Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
File: f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json)
Hash identifier: u/u1Xy5LT2YaFs5F9rRiAmfl3HMQrfu8W5smDBGfJOI=
Subject key identifier: 78:84:E4:7F:DB:21:95:1F:B4:91:78:FB:57:1F:C2:99:17:52:46:7C
Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Certificate issuer: /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Certificate serial: 019D389C666B7DF377116DAEFD60D8569DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 08:01:07 +0000
Manifest this update: Sun 29 Mar 2026 08:01:07 +0000
Manifest next update: Mon 30 Mar 2026 08:01:07 +0000
Files and hashes: 1: Ix0TT5IrmKD226rBGnrwxJKMQZE.roa (hash: kT8aM1b7+8tvbyvrC/BU4Ml9NWdK/DRuTi32q1ndZgU=)
2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: yrP60adTnloyYciipt8q05xqeUpeet6RE4dLBw4+SSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:66:6b:7d:f3:77:11:6d:ae:fd:60:d8:56:9d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Validity
Not Before: Mar 29 08:01:07 2026 GMT
Not After : Mar 30 08:01:07 2026 GMT
Subject: CN=7884e47fdb21951fb49178fb571fc2991752467c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:6e:14:4a:23:25:2d:12:7a:47:cc:73:84:
cf:27:5a:4e:5f:20:d9:46:15:30:63:92:46:a4:2e:
34:1d:d8:a5:4f:23:f8:6d:e6:9b:7a:f1:39:50:b1:
94:4e:4a:7f:52:9f:64:03:20:0b:74:01:5f:9e:d6:
be:0b:79:39:fe:c2:ae:fe:a3:e3:6d:0b:79:9f:12:
76:70:7b:5f:2b:af:4a:5f:2d:63:d0:93:58:42:89:
ab:50:71:c6:b5:dd:69:5a:2f:fc:ad:e4:57:0b:71:
18:f9:53:8c:e0:01:5d:03:1e:70:4f:01:7d:fe:41:
66:13:09:f4:e7:5a:6d:a1:19:ee:66:97:ef:ff:90:
98:3d:98:19:61:4e:ae:e5:f4:9f:ea:ce:f3:78:c9:
83:e1:f0:1f:0a:3b:5a:17:14:b2:a8:34:a0:0a:62:
b8:86:ce:dc:e1:ec:b8:cf:e9:f7:11:4a:45:49:49:
5e:b4:9a:ab:d6:1d:05:67:50:83:e9:23:84:ac:48:
f9:e8:19:8f:33:e9:be:70:6f:a4:f2:2e:b4:91:46:
09:83:ab:46:07:63:5c:bf:06:54:09:0c:98:a0:92:
99:02:1d:f1:ce:ad:13:02:69:13:44:98:a2:57:4e:
08:a4:31:ea:6d:bc:a8:a9:f3:da:f2:8b:09:1e:87:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:84:E4:7F:DB:21:95:1F:B4:91:78:FB:57:1F:C2:99:17:52:46:7C
X509v3 Authority Key Identifier:
keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d4:59:74:49:90:f8:bb:9d:cb:cf:74:e9:78:a6:f9:40:bf:
f7:86:a0:6c:b8:9a:b1:2e:a3:7a:ac:82:fe:1a:da:51:57:24:
14:97:b9:bc:cf:ae:1d:34:02:05:03:8f:7f:8b:53:77:f4:75:
32:fc:0a:d3:48:c2:0d:09:9a:bd:7f:07:e8:fa:64:78:3f:df:
20:56:12:7c:33:d6:5f:2e:76:c2:95:8e:22:6f:63:64:b8:10:
14:58:aa:50:75:f3:fd:20:87:8d:c6:86:34:ee:0a:d9:4b:0f:
c9:39:bf:f6:5b:f5:2d:8f:3c:20:15:c5:61:29:f5:17:d2:b1:
70:f9:45:b3:1b:b3:36:7e:0a:e5:81:08:a6:96:91:7d:b7:82:
62:d5:9f:32:3b:77:92:4f:18:21:0e:1c:92:26:cf:b5:b8:e2:
fd:a0:4d:7b:00:5c:04:d0:d7:c2:80:e0:2c:c6:92:e6:e6:5d:
a5:70:41:b5:e7:b7:b5:b4:be:2d:93:c1:61:67:c1:27:ce:cc:
a1:b6:ce:fa:97:51:8f:78:5b:0f:24:da:5f:97:cb:e4:cb:a7:
8a:36:9b:de:e5:f6:db:ad:2b:7c:aa:23:61:a7:4f:c8:50:59:
e9:fd:59:b3:d1:47:89:98:9f:50:c1:73:8c:ca:f2:4f:64:cb:
de:8f:36:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nGZrffN3EW2u/WDYVp3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYjQzZGUyMzdmZDBiNmEyODczODkyMzA5MjFkMjVhMmMy
ZWQxYTgwHhcNMjYwMzI5MDgwMTA3WhcNMjYwMzMwMDgwMTA3WjAzMTEwLwYDVQQD
Eyg3ODg0ZTQ3ZmRiMjE5NTFmYjQ5MTc4ZmI1NzFmYzI5OTE3NTI0NjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6xuFEojJS0SekfMc4TPJ1pOXyDZ
RhUwY5JGpC40HdilTyP4beabevE5ULGUTkp/Up9kAyALdAFfnta+C3k5/sKu/qPj
bQt5nxJ2cHtfK69KXy1j0JNYQomrUHHGtd1pWi/8reRXC3EY+VOM4AFdAx5wTwF9
/kFmEwn051ptoRnuZpfv/5CYPZgZYU6u5fSf6s7zeMmD4fAfCjtaFxSyqDSgCmK4
hs7c4ey4z+n3EUpFSUletJqr1h0FZ1CD6SOErEj56BmPM+m+cG+k8i60kUYJg6tG
B2NcvwZUCQyYoJKZAh3xzq0TAmkTRJiiV04IpDHqbbyoqfPa8osJHocX5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiE5H/bIZUftJF4+1cfwpkXUkZ8MB8GA1UdIwQY
MBaAFH+0PeI3/QtqKHOJIwkh0losLtGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjdROTRqZjlDMm9vYzRrakNTSFNXaXd1MGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kNGQxMmEtYWI0ZS00ZGJhLTk1ZGUt
YmM2MzcxMzBkZTZlLzEvZjdROTRqZjlDMm9vYzRrakNTSFNXaXd1MGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9kNGQxMmEtYWI0ZS00ZGJhLTk1ZGUtYmM2MzcxMzBkZTZl
LzEvZjdROTRqZjlDMm9vYzRrakNTSFNXaXd1MGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONRZdEmQ
+Ludy8906Xim+UC/94agbLiasS6jeqyC/hraUVckFJe5vM+uHTQCBQOPf4tTd/R1
MvwK00jCDQmavX8H6PpkeD/fIFYSfDPWXy52wpWOIm9jZLgQFFiqUHXz/SCHjcaG
NO4K2UsPyTm/9lv1LY88IBXFYSn1F9KxcPlFsxuzNn4K5YEIppaRfbeCYtWfMjt3
kk8YIQ4ckibPtbji/aBNewBcBNDXwoDgLMaS5uZdpXBBtee3tbS+LZPBYWfBJ87M
obbO+pdRj3hbDyTaX5fL5Munijab3uX2260rfKojYadPyFBZ6f1Zs9FHiZifUMFz
jMryT2TL3o82YQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:31 2026 by rpki-client