZTdCVyVbnR8AEnsHwCUh3Mi
nv5LQcFZAQZ5cw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:23 2026 by rpki-client