Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: 63jtwIPRmBkhhTaFNDQ5Fo3cQ8oGTLySil4O3FTaXS8=
Subject key identifier: 1C:47:85:99:8F:BD:0B:A4:4E:45:5E:7A:06:8C:04:7D:2A:7B:36:6E
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 019CAA8FA4D720BED51AAA2C36E21450FFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 130C
Signing time: Sun 01 Mar 2026 18:01:06 +0000
Manifest this update: Sun 01 Mar 2026 18:01:06 +0000
Manifest next update: Mon 02 Mar 2026 18:01:06 +0000
Files and hashes: 1: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: n1ieYHWl7+4YplIj3PE+DGXNTtat0OOWJ0OYhGWAJnA=)
2: lTrIYbwh25WZaMx9FTa-lJOaOXw.roa (hash: yIg48QwH4K69I8dvoAjoM5Eex+bVMTIw9/IsxOLJtfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:a4:d7:20:be:d5:1a:aa:2c:36:e2:14:50:ff:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Mar 1 18:01:06 2026 GMT
Not After : Mar 2 18:01:06 2026 GMT
Subject: CN=1c4785998fbd0ba44e455e7a068c047d2a7b366e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:ab:2c:29:08:0e:2f:f5:7c:68:52:41:53:
97:3b:48:af:02:97:d8:5d:b9:78:0a:fd:c8:01:a2:
4f:4c:2d:94:29:eb:f8:11:12:46:eb:f6:8c:69:bd:
0a:fc:93:cc:73:01:88:11:b0:9d:48:5d:e6:0a:3d:
5a:93:33:a4:c7:92:7d:90:9f:90:8f:d1:c5:66:12:
fa:f3:22:3c:b1:10:a5:25:c5:f2:20:6a:44:e6:2e:
8d:f7:95:6c:92:e5:69:7c:f3:06:a2:5f:c8:5a:ec:
d7:57:09:ce:a9:75:29:d2:91:11:a1:26:13:b9:23:
14:63:7d:78:7a:f2:98:fd:2c:65:b0:cf:0f:b4:0e:
e5:b1:6a:84:e3:b7:67:3a:ee:c5:16:c0:e7:20:ef:
65:1d:a9:83:27:2b:87:b9:18:5c:31:c7:22:a6:14:
2c:de:c5:ea:76:89:e2:84:65:3d:37:ff:47:5f:dd:
2c:4d:0c:b6:e0:f6:76:e1:51:29:8e:59:a8:53:a3:
ad:ca:42:26:a7:21:9a:3c:cb:9e:c8:e7:f6:1e:1e:
df:1b:3e:4a:b2:f6:75:25:fa:8c:00:58:8b:a9:d1:
72:8a:b5:5e:cb:c8:fe:42:7b:e0:73:e4:fd:87:ce:
e4:ea:c4:cb:1e:3c:11:62:82:fb:f6:2e:b0:ed:35:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:47:85:99:8F:BD:0B:A4:4E:45:5E:7A:06:8C:04:7D:2A:7B:36:6E
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:44:d9:f1:15:5e:7e:88:e0:22:41:b1:8d:a2:39:06:84:05:
b9:6d:15:c0:59:fb:21:fd:0e:0b:8e:b4:08:16:a5:bb:f8:e4:
43:f4:36:d0:63:e0:40:3c:62:3d:27:76:8d:a3:17:45:ea:13:
cd:a9:47:4a:71:bc:25:0a:a5:e8:37:bb:8d:4d:b1:56:31:94:
41:4c:8d:a9:f7:73:f7:76:22:70:fa:7f:59:13:48:06:ec:56:
ee:e0:cd:58:95:f3:ea:67:bf:52:92:17:32:ee:00:13:5a:02:
fb:96:7d:3c:cf:28:ed:a0:6d:62:57:a6:dd:e6:7e:3a:66:c9:
0d:b5:c4:20:0a:04:c5:54:dc:71:83:4c:e0:21:c8:25:8f:3c:
56:c5:36:73:39:21:02:20:13:88:1e:6a:68:d8:d3:1b:20:20:
80:f9:01:db:ca:b0:79:44:61:e7:47:85:c9:6d:eb:c3:9d:e9:
4f:cf:f2:ce:4a:d7:03:0e:5e:e7:42:db:5a:67:3b:d3:17:01:
a2:aa:71:fa:59:ee:59:4e:6d:d0:8c:a6:8e:43:0b:9d:67:b5:
4f:57:00:3d:3a:72:59:a6:a4:ea:f5:e9:58:83:55:d0:e1:9d:
3d:ed:60:0e:8e:4e:c6:51:1e:c5:6d:c2:d8:e9:01:01:75:90:
55:9f:59:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj6TXIL7VGqosNuIUUP/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNWRmZGI2ZTFkOTNjMDkyODIzZGU5NmJkZDdjODhiYmMz
NmExZDEwHhcNMjYwMzAxMTgwMTA2WhcNMjYwMzAyMTgwMTA2WjAzMTEwLwYDVQQD
EygxYzQ3ODU5OThmYmQwYmE0NGU0NTVlN2EwNjhjMDQ3ZDJhN2IzNjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiKrLCkIDi/1fGhSQVOXO0ivApfY
Xbl4Cv3IAaJPTC2UKev4ERJG6/aMab0K/JPMcwGIEbCdSF3mCj1akzOkx5J9kJ+Q
j9HFZhL68yI8sRClJcXyIGpE5i6N95VskuVpfPMGol/IWuzXVwnOqXUp0pERoSYT
uSMUY314evKY/SxlsM8PtA7lsWqE47dnOu7FFsDnIO9lHamDJyuHuRhcMcciphQs
3sXqdonihGU9N/9HX90sTQy24PZ24VEpjlmoU6OtykImpyGaPMueyOf2Hh7fGz5K
svZ1JfqMAFiLqdFyirVey8j+Qnvgc+T9h87k6sTLHjwRYoL79i6w7TXk+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxHhZmPvQukTkVeegaMBH0qezZuMB8GA1UdIwQY
MBaAFHxd/bbh2TwJKCPelr3XyIu8NqHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDct
ZDE4OGM4MDg1MzA1LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDctZDE4OGM4MDg1MzA1
LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkTZ8RVe
fojgIkGxjaI5BoQFuW0VwFn7If0OC460CBalu/jkQ/Q20GPgQDxiPSd2jaMXReoT
zalHSnG8JQql6De7jU2xVjGUQUyNqfdz93YicPp/WRNIBuxW7uDNWJXz6me/UpIX
Mu4AE1oC+5Z9PM8o7aBtYlem3eZ+OmbJDbXEIAoExVTccYNM4CHIJY88VsU2czkh
AiATiB5qaNjTGyAggPkB28qweURh50eFyW3rw53pT8/yzkrXAw5e50LbWmc70xcB
oqpx+lnuWU5t0IymjkMLnWe1T1cAPTpyWaak6vXpWINV0OGdPe1gDo5OxlEexW3C
2OkBAXWQVZ9Zkw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:33 2026 by rpki-client