Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: u6fvQZT68beNwMG8SjjUxZQpu4hsKMdxb72JuaNQkQM=
Subject key identifier: 25:74:DA:A3:18:FB:E2:69:6B:77:50:91:91:6E:7E:A5:17:EA:2D:19
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 019D38D35B02978DDD92FA9AFE9F141D4A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 12B7
Signing time: Sun 29 Mar 2026 09:01:08 +0000
Manifest this update: Sun 29 Mar 2026 09:01:08 +0000
Manifest next update: Mon 30 Mar 2026 09:01:08 +0000
Files and hashes: 1: M39X3O93meXiYEZMdDY1T4wsyVE.roa (hash: eG1u14rPe8MIz7sm8dVuxE9spwX9dFAUZNpT/Ys6fi4=)
2: f95OM8NcoOZXSRzDeGxPVA2Zw_o.roa (hash: 1YBKV57aXgzHn2Rt1P5Y2ZBSmwKVR2wirj1B4cjqRz4=)
3: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: A7yKEat08ytmtv2MPcRxGbdPg/+EPezwIaptx7Q92Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5b:02:97:8d:dd:92:fa:9a:fe:9f:14:1d:4a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Mar 29 09:01:08 2026 GMT
Not After : Mar 30 09:01:08 2026 GMT
Subject: CN=2574daa318fbe2696b775091916e7ea517ea2d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:60:ed:d5:96:a4:02:26:7e:f2:95:c4:98:6a:
a9:7a:71:09:36:27:d1:c9:6c:32:40:80:df:ff:72:
34:2a:8f:ba:e0:1a:00:8a:9f:44:f3:f2:ad:a1:c6:
27:7a:64:b2:ed:54:2d:d9:ef:b5:4e:36:e8:18:05:
84:12:dd:68:94:49:2d:1e:89:dd:78:d5:59:78:8c:
4c:a8:49:20:70:f1:b8:3c:c4:7a:d7:76:30:49:22:
eb:2d:1c:8d:a1:46:a2:ef:73:ad:06:48:6e:68:c7:
13:1f:34:1a:e2:95:9c:ac:f6:15:b2:e1:2f:7b:b0:
a2:7a:92:7b:98:d8:9c:de:4d:54:72:8f:da:8e:80:
c8:10:a6:91:40:a5:54:f0:6a:59:77:a2:9d:d9:f4:
b7:54:69:af:55:11:fd:37:88:36:34:ee:19:93:79:
aa:dc:8d:11:ab:cf:f1:ac:a3:e7:ff:91:b0:7b:d9:
62:69:51:83:6b:2d:fa:69:7e:35:fc:95:87:d4:67:
e7:86:62:c5:75:e8:17:cb:1c:30:80:b3:81:c6:a1:
52:d3:75:81:94:91:5c:eb:47:42:8c:33:63:6e:07:
39:7b:b8:e1:74:fa:d3:6d:9d:26:9f:93:5a:ad:67:
ba:8b:2e:bb:6f:4f:9f:47:a7:dc:16:fe:b5:ed:ff:
b4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:74:DA:A3:18:FB:E2:69:6B:77:50:91:91:6E:7E:A5:17:EA:2D:19
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:15:58:98:8d:a9:56:63:51:54:c6:d3:48:3f:1c:36:b4:ec:
52:ab:30:9e:36:91:21:8b:1c:da:f6:86:a8:ae:7f:a2:4f:44:
57:7f:17:8c:5b:4d:20:85:18:09:59:43:0d:ce:06:72:20:8e:
01:63:40:9a:75:d8:1a:cb:93:36:54:80:64:c7:52:f2:8b:e2:
07:54:c1:7c:0b:1e:99:59:4e:1c:59:23:13:17:b1:2e:e4:da:
14:3f:91:c2:ca:a7:e3:5a:05:f8:9e:7f:80:2a:c1:6a:d1:a0:
86:ba:de:fe:9d:0a:03:66:9f:92:0f:4b:50:c4:ab:20:15:29:
24:6e:06:65:94:31:ea:e6:25:98:84:a2:18:89:c8:54:32:0c:
d4:66:eb:7a:df:ac:4d:dc:09:ec:a2:67:a5:88:ee:cf:7c:f7:
00:bb:0d:74:2c:65:c5:5f:0b:36:ba:d5:73:73:c9:05:29:70:
61:49:7e:fb:7a:0b:be:ca:2e:7f:23:96:72:dd:5a:c9:de:b9:
b9:fb:d7:01:d2:6e:0a:6a:25:8d:82:50:47:2d:14:a4:1e:2e:
93:05:fd:ae:3e:9c:40:2b:22:93:11:4c:77:8d:81:43:8b:bc:
01:b0:31:7d:eb:e0:c6:68:f2:80:e7:57:16:94:8a:b9:92:32:
fd:15:ba:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0401sCl43dkvqa/p8UHUozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYjhiODczMDM3NWM5Mjg1M2I5OWFlM2FmNTc5N2MxMjNk
ZDE1MDcwHhcNMjYwMzI5MDkwMTA4WhcNMjYwMzMwMDkwMTA4WjAzMTEwLwYDVQQD
EygyNTc0ZGFhMzE4ZmJlMjY5NmI3NzUwOTE5MTZlN2VhNTE3ZWEyZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmDt1ZakAiZ+8pXEmGqpenEJNifR
yWwyQIDf/3I0Ko+64BoAip9E8/KtocYnemSy7VQt2e+1TjboGAWEEt1olEktHond
eNVZeIxMqEkgcPG4PMR613YwSSLrLRyNoUai73OtBkhuaMcTHzQa4pWcrPYVsuEv
e7CiepJ7mNic3k1Uco/ajoDIEKaRQKVU8GpZd6Kd2fS3VGmvVRH9N4g2NO4Zk3mq
3I0Rq8/xrKPn/5Gwe9liaVGDay36aX41/JWH1GfnhmLFdegXyxwwgLOBxqFS03WB
lJFc60dCjDNjbgc5e7jhdPrTbZ0mn5NarWe6iy67b0+fR6fcFv617f+0twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCV02qMY++Jpa3dQkZFufqUX6i0ZMB8GA1UdIwQY
MBaAFHy4uHMDdckoU7ma469Xl8Ej3RUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAt
Mzg0MTFhMzEyZDg2LzEvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hOWNlZDItM2ZhNC00NmVkLTg4ZTAtMzg0MTFhMzEyZDg2
LzEvZkxpNGN3TjF5U2hUdVpyanIxZVh3U1BkRlFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRVYmI2p
VmNRVMbTSD8cNrTsUqswnjaRIYsc2vaGqK5/ok9EV38XjFtNIIUYCVlDDc4GciCO
AWNAmnXYGsuTNlSAZMdS8oviB1TBfAsemVlOHFkjExexLuTaFD+Rwsqn41oF+J5/
gCrBatGghrre/p0KA2afkg9LUMSrIBUpJG4GZZQx6uYlmISiGInIVDIM1Gbret+s
TdwJ7KJnpYjuz3z3ALsNdCxlxV8LNrrVc3PJBSlwYUl++3oLvsoufyOWct1ayd65
ufvXAdJuCmoljYJQRy0UpB4ukwX9rj6cQCsikxFMd42BQ4u8AbAxfevgxmjygOdX
FpSKuZIy/RW6gQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:06 2026 by rpki-client