Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.mft
File: Fe_NafEwzkzLXCCxDAM6Vlph34U.mft (raw, json)
Hash identifier: VW+46fxd1JH7l9R1/lZ2bZqOZmXOBTWwfCKg9tYrBpw=
Subject key identifier: 5E:2C:FF:44:12:6B:5C:41:79:F5:18:E8:25:B9:2F:BE:F3:28:6D:7F
Authority key identifier: 15:EF:CD:69:F1:30:CE:4C:CB:5C:20:B1:0C:03:3A:56:5A:61:DF:85
Certificate issuer: /CN=15efcd69f130ce4ccb5c20b10c033a565a61df85
Certificate serial: 019D3A543260E46B44B1337C67CC671775CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fe_NafEwzkzLXCCxDAM6Vlph34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.mft
Manifest number: 45
Signing time: Sun 29 Mar 2026 16:01:29 +0000
Manifest this update: Sun 29 Mar 2026 16:01:29 +0000
Manifest next update: Mon 30 Mar 2026 16:01:29 +0000
Files and hashes: 1: 89jvJXnh1sGEP1l3k8ak_3r52QU.roa (hash: x9Fl/XRXMk/32nTJD0wvoKgIkMONRMEb7sPTQo8EEEc=)
2: Fe_NafEwzkzLXCCxDAM6Vlph34U.crl (hash: 9zp82jyMREyqZiJx9XTbCvwjhVIepuWU+CFrzx+UuHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fe_NafEwzkzLXCCxDAM6Vlph34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:32:60:e4:6b:44:b1:33:7c:67:cc:67:17:75:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15efcd69f130ce4ccb5c20b10c033a565a61df85
Validity
Not Before: Mar 29 16:01:29 2026 GMT
Not After : Mar 30 16:01:29 2026 GMT
Subject: CN=5e2cff44126b5c4179f518e825b92fbef3286d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:17:4b:45:97:1c:8b:f4:b9:db:00:c2:01:
91:ea:71:fe:53:37:9b:64:7e:14:11:8c:26:57:47:
d2:7b:c5:cc:e6:41:74:f1:c3:72:6c:93:e7:96:1e:
61:1b:38:b7:7b:d6:c1:09:63:ec:47:12:e9:85:06:
26:86:6e:9f:d2:fa:a3:4a:11:54:f5:72:10:81:f1:
06:0d:87:b4:9b:9a:17:4f:a2:77:17:4e:9c:d8:2c:
28:8c:f8:9b:f7:49:a5:7a:c9:a2:86:14:d4:46:6e:
25:c0:e0:f0:f2:e3:96:fb:cc:52:8d:12:55:33:74:
2a:09:e0:25:49:58:ce:81:1a:58:56:7b:11:1d:93:
83:ed:4d:ff:e7:3f:a3:71:93:6d:d0:6c:06:0d:9f:
66:33:c5:d6:fc:9a:67:56:a9:22:7c:5f:d9:b6:99:
46:78:3f:d8:2b:ea:ed:c0:df:8b:e5:09:23:c0:7d:
75:5c:ac:9e:8a:df:e0:6e:88:28:09:60:59:e8:d5:
1e:c4:bb:00:62:9b:bf:71:8d:d4:2a:da:f4:a5:7e:
ad:e8:25:49:6f:c3:70:c9:d0:59:b4:31:e2:31:ac:
d4:23:62:a4:30:44:ae:48:74:be:9e:e9:2f:c9:83:
aa:e0:3d:e3:7b:58:e0:47:fe:37:b9:50:bc:44:df:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2C:FF:44:12:6B:5C:41:79:F5:18:E8:25:B9:2F:BE:F3:28:6D:7F
X509v3 Authority Key Identifier:
keyid:15:EF:CD:69:F1:30:CE:4C:CB:5C:20:B1:0C:03:3A:56:5A:61:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fe_NafEwzkzLXCCxDAM6Vlph34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d5:19:b4:46:74:3d:1f:5e:01:cd:37:66:c2:01:58:f2:99:
f8:8b:8c:86:5c:cb:19:ab:b6:be:5e:e0:6d:19:b1:8d:b0:35:
bc:0f:09:61:41:76:1e:6a:ff:95:a6:75:03:2f:fb:7e:fe:f1:
c0:83:91:9a:6c:dd:16:cb:89:fb:e4:d2:ea:ed:1a:c8:37:c2:
2c:13:21:71:f2:1c:fa:61:55:73:8c:3c:8e:75:b2:e5:1d:3f:
1e:b0:50:bb:c2:51:60:d2:5d:ea:5a:ed:4c:3e:3e:a9:7b:67:
48:58:ef:e9:d1:0b:5d:76:e2:60:76:1e:c9:8a:28:b6:92:57:
ec:74:89:58:fe:fd:55:94:a9:72:44:80:3d:d3:7c:8d:e6:d7:
43:3c:33:15:7c:52:e4:77:78:48:e6:a9:a8:c3:89:57:df:66:
6c:9e:2e:9f:3f:33:45:1d:38:cb:73:03:e1:da:04:7d:1c:19:
f0:47:16:de:65:5d:7a:d0:93:30:32:c6:58:c8:33:6f:c5:3b:
da:80:d8:c6:c2:dd:00:2a:ac:01:b2:58:40:02:5c:45:c2:3a:
a2:de:75:a2:7f:e5:68:82:2f:3e:0c:ab:89:71:0e:74:8c:a7:
8a:b8:61:b7:b9:71:4c:cf:e9:a6:f4:24:ed:d0:02:d4:cf:b2:
e0:d3:de:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06VDJg5GtEsTN8Z8xnF3XNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZWZjZDY5ZjEzMGNlNGNjYjVjMjBiMTBjMDMzYTU2NWE2
MWRmODUwHhcNMjYwMzI5MTYwMTI5WhcNMjYwMzMwMTYwMTI5WjAzMTEwLwYDVQQD
Eyg1ZTJjZmY0NDEyNmI1YzQxNzlmNTE4ZTgyNWI5MmZiZWYzMjg2ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDIXS0WXHIv0udsAwgGR6nH+Uzeb
ZH4UEYwmV0fSe8XM5kF08cNybJPnlh5hGzi3e9bBCWPsRxLphQYmhm6f0vqjShFU
9XIQgfEGDYe0m5oXT6J3F06c2CwojPib90mlesmihhTURm4lwODw8uOW+8xSjRJV
M3QqCeAlSVjOgRpYVnsRHZOD7U3/5z+jcZNt0GwGDZ9mM8XW/JpnVqkifF/ZtplG
eD/YK+rtwN+L5QkjwH11XKyeit/gbogoCWBZ6NUexLsAYpu/cY3UKtr0pX6t6CVJ
b8NwydBZtDHiMazUI2KkMESuSHS+nukvyYOq4D3je1jgR/43uVC8RN/VWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4s/0QSa1xBefUY6CW5L77zKG1/MB8GA1UdIwQY
MBaAFBXvzWnxMM5My1wgsQwDOlZaYd+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmVfTmFmRXd6a3pMWENDeERBTTZWbHBoMzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iMzk3MzktMjcwNS00ZmFiLWFmNDIt
YWUyMjVhZDZkNjk5LzEvRmVfTmFmRXd6a3pMWENDeERBTTZWbHBoMzRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iMzk3MzktMjcwNS00ZmFiLWFmNDItYWUyMjVhZDZkNjk5
LzEvRmVfTmFmRXd6a3pMWENDeERBTTZWbHBoMzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9UZtEZ0
PR9eAc03ZsIBWPKZ+IuMhlzLGau2vl7gbRmxjbA1vA8JYUF2Hmr/laZ1Ay/7fv7x
wIORmmzdFsuJ++TS6u0ayDfCLBMhcfIc+mFVc4w8jnWy5R0/HrBQu8JRYNJd6lrt
TD4+qXtnSFjv6dELXXbiYHYeyYootpJX7HSJWP79VZSpckSAPdN8jebXQzwzFXxS
5Hd4SOapqMOJV99mbJ4unz8zRR04y3MD4doEfRwZ8EcW3mVdetCTMDLGWMgzb8U7
2oDYxsLdACqsAbJYQAJcRcI6ot51on/laIIvPgyriXEOdIynirhht7lxTM/ppvQk
7dAC1M+y4NPezA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:22 2026 by rpki-client