Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: NAQAeoUvDCpna676YRQ/LyYZ34BFplhLoC2gl3SVd/o=
Subject key identifier: 28:CA:09:D2:C5:00:22:9D:BA:C8:57:53:F5:51:9C:E6:1E:4D:3B:96
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 019CAC0FB98A09984D17B74AC8287F32E500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 15FA
Signing time: Mon 02 Mar 2026 01:00:37 +0000
Manifest this update: Mon 02 Mar 2026 01:00:37 +0000
Manifest next update: Tue 03 Mar 2026 01:00:37 +0000
Files and hashes: 1: RCrqoUHCiCj-_mCIijuiOb69DWo.roa (hash: N+TGC8nICgkfbZEg/ul2Bb4VOH/CDC8qHnBferdNNKE=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: aIMSPHHsLcvtCC+nKiw63fOkjkCRxWWae8t3szaix6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:b9:8a:09:98:4d:17:b7:4a:c8:28:7f:32:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Mar 2 01:00:37 2026 GMT
Not After : Mar 3 01:00:37 2026 GMT
Subject: CN=28ca09d2c500229dbac85753f5519ce61e4d3b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:7e:d3:f1:cd:78:ed:75:b4:c8:13:3c:7c:
1c:96:20:f0:82:50:28:cc:54:ca:d4:29:e4:c3:fe:
7e:ed:96:e0:3c:fd:0b:db:d3:02:53:21:dd:2b:4f:
a5:a7:6f:4c:2b:0c:46:55:20:1b:27:8d:eb:32:50:
bc:1c:54:f2:db:51:d5:6c:1a:b3:f2:10:31:64:0c:
1f:9a:2e:67:d1:5e:0d:6e:85:d2:ca:5e:9e:f0:95:
81:9f:4a:1b:a0:3a:05:f7:d1:d9:2a:87:6f:69:bb:
2e:ac:f8:a4:f9:59:48:4a:f4:e0:14:ca:7f:74:98:
f7:b4:92:e2:55:01:2e:ea:82:2a:60:7b:61:1c:79:
5a:ef:76:89:90:d8:01:a3:8f:bc:da:be:59:27:be:
66:65:62:25:7c:be:25:ac:f5:74:55:a7:da:a2:06:
5f:db:73:28:02:df:8d:73:fc:07:5b:7c:74:be:df:
ab:75:52:c1:08:45:db:63:15:15:c2:e6:ee:6f:a0:
1f:47:4d:eb:b7:8a:1c:ee:c8:ad:3f:a3:ad:95:67:
d4:14:94:cc:94:f4:32:35:ca:f3:74:ea:08:b1:a9:
b1:8f:bb:b0:9a:a0:c7:54:20:79:49:a7:85:d2:03:
53:7b:07:1b:67:d6:9d:2e:28:4c:87:f5:d9:be:2c:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CA:09:D2:C5:00:22:9D:BA:C8:57:53:F5:51:9C:E6:1E:4D:3B:96
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:db:ac:4b:df:2d:e1:7b:b7:94:45:c9:ff:d5:0d:22:2c:ab:
74:9b:fa:c2:e0:71:34:22:fb:e6:eb:84:c0:39:5b:63:61:a9:
44:ad:ae:66:6e:92:2a:f8:e3:d9:de:7e:2c:a5:9d:8d:59:f3:
d7:5e:09:76:ff:62:17:f8:0c:ec:8a:ea:6b:19:dd:7f:c2:b2:
13:27:b6:cb:6d:0a:6e:47:55:c3:03:e3:77:a7:c3:d0:bf:c7:
47:6d:ea:92:b1:52:42:96:27:45:b4:f2:7a:46:ea:0e:58:57:
31:0a:1d:03:3e:ed:9b:05:3b:59:dd:d8:fc:3d:68:c3:ba:7b:
2e:dc:78:eb:9e:65:40:9d:47:cc:b2:35:ed:32:32:92:e1:5d:
ec:96:70:65:20:0e:ce:63:03:d7:2a:62:84:bf:82:e5:ed:bb:
a4:9a:15:de:cf:4f:b3:e8:ce:47:a7:95:42:80:1d:c6:08:86:
d4:19:d2:8d:d2:de:ac:47:f1:27:5a:82:2a:74:c0:fb:7a:aa:
c5:45:d9:4f:6b:a7:5c:00:c9:2c:05:04:d6:5e:e8:3d:b1:ec:
ef:c4:86:0f:b1:26:32:b0:54:21:c6:11:69:3e:35:a4:ab:dc:
84:15:37:b0:43:ee:21:c5:a0:78:48:b6:16:6d:a8:6d:7a:67:
63:89:e3:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD7mKCZhNF7dKyCh/MuUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYzA5OTk4Y2UzOWNmZGNhNjZlY2ZkOGRkM2FjMzg2NDRk
M2M4YTYwHhcNMjYwMzAyMDEwMDM3WhcNMjYwMzAzMDEwMDM3WjAzMTEwLwYDVQQD
EygyOGNhMDlkMmM1MDAyMjlkYmFjODU3NTNmNTUxOWNlNjFlNGQzYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNN+0/HNeO11tMgTPHwcliDwglAo
zFTK1Cnkw/5+7ZbgPP0L29MCUyHdK0+lp29MKwxGVSAbJ43rMlC8HFTy21HVbBqz
8hAxZAwfmi5n0V4NboXSyl6e8JWBn0oboDoF99HZKodvabsurPik+VlISvTgFMp/
dJj3tJLiVQEu6oIqYHthHHla73aJkNgBo4+82r5ZJ75mZWIlfL4lrPV0VafaogZf
23MoAt+Nc/wHW3x0vt+rdVLBCEXbYxUVwubub6AfR03rt4oc7sitP6OtlWfUFJTM
lPQyNcrzdOoIsamxj7uwmqDHVCB5SaeF0gNTewcbZ9adLihMh/XZviy+ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjKCdLFACKdushXU/VRnOYeTTuWMB8GA1UdIwQY
MBaAFHvAmZjOOc/cpm7P2N06w4ZE08imMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMt
MjJkNmNkMWUxYThhLzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9lZDY1ZTUtZjgxZi00ZDlkLTg0MDMtMjJkNmNkMWUxYThh
LzEvZThDWm1NNDV6OXltYnNfWTNUckRoa1RUeUtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9usS98t
4Xu3lEXJ/9UNIiyrdJv6wuBxNCL75uuEwDlbY2GpRK2uZm6SKvjj2d5+LKWdjVnz
114Jdv9iF/gM7Irqaxndf8KyEye2y20KbkdVwwPjd6fD0L/HR23qkrFSQpYnRbTy
ekbqDlhXMQodAz7tmwU7Wd3Y/D1ow7p7Ltx4655lQJ1HzLI17TIykuFd7JZwZSAO
zmMD1ypihL+C5e27pJoV3s9Ps+jOR6eVQoAdxgiG1BnSjdLerEfxJ1qCKnTA+3qq
xUXZT2unXADJLAUE1l7oPbHs78SGD7EmMrBUIcYRaT41pKvchBU3sEPuIcWgeEi2
Fm2obXpnY4njVQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:38 2026 by rpki-client