Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File: fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier: shbRGnUajWMSJR4NTPE7mArLQgFMdP6ZVh/MNe/DDsw=
Subject key identifier: 82:DE:85:15:38:23:F3:27:DA:F9:8D:59:50:50:DF:DC:F7:4D:8C:97
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial: 019D39414E582259D876D6EDDD31D62DB806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number: 1190
Signing time: Sun 29 Mar 2026 11:01:14 +0000
Manifest this update: Sun 29 Mar 2026 11:01:14 +0000
Manifest next update: Mon 30 Mar 2026 11:01:14 +0000
Files and hashes: 1: 2lNKUKMFEbf99s5ruYSyx3kpqBA.roa (hash: frbfhLN2U1B/a1tCRS0GooGGeNzUszrYFqD6uG7ghHw=)
2: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: ElwH+G+OJBpRWW2Me0Bb0LuFTscIlmkg3PB9+yX3b1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:4e:58:22:59:d8:76:d6:ed:dd:31:d6:2d:b8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Validity
Not Before: Mar 29 11:01:14 2026 GMT
Not After : Mar 30 11:01:14 2026 GMT
Subject: CN=82de85153823f327daf98d595050dfdcf74d8c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:74:4f:75:42:7f:c9:87:27:76:ac:3a:5d:
ab:db:1e:8d:96:17:05:c0:54:59:39:79:b8:f2:60:
8a:2c:08:71:d2:e4:55:f8:a6:a9:d7:f1:73:25:01:
e2:a9:ec:0f:c0:e7:ec:50:63:fc:c3:c8:2c:8b:ca:
bb:13:93:03:49:1b:1c:96:84:ee:6d:1c:eb:04:02:
97:5f:59:e9:1e:50:87:2d:e9:26:91:9d:1d:da:07:
d9:2b:50:f5:59:b4:ff:46:51:eb:50:fc:44:20:d2:
91:dd:a9:6f:97:00:82:d5:26:31:b7:05:df:9f:3c:
0f:04:5d:4c:89:1d:ac:9e:58:fd:7f:fd:99:c2:87:
6e:e6:17:cb:c9:f0:e8:46:d4:46:40:c0:f0:0f:ca:
83:1a:2e:76:ba:d4:8c:66:40:98:08:1c:45:a4:7c:
35:d8:37:43:af:eb:5a:22:ab:a9:df:a6:af:6e:dc:
df:2a:d3:dd:ec:d6:50:be:b8:61:9e:b0:5a:8f:b2:
10:0c:2f:c3:04:80:e0:3c:2c:aa:39:a9:d5:33:4d:
34:15:f2:45:d7:6f:7d:b7:7d:95:d7:cf:f8:65:e5:
29:53:f3:bf:0f:93:a6:f7:b8:35:e4:18:a1:9c:46:
8d:41:72:04:73:40:8e:f3:fc:de:65:f1:37:ae:ec:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DE:85:15:38:23:F3:27:DA:F9:8D:59:50:50:DF:DC:F7:4D:8C:97
X509v3 Authority Key Identifier:
keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:29:6d:43:b7:f7:b8:72:02:56:4d:b7:16:0b:f1:78:05:4b:
fa:39:ed:20:0b:ac:e3:ed:97:f4:d2:47:c8:c9:95:0f:fb:c4:
a5:21:58:a6:f5:0d:2a:32:3d:ae:86:c6:51:27:e9:81:a6:a1:
65:4c:d7:20:a7:16:2c:d8:b9:02:89:58:99:91:40:f8:87:f0:
0c:c1:ba:f5:38:c1:bf:af:4a:4e:ab:1d:ae:8c:a8:f8:12:ad:
b8:30:7a:43:4e:75:e0:b3:5b:37:17:57:60:fe:4a:fb:42:d5:
7f:5a:8b:34:84:4e:2b:23:c4:08:93:97:a5:df:6b:dd:cd:39:
b4:aa:dd:a9:c2:8b:e3:56:0f:c2:9b:79:81:de:68:bf:a8:91:
05:55:16:37:7a:2c:15:66:a8:76:1c:14:d2:c9:1c:8d:a6:c9:
ab:15:b1:14:97:af:a7:4e:98:2e:ba:2d:b7:73:f0:6d:57:3c:
20:e1:8b:3c:0e:74:40:44:70:cd:23:96:f1:08:94:45:97:e0:
3c:96:e0:03:43:66:74:d2:44:72:46:8c:97:3e:b8:f8:78:3b:
3c:fb:92:80:20:a0:6d:7d:71:5e:ab:e3:af:10:01:96:77:4e:
a6:ff:e1:ef:d2:10:67:07:de:12:a3:fa:e8:0d:db:e5:ca:63:
4d:1c:25:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QU5YIlnYdtbt3THWLbgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkN2NiMjk3OGJiNTRlYjU1N2NhZTNmZmIzNWU0NmFjNGQ1
YzIyYmYwHhcNMjYwMzI5MTEwMTE0WhcNMjYwMzMwMTEwMTE0WjAzMTEwLwYDVQQD
Eyg4MmRlODUxNTM4MjNmMzI3ZGFmOThkNTk1MDUwZGZkY2Y3NGQ4Yzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuh0T3VCf8mHJ3asOl2r2x6NlhcF
wFRZOXm48mCKLAhx0uRV+Kap1/FzJQHiqewPwOfsUGP8w8gsi8q7E5MDSRscloTu
bRzrBAKXX1npHlCHLekmkZ0d2gfZK1D1WbT/RlHrUPxEINKR3alvlwCC1SYxtwXf
nzwPBF1MiR2snlj9f/2Zwodu5hfLyfDoRtRGQMDwD8qDGi52utSMZkCYCBxFpHw1
2DdDr+taIqup36avbtzfKtPd7NZQvrhhnrBaj7IQDC/DBIDgPCyqOanVM000FfJF
1299t32V18/4ZeUpU/O/D5Om97g15BihnEaNQXIEc0CO8/zeZfE3ruyWRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILehRU4I/Mn2vmNWVBQ39z3TYyXMB8GA1UdIwQY
MBaAFH18speLtU61V8rj/7NeRqxNXCK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5Mzct
MjRjM2Q5ZTI1NDAxLzEvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5MzctMjRjM2Q5ZTI1NDAx
LzEvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASiltQ7f3
uHICVk23FgvxeAVL+jntIAus4+2X9NJHyMmVD/vEpSFYpvUNKjI9robGUSfpgaah
ZUzXIKcWLNi5AolYmZFA+IfwDMG69TjBv69KTqsdroyo+BKtuDB6Q0514LNbNxdX
YP5K+0LVf1qLNIROKyPECJOXpd9r3c05tKrdqcKL41YPwpt5gd5ov6iRBVUWN3os
FWaodhwU0skcjabJqxWxFJevp06YLrott3PwbVc8IOGLPA50QERwzSOW8QiURZfg
PJbgA0NmdNJEckaMlz64+Hg7PPuSgCCgbX1xXqvjrxABlndOpv/h79IQZwfeEqP6
6A3b5cpjTRwlsA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:39 2026 by rpki-client