Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: vFBM9U6diUUeVoO2zjKPs1XyV/t3Emuk4XRQ/ExDuPM=
Subject key identifier: 86:25:2E:7D:EB:B3:BF:B0:CB:EC:17:07:24:5F:2A:61:57:9A:0E:DE
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 019CABD9751D6F03FB50849532153674CB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: h0MzrrS43vTUD37sUGt+W8AuPIVNpDC3lZ5fAR1pYVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:75:1d:6f:03:fb:50:84:95:32:15:36:74:cb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=86252e7debb3bfb0cbec1707245f2a61579a0ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:9e:c4:5f:20:be:7e:a8:c3:31:f8:15:1a:
3a:b7:e5:4f:03:6f:00:6d:45:c0:5c:45:60:bc:8b:
8c:22:53:81:1c:51:95:f6:1c:f2:87:c0:92:b5:e3:
4e:39:34:ff:82:01:2f:04:5e:ef:be:73:30:3a:08:
c8:8f:45:18:97:12:72:fb:ec:21:45:7f:58:4d:72:
4d:d0:86:4d:7e:89:7d:c9:af:3c:07:b0:90:07:4f:
34:0a:d1:9a:66:7d:16:9f:61:4e:1f:b7:55:16:0b:
32:4b:a3:a0:95:8d:bf:8c:c0:35:da:7b:6f:61:f2:
4b:51:8c:29:06:82:66:ed:3a:93:9f:09:bc:77:f8:
a9:2e:58:9d:cb:9b:2b:e4:e1:bf:0a:37:ec:e2:db:
4b:90:54:01:25:14:30:47:44:79:54:f4:82:3c:d8:
e0:76:87:4b:a0:14:f0:26:e0:69:4f:47:4d:82:aa:
ad:24:96:76:a8:9f:a6:25:7a:13:a3:2d:1d:a9:51:
f3:a2:a7:cb:f7:c6:39:e8:d8:88:54:55:e0:f0:9b:
83:4f:c3:98:b6:be:77:6e:ca:37:03:8f:80:0f:0e:
0b:c0:27:00:90:d9:50:ef:61:98:5e:d8:82:35:77:
75:d5:62:9d:37:49:79:1f:0b:4b:d5:aa:91:60:c6:
17:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:25:2E:7D:EB:B3:BF:B0:CB:EC:17:07:24:5F:2A:61:57:9A:0E:DE
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1f:8c:46:d8:e0:77:09:11:65:68:e4:db:7a:75:d2:16:e5:
b2:f3:94:56:30:84:e2:01:fd:ea:9d:26:e1:1c:0d:5e:a4:36:
14:60:98:bb:19:fc:3f:d6:02:98:58:45:bc:e7:c8:ed:ed:40:
ee:3c:f4:34:25:bc:60:bd:f5:37:20:8b:2c:29:57:ff:f0:09:
12:10:fe:64:8c:eb:ee:cf:50:45:fb:3d:aa:6f:aa:1b:d8:5d:
3c:0e:b6:29:d0:21:3f:e8:eb:dc:fe:00:ae:a2:ab:88:2a:46:
c9:c2:c0:4a:7a:83:f6:dc:2c:9a:52:80:8f:04:49:3b:0c:ab:
9b:cf:16:ae:8d:46:f7:e5:ff:cc:3a:93:28:d7:7a:05:a8:39:
ea:a7:b5:ca:14:e5:4d:13:b8:a4:a3:49:a3:a3:92:59:6b:85:
94:37:ee:20:73:62:df:a9:4e:64:d4:9e:e5:3a:67:d6:b1:83:
8a:be:5e:36:96:d2:2a:82:36:8a:be:4c:14:59:ff:ed:e1:5f:
5e:ed:fa:5c:fd:74:25:dd:e1:55:cd:76:ab:a9:23:f7:9a:92:
4b:02:b1:1a:17:45:24:d0:d0:17:20:2f:51:63:75:97:44:5a:
38:9a:40:d7:58:c2:c9:11:4f:4e:c9:17:a9:46:ec:53:ff:45:
a1:5d:41:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2XUdbwP7UISVMhU2dMsUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZjk3NzgyZDZmMjAyYTcwMTgzNjcxYWE2MzBjNzNhYmEz
MzMwN2UwHhcNMjYwMzAyMDAwMTIwWhcNMjYwMzAzMDAwMTIwWjAzMTEwLwYDVQQD
Eyg4NjI1MmU3ZGViYjNiZmIwY2JlYzE3MDcyNDVmMmE2MTU3OWEwZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfCexF8gvn6owzH4FRo6t+VPA28A
bUXAXEVgvIuMIlOBHFGV9hzyh8CSteNOOTT/ggEvBF7vvnMwOgjIj0UYlxJy++wh
RX9YTXJN0IZNfol9ya88B7CQB080CtGaZn0Wn2FOH7dVFgsyS6OglY2/jMA12ntv
YfJLUYwpBoJm7TqTnwm8d/ipLlidy5sr5OG/Cjfs4ttLkFQBJRQwR0R5VPSCPNjg
dodLoBTwJuBpT0dNgqqtJJZ2qJ+mJXoToy0dqVHzoqfL98Y56NiIVFXg8JuDT8OY
tr53bso3A4+ADw4LwCcAkNlQ72GYXtiCNXd11WKdN0l5HwtL1aqRYMYXLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYlLn3rs7+wy+wXByRfKmFXmg7eMB8GA1UdIwQY
MBaAFHz5d4LW8gKnAYNnGqYwxzq6MzB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmIt
MzFhMTdiM2Q5NjRiLzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmItMzFhMTdiM2Q5NjRi
LzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATR+MRtjg
dwkRZWjk23p10hblsvOUVjCE4gH96p0m4RwNXqQ2FGCYuxn8P9YCmFhFvOfI7e1A
7jz0NCW8YL31NyCLLClX//AJEhD+ZIzr7s9QRfs9qm+qG9hdPA62KdAhP+jr3P4A
rqKriCpGycLASnqD9twsmlKAjwRJOwyrm88Wro1G9+X/zDqTKNd6Bag56qe1yhTl
TRO4pKNJo6OSWWuFlDfuIHNi36lOZNSe5Tpn1rGDir5eNpbSKoI2ir5MFFn/7eFf
Xu36XP10Jd3hVc12q6kj95qSSwKxGhdFJNDQFyAvUWN1l0RaOJpA11jCyRFPTskX
qUbsU/9FoV1BjA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:35 2026 by rpki-client