Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: tb8xKHzL+kuwrrWXfTs/fbXKSfncPQtNx+zmVWJqMok=
Subject key identifier: 87:9C:89:D1:E1:03:6E:ED:94:F2:0F:0A:BA:22:01:C2:B3:37:10:88
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 019D9BBEAD275C4916294CADE18513FCCE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 14:00:57 +0000
Manifest this update: Fri 17 Apr 2026 14:00:57 +0000
Manifest next update: Sat 18 Apr 2026 14:00:57 +0000
Files and hashes: 1: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (hash: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: /08//Dprc2Qeuya58QP/VuA/OHg5RgWCqEWSwVWQI/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:ad:27:5c:49:16:29:4c:ad:e1:85:13:fc:ce:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Apr 17 14:00:57 2026 GMT
Not After : Apr 18 14:00:57 2026 GMT
Subject: CN=879c89d1e1036eed94f20f0aba2201c2b3371088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:08:88:c8:55:92:41:48:18:40:26:4d:1f:
b1:fd:6d:59:13:f7:32:a4:50:3c:42:01:80:63:5e:
cb:cc:c5:4f:53:b6:e6:df:d5:bf:9f:f4:6d:2a:d4:
47:8c:f5:45:ee:5c:7b:a4:49:dc:7c:e1:f4:55:5f:
be:10:14:9c:72:fd:56:ee:f0:10:37:b1:10:09:5c:
bf:6a:64:84:74:32:5d:a7:3c:74:83:48:02:7a:b8:
17:7d:c7:5d:2b:66:ae:6f:99:c7:46:53:2d:f3:c6:
92:ad:5b:0b:03:1c:e6:40:48:e8:3c:6c:0c:52:5c:
63:fd:56:b0:a2:e1:79:c5:5c:30:d9:81:b3:87:fd:
2b:a9:8c:c9:61:77:82:3f:4b:49:e5:9b:62:85:7b:
ea:85:d7:55:f1:67:54:87:1b:e4:a9:18:17:ff:ed:
10:df:0b:72:5e:09:bc:38:6f:af:20:f2:1b:ae:b3:
39:91:b9:18:cf:50:0a:a8:6f:80:3e:d3:de:68:ca:
5f:b1:4d:8e:a5:08:b7:91:fb:3c:a2:ac:01:70:cf:
93:bd:0b:dc:37:5b:34:ec:83:c7:95:06:81:7e:aa:
2b:71:6c:d5:b9:49:32:ed:be:04:2c:ca:ee:c0:2e:
44:03:18:4a:de:fd:ac:b6:fe:8a:80:97:dc:66:46:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9C:89:D1:E1:03:6E:ED:94:F2:0F:0A:BA:22:01:C2:B3:37:10:88
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:94:e5:60:07:ae:72:b8:cc:c1:c1:b9:37:5c:41:46:aa:b0:
5b:b6:12:bb:8d:ff:8f:2f:04:bb:4d:41:ac:c4:f7:7c:82:69:
c9:93:1a:77:12:69:e3:67:e8:44:09:af:25:ed:56:12:3b:e6:
11:0e:de:25:60:c7:79:8d:4e:5b:dc:1f:e9:34:b8:1c:e1:9c:
b4:41:a0:40:be:3c:96:0c:a5:b7:7f:8d:cb:a3:7d:4b:4d:d0:
69:d9:62:a2:62:b7:fe:15:a7:79:35:9d:38:33:38:fe:40:0c:
ee:23:7d:82:4f:99:fc:bc:28:6a:3b:50:68:9f:e6:a3:ed:30:
ef:e2:3c:16:12:dd:52:4a:20:62:36:64:e8:f4:69:e7:2d:60:
cf:5e:0a:96:d0:5a:de:6d:16:25:bb:e1:b9:5a:0b:8e:4e:85:
40:46:a2:b2:89:3d:46:f2:ba:cf:59:e6:09:8d:33:56:2e:a4:
d2:f4:66:98:cb:cc:7a:66:70:c1:b4:37:e1:79:87:b2:21:e6:
05:99:a4:4b:8f:5a:45:78:88:c1:b0:41:ba:c1:2b:ab:3b:b7:
b4:04:ff:8b:d5:20:8a:67:58:76:ec:78:35:db:8c:c6:3f:02:
e3:83:ca:d0:35:e3:b6:58:d2:6c:7f:0d:da:c2:f1:83:e4:ff:
94:4f:f8:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvq0nXEkWKUyt4YUT/M4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl
NWUwZTgwHhcNMjYwNDE3MTQwMDU3WhcNMjYwNDE4MTQwMDU3WjAzMTEwLwYDVQQD
Eyg4NzljODlkMWUxMDM2ZWVkOTRmMjBmMGFiYTIyMDFjMmIzMzcxMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYEIiMhVkkFIGEAmTR+x/W1ZE/cy
pFA8QgGAY17LzMVPU7bm39W/n/RtKtRHjPVF7lx7pEncfOH0VV++EBSccv1W7vAQ
N7EQCVy/amSEdDJdpzx0g0gCergXfcddK2aub5nHRlMt88aSrVsLAxzmQEjoPGwM
Ulxj/VawouF5xVww2YGzh/0rqYzJYXeCP0tJ5ZtihXvqhddV8WdUhxvkqRgX/+0Q
3wtyXgm8OG+vIPIbrrM5kbkYz1AKqG+APtPeaMpfsU2OpQi3kfs8oqwBcM+TvQvc
N1s07IPHlQaBfqorcWzVuUky7b4ELMruwC5EAxhK3v2stv6KgJfcZkZZuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIecidHhA27tlPIPCroiAcKzNxCIMB8GA1UdIwQY
MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt
ZjQ2YjVkNTdhNjg1LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1
LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5TlYAeu
crjMwcG5N1xBRqqwW7YSu43/jy8Eu01BrMT3fIJpyZMadxJp42foRAmvJe1WEjvm
EQ7eJWDHeY1OW9wf6TS4HOGctEGgQL48lgylt3+Ny6N9S03QadliomK3/hWneTWd
ODM4/kAM7iN9gk+Z/LwoajtQaJ/mo+0w7+I8FhLdUkogYjZk6PRp5y1gz14KltBa
3m0WJbvhuVoLjk6FQEaisok9RvK6z1nmCY0zVi6k0vRmmMvMemZwwbQ34XmHsiHm
BZmkS49aRXiIwbBBusErqzu3tAT/i9UgimdYdux4NduMxj8C44PK0DXjtljSbH8N
2sLxg+T/lE/4Yw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:32 2026 by rpki-client