Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
File: fi4pGEMoSetx6V3EDRB56oZfYQk.mft (raw, json)
Hash identifier: ZyfdAC0/p8a3GM1kmQPl/lSoO2QAHcyBpgWUdv5/LVc=
Subject key identifier: 60:DF:B8:75:E9:80:52:A3:F6:EB:1F:6F:76:07:9F:51:FB:3E:5B:C2
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Certificate issuer: /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial: 019D38D34F32F3687F6A72CBFDDF06315923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
Manifest number: 0BAB
Signing time: Sun 29 Mar 2026 09:01:05 +0000
Manifest this update: Sun 29 Mar 2026 09:01:05 +0000
Manifest next update: Mon 30 Mar 2026 09:01:05 +0000
Files and hashes: 1: 1qfpefK-IKLyRX2WbiD-8WMvtIo.roa (hash: 92M9a8T4KZ/HeDVtYT2qczbOaea03AQx3PHj+D4fEdU=)
2: fi4pGEMoSetx6V3EDRB56oZfYQk.crl (hash: pj2MZ2270D51mI+Rm5O2HUG/5sYMxdUM7dR7dnLmcMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4f:32:f3:68:7f:6a:72:cb:fd:df:06:31:59:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Validity
Not Before: Mar 29 09:01:05 2026 GMT
Not After : Mar 30 09:01:05 2026 GMT
Subject: CN=60dfb875e98052a3f6eb1f6f76079f51fb3e5bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:13:4a:af:92:42:25:e5:e6:04:d9:a0:dd:
3f:d6:6d:4c:68:e5:25:6b:03:47:36:c4:a6:f9:9e:
2b:00:c3:62:dc:85:84:1e:2e:6a:de:ca:a5:a6:a0:
02:71:f1:82:64:20:84:d6:4c:3d:c2:43:fa:bb:ca:
da:64:0e:18:ed:cf:c6:e0:02:cb:f5:45:fb:1c:eb:
90:8c:65:96:7c:90:d8:eb:d7:1c:b7:b1:5b:43:e0:
dd:d5:aa:01:0f:5f:4a:bd:01:c3:04:09:ad:95:f7:
7c:6b:a3:b1:d0:70:49:26:bf:51:d4:9f:dc:7a:4a:
6e:ae:58:70:a3:79:70:35:04:fc:fb:3c:cb:2a:42:
60:05:d2:e8:e7:fc:2d:e0:24:c0:79:db:2d:0a:46:
ab:40:98:76:ca:7d:18:ff:7e:09:18:9b:17:a1:1a:
5c:ab:11:e8:4f:15:96:04:4f:1d:2b:fc:50:c6:1c:
0f:68:54:21:6c:1b:77:df:48:5d:d6:2c:93:df:c8:
87:76:23:2a:76:b1:25:1a:cc:13:93:69:10:2e:bb:
2d:90:54:2d:c2:f9:20:3f:d0:3e:6c:6d:bc:c2:84:
8d:24:84:6f:93:0b:ad:f7:8b:50:ec:e7:ab:8c:bc:
d1:8b:75:56:18:ad:84:a3:96:be:a5:22:5a:91:59:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DF:B8:75:E9:80:52:A3:F6:EB:1F:6F:76:07:9F:51:FB:3E:5B:C2
X509v3 Authority Key Identifier:
keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d7:08:52:cc:2b:49:e5:7b:a7:1a:b9:6c:51:e5:e0:60:06:
b1:fe:10:df:5c:f7:85:de:61:b1:7e:8a:e7:0c:64:49:3b:fa:
7f:8b:9f:49:8c:2a:8e:12:d2:23:3b:7e:00:7b:91:68:f9:8f:
55:29:ac:4a:73:15:4d:af:8a:c6:68:d1:c7:00:2f:7b:b2:e6:
c7:5b:f7:69:dc:d5:1d:d3:fd:be:62:15:9d:94:c6:72:db:d7:
9a:a6:03:ab:b5:ce:a2:0f:a0:c9:36:83:36:ed:91:8f:bc:bc:
55:93:bf:4e:ea:27:d0:ef:86:15:8b:09:39:fa:b5:4c:63:d4:
a3:35:42:d5:83:e8:10:7c:1b:8f:6f:10:04:6c:13:42:88:e7:
ed:c9:53:fe:f3:7a:f4:eb:bc:78:07:1e:30:37:1d:ce:93:26:
27:6d:4a:76:21:84:8a:d9:13:08:e1:28:4b:6b:54:cc:97:83:
e4:68:7c:b7:1c:d9:39:98:33:74:b7:59:52:60:ae:5f:90:e0:
20:d5:8b:62:f0:84:ae:5b:71:ce:30:3b:0c:29:17:00:02:21:
74:fa:09:5d:95:2b:6e:5e:cd:c2:d4:d2:df:bc:14:0c:13:a6:
0f:3e:36:c8:11:29:52:03:b0:bf:de:c0:c3:93:29:d6:02:ac:
24:59:80:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04008y82h/anLL/d8GMVkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmUyOTE4NDMyODQ5ZWI3MWU5NWRjNDBkMTA3OWVhODY1
ZjYxMDkwHhcNMjYwMzI5MDkwMTA1WhcNMjYwMzMwMDkwMTA1WjAzMTEwLwYDVQQD
Eyg2MGRmYjg3NWU5ODA1MmEzZjZlYjFmNmY3NjA3OWY1MWZiM2U1YmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjcTSq+SQiXl5gTZoN0/1m1MaOUl
awNHNsSm+Z4rAMNi3IWEHi5q3sqlpqACcfGCZCCE1kw9wkP6u8raZA4Y7c/G4ALL
9UX7HOuQjGWWfJDY69cct7FbQ+Dd1aoBD19KvQHDBAmtlfd8a6Ox0HBJJr9R1J/c
ekpurlhwo3lwNQT8+zzLKkJgBdLo5/wt4CTAedstCkarQJh2yn0Y/34JGJsXoRpc
qxHoTxWWBE8dK/xQxhwPaFQhbBt330hd1iyT38iHdiMqdrElGswTk2kQLrstkFQt
wvkgP9A+bG28woSNJIRvkwut94tQ7OerjLzRi3VWGK2Eo5a+pSJakVlguwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDfuHXpgFKj9usfb3YHn1H7PlvCMB8GA1UdIwQY
MBaAFH4uKRhDKEnrceldxA0QeeqGX2EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kODVmNDEtNzcwMS00NGMyLWJmMmUt
YzU2MTk4NTk0NTBjLzEvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kODVmNDEtNzcwMS00NGMyLWJmMmUtYzU2MTk4NTk0NTBj
LzEvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdcIUswr
SeV7pxq5bFHl4GAGsf4Q31z3hd5hsX6K5wxkSTv6f4ufSYwqjhLSIzt+AHuRaPmP
VSmsSnMVTa+KxmjRxwAve7Lmx1v3adzVHdP9vmIVnZTGctvXmqYDq7XOog+gyTaD
Nu2Rj7y8VZO/Tuon0O+GFYsJOfq1TGPUozVC1YPoEHwbj28QBGwTQojn7clT/vN6
9Ou8eAceMDcdzpMmJ21KdiGEitkTCOEoS2tUzJeD5Gh8txzZOZgzdLdZUmCuX5Dg
INWLYvCErltxzjA7DCkXAAIhdPoJXZUrbl7NwtTS37wUDBOmDz42yBEpUgOwv97A
w5Mp1gKsJFmAKg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:11 2026 by rpki-client