Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
File: FyU3YBoxaXQEki2VfnRFD1qcvnM.mft (raw, json)
Hash identifier: /tIQbCCJ8956oxHUcS113u5RMHl+wU5IykuM7Zw2r48=
Subject key identifier: BC:99:27:E3:83:3C:2E:7C:34:93:BC:AD:DA:E6:51:8B:AF:55:52:80
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 019D6574F16FE3EA4F69643CB68A7BF75238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
Manifest number: 1325
Signing time: Tue 07 Apr 2026 01:00:55 +0000
Manifest this update: Tue 07 Apr 2026 01:00:55 +0000
Manifest next update: Wed 08 Apr 2026 01:00:55 +0000
Files and hashes: 1: 5Hk9v8vwqFZwgv90_mBCAmlMuuM.roa (hash: NQu2pFqMrFP9QqXLaVI4TDxhucoHe3KI9PQTNgRjuVY=)
2: FyU3YBoxaXQEki2VfnRFD1qcvnM.crl (hash: iKTEnidTKX5L6Rk0fY+SWf50co2m8DoklnaHOLZ7Cgc=)
3: QNm4qXfmUyEs6AgWVoAd3p7xDto.roa (hash: 5WxbazwI9YUcD8mk4Tz0dUwbVJ0crE/g/cMT5agZZgM=)
4: TCAvFFGRvOGj7ZTsHmq6PaB3UoY.roa (hash: cry3FkNL2HaffYnu7M9Y0TK7ndTp3ozAuFnKjTG+Nyk=)
5: UMUzqPaZVIHXXirp9-_OtB8U8ZU.roa (hash: cbHmOZDkt9KB/VNrOStC9gT2Pe3X9bm47dYrL5UFqvE=)
6: lo4AMmkJU70dpL16bJEcQX1CnuA.roa (hash: qDQHS3ec66GmrYNs8OCEy2n0tsEz1PnlU1U37E1h6TM=)
7: xnCjSj8cwOG8sjfJr8_Y6BlXt0I.roa (hash: CSD65KQy0rhwcXUVAqtvLoXcHnYbl0w+ZOLg5KhLlPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:65:74:f1:6f:e3:ea:4f:69:64:3c:b6:8a:7b:f7:52:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Apr 7 01:00:55 2026 GMT
Not After : Apr 8 01:00:55 2026 GMT
Subject: CN=bc9927e3833c2e7c3493bcaddae6518baf555280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:75:a9:22:78:f8:09:b5:76:38:74:25:b9:
31:b6:62:b4:96:87:f1:03:2d:31:26:3c:47:fc:e1:
47:35:1a:c0:0c:84:c5:2d:2c:e8:d3:4c:cd:b5:f3:
13:2c:f3:27:f7:a5:d7:44:eb:40:17:58:d7:b5:9f:
14:70:ef:70:86:10:eb:44:1a:00:a9:d0:64:d0:a4:
d3:42:59:7b:a6:d2:8b:7e:d3:09:9f:66:60:d1:60:
38:36:81:01:59:76:ce:41:96:b4:45:e1:45:07:8b:
00:b5:a5:73:29:75:94:91:f0:61:1e:fd:8c:90:03:
74:6d:71:54:56:4e:e8:6c:a2:37:f6:7e:94:ec:e9:
c0:8c:9d:76:71:c0:81:19:39:c2:f3:a2:9b:d7:86:
12:60:b8:4c:1f:79:8f:15:1b:22:b4:1c:98:29:a8:
e9:76:28:b5:0f:38:77:88:c2:3c:9a:cd:6d:92:f7:
8a:c3:eb:35:63:4a:fe:fb:77:a8:e9:d2:8a:54:f8:
9b:92:f3:c7:0b:7c:b6:a6:d8:82:2a:30:40:15:f0:
08:d2:57:93:80:db:ff:e9:42:19:56:3a:2b:bc:3b:
ef:6e:e3:9d:fa:47:67:34:ac:6f:e7:1c:42:6b:05:
60:d6:f4:af:31:a2:53:6c:dd:0a:79:19:68:82:fc:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:99:27:E3:83:3C:2E:7C:34:93:BC:AD:DA:E6:51:8B:AF:55:52:80
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:99:77:29:4e:42:39:e4:2e:59:ef:9c:2c:da:5f:33:86:51:
a7:75:9b:25:00:7e:69:11:dc:a4:01:ca:87:a3:58:87:80:1c:
84:5d:d9:82:57:c8:da:8c:72:a3:f1:6b:9c:db:6e:8a:ad:74:
ca:11:3c:98:5c:46:b7:4a:0e:f6:ec:b1:65:35:e5:d0:79:61:
8b:49:e0:12:ff:c4:7a:75:63:99:1d:a9:cd:f1:d5:00:8f:e7:
13:54:e1:ea:2a:93:9a:9f:19:e6:c5:1b:e3:bc:43:62:33:63:
ee:81:fb:60:72:4f:eb:ea:23:e5:cf:d7:54:24:ba:89:14:11:
b1:72:42:da:89:07:08:c6:04:22:21:f0:d2:bb:75:73:74:e4:
08:0c:fb:01:48:a4:91:8d:91:7a:89:3b:71:8b:f6:15:a1:f3:
1e:de:97:6e:3f:7a:a2:62:b1:d1:b6:96:0c:f4:f5:46:b7:3e:
19:b2:f0:53:ec:ba:ee:68:9d:31:64:29:11:a0:d6:dc:bf:5f:
f5:b6:f4:6d:ba:60:4c:3c:be:bb:15:4b:20:06:3d:ec:f1:06:
51:dd:91:66:8c:97:81:20:99:eb:7e:29:78:16:a7:01:ff:da:
01:b9:6a:24:b0:60:da:d1:26:94:bb:a3:96:af:a6:f0:90:4c:
04:58:4e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1ldPFv4+pPaWQ8top791I4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjUzNzYwMWEzMTY5NzQwNDkyMmQ5NTdlNzQ0NTBmNWE5
Y2JlNzMwHhcNMjYwNDA3MDEwMDU1WhcNMjYwNDA4MDEwMDU1WjAzMTEwLwYDVQQD
EyhiYzk5MjdlMzgzM2MyZTdjMzQ5M2JjYWRkYWU2NTE4YmFmNTU1MjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7J1qSJ4+Am1djh0JbkxtmK0lofx
Ay0xJjxH/OFHNRrADITFLSzo00zNtfMTLPMn96XXROtAF1jXtZ8UcO9whhDrRBoA
qdBk0KTTQll7ptKLftMJn2Zg0WA4NoEBWXbOQZa0ReFFB4sAtaVzKXWUkfBhHv2M
kAN0bXFUVk7obKI39n6U7OnAjJ12ccCBGTnC86Kb14YSYLhMH3mPFRsitByYKajp
dii1Dzh3iMI8ms1tkveKw+s1Y0r++3eo6dKKVPibkvPHC3y2ptiCKjBAFfAI0leT
gNv/6UIZVjorvDvvbuOd+kdnNKxv5xxCawVg1vSvMaJTbN0KeRlogvyMmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyZJ+ODPC58NJO8rdrmUYuvVVKAMB8GA1UdIwQY
MBaAFBclN2AaMWl0BJItlX50RQ9anL5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQt
ZTYwNGI2MWJlMGVhLzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQtZTYwNGI2MWJlMGVh
LzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZl3KU5C
OeQuWe+cLNpfM4ZRp3WbJQB+aRHcpAHKh6NYh4AchF3ZglfI2oxyo/FrnNtuiq10
yhE8mFxGt0oO9uyxZTXl0Hlhi0ngEv/EenVjmR2pzfHVAI/nE1Th6iqTmp8Z5sUb
47xDYjNj7oH7YHJP6+oj5c/XVCS6iRQRsXJC2okHCMYEIiHw0rt1c3TkCAz7AUik
kY2Reok7cYv2FaHzHt6Xbj96omKx0baWDPT1Rrc+GbLwU+y67midMWQpEaDW3L9f
9bb0bbpgTDy+uxVLIAY97PEGUd2RZoyXgSCZ634peBanAf/aAblqJLBg2tEmlLuj
lq+m8JBMBFhOcA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 12:04:36 2026 by rpki-client