Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: JqiaLltxpnPYt0Y0ouLU7iPpjpPCcUIQbVWaEVPpAiM=
Subject key identifier: 83:8A:3D:F5:F2:1D:37:6C:36:65:46:07:BE:02:33:18:49:46:7D:F6
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 019D39AE5A90DD1527201581360DE2392DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 0FA4
Signing time: Sun 29 Mar 2026 13:00:20 +0000
Manifest this update: Sun 29 Mar 2026 13:00:20 +0000
Manifest next update: Mon 30 Mar 2026 13:00:20 +0000
Files and hashes: 1: CUW86B2DR7frkjRXhMj0tpGfzR0.roa (hash: +AMltbCrgBtIU8+BHyMcK4ZbfgEd7AgGyNWp1F2ZA24=)
2: FG6edaLthXtNRXgQz784XZNgYd8.roa (hash: 5nX8hTmpLoy7w0liaeZHVLXCjdNjFlEQzahTMpZo9sE=)
3: FOLDqKxEVMdWWcpgZnPDCyuO3M4.roa (hash: 0gkvmBgKUujlvBMJPfV/1P6cRqx430AdiJwroTPunR0=)
4: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: HP0t9vhBYDAKBz/RLPTgaRmcbgqQcrJLHtfIofIgj5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:5a:90:dd:15:27:20:15:81:36:0d:e2:39:2d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Mar 29 13:00:20 2026 GMT
Not After : Mar 30 13:00:20 2026 GMT
Subject: CN=838a3df5f21d376c36654607be02331849467df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:bf:ab:a8:9a:86:e2:ed:7c:46:4a:67:c6:
fb:c7:0d:64:4f:ea:89:fe:f3:30:c5:8c:60:08:64:
3b:99:78:1b:c6:33:e8:1f:f7:d4:27:cd:14:c9:2b:
f3:de:c3:88:27:88:6b:f1:26:ea:c6:58:65:9b:29:
28:50:94:b7:1d:33:a3:06:b5:82:d1:4c:2f:1d:4a:
0b:3d:f6:74:ec:d9:c5:f2:28:35:0e:81:ba:ee:73:
63:35:1d:4d:0b:4a:36:41:30:0b:32:38:d7:56:8b:
ac:ce:d5:ed:b5:32:9e:91:c5:ba:05:1c:09:02:35:
5a:e3:53:98:5d:65:99:1a:9e:98:12:0e:39:5f:b8:
bd:d9:59:9f:9a:ad:21:6c:36:59:a1:7c:ea:eb:3f:
57:eb:91:0a:16:bb:ed:cb:19:52:0c:ad:22:71:17:
3d:86:66:5d:5f:a1:53:89:e3:84:8a:50:56:9d:f3:
da:1c:9b:47:aa:a1:a5:91:62:cc:4e:49:46:86:32:
02:e9:b0:fd:44:b5:38:58:f6:7f:44:19:7c:97:31:
57:c6:34:11:25:66:03:4f:cd:4b:95:df:01:cf:ef:
31:07:3f:62:ed:44:13:46:1e:7c:69:16:77:94:d7:
9c:7e:55:5c:ba:e7:19:80:9f:b6:87:f1:3b:74:61:
40:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8A:3D:F5:F2:1D:37:6C:36:65:46:07:BE:02:33:18:49:46:7D:F6
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3b:74:69:7c:bc:b8:ba:a7:9f:ca:d2:ba:d3:85:0c:57:07:
d1:78:f5:8f:0c:47:4a:ca:20:8f:a7:d8:e7:6c:1b:d8:de:22:
ed:f0:0f:89:50:b9:89:26:3a:16:f8:a4:55:30:43:c7:21:23:
7f:2a:bd:a1:ff:ff:3c:a5:5c:5d:f1:b9:54:d9:f0:b8:17:44:
65:df:52:7f:d4:7a:26:fc:c4:a3:ff:82:31:3d:7a:3d:b1:bf:
fc:e8:a4:2b:d4:04:c0:9c:8d:ec:3b:27:3f:db:56:33:76:95:
4c:b1:c4:e9:2c:64:b4:08:e6:9d:f1:af:91:7b:e0:83:99:32:
6d:0a:ec:34:ee:28:f9:3e:30:53:aa:4c:37:eb:9b:70:8b:3c:
bc:fa:dd:cf:14:89:ce:85:68:a7:ce:48:dd:61:9a:2e:2f:11:
18:b7:a2:71:ac:fd:28:fd:34:6e:c1:0e:6a:1c:18:90:07:dd:
96:1c:5c:53:50:c1:ef:cc:48:1b:33:ad:ea:bc:c7:e2:39:a4:
58:46:71:cc:25:98:79:15:18:30:89:9c:32:76:35:c0:c0:0e:
21:0d:cb:bb:d8:ce:67:16:3c:73:0f:c1:fe:83:f0:7f:21:c5:
f5:a3:8a:44:a7:d7:45:d5:b5:0e:8f:b3:03:7c:f1:bf:43:7c:
b5:a8:a1:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rlqQ3RUnIBWBNg3iOS3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw
OTRkYTAwHhcNMjYwMzI5MTMwMDIwWhcNMjYwMzMwMTMwMDIwWjAzMTEwLwYDVQQD
Eyg4MzhhM2RmNWYyMWQzNzZjMzY2NTQ2MDdiZTAyMzMxODQ5NDY3ZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxO/q6iahuLtfEZKZ8b7xw1kT+qJ
/vMwxYxgCGQ7mXgbxjPoH/fUJ80UySvz3sOIJ4hr8SbqxlhlmykoUJS3HTOjBrWC
0UwvHUoLPfZ07NnF8ig1DoG67nNjNR1NC0o2QTALMjjXVousztXttTKekcW6BRwJ
AjVa41OYXWWZGp6YEg45X7i92Vmfmq0hbDZZoXzq6z9X65EKFrvtyxlSDK0icRc9
hmZdX6FTieOEilBWnfPaHJtHqqGlkWLMTklGhjIC6bD9RLU4WPZ/RBl8lzFXxjQR
JWYDT81Lld8Bz+8xBz9i7UQTRh58aRZ3lNecflVcuucZgJ+2h/E7dGFA3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOKPfXyHTdsNmVGB74CMxhJRn32MB8GA1UdIwQY
MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt
NmRjMWY1NjAzMWViLzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi
LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzt0aXy8
uLqnn8rSutOFDFcH0Xj1jwxHSsogj6fY52wb2N4i7fAPiVC5iSY6FvikVTBDxyEj
fyq9of//PKVcXfG5VNnwuBdEZd9Sf9R6JvzEo/+CMT16PbG//OikK9QEwJyN7Dsn
P9tWM3aVTLHE6SxktAjmnfGvkXvgg5kybQrsNO4o+T4wU6pMN+ubcIs8vPrdzxSJ
zoVop85I3WGaLi8RGLeicaz9KP00bsEOahwYkAfdlhxcU1DB78xIGzOt6rzH4jmk
WEZxzCWYeRUYMImcMnY1wMAOIQ3Lu9jOZxY8cw/B/oPwfyHF9aOKRKfXRdW1Do+z
A3zxv0N8taih/Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:31:56 2026 by rpki-client