Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier: bIPQN4wGcZnzsZPaZGRWlpsad0iPEomRIN/3kDaPgkk=
Subject key identifier: 18:F8:A6:BD:DB:04:FD:30:F5:A3:4D:A2:F2:89:ED:06:D1:6F:18:FB
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 019D371BFDA0DA0F34D072BF9FFD98560449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 01:01:14 +0000
Manifest this update: Sun 29 Mar 2026 01:01:14 +0000
Manifest next update: Mon 30 Mar 2026 01:01:14 +0000
Files and hashes: 1: MGJZDZy48CKe0KFJgl-NtQKce1M.roa (hash: 7o0STbO6YBA8EIAiJhdAaPfZW/eDmWBTpcQhpZ1hTbI=)
2: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: wqAHLzYHLLXjHZM0jsEQ47WYUFS5YxBM+SRXmNXTJ+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:fd:a0:da:0f:34:d0:72:bf:9f:fd:98:56:04:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Mar 29 01:01:14 2026 GMT
Not After : Mar 30 01:01:14 2026 GMT
Subject: CN=18f8a6bddb04fd30f5a34da2f289ed06d16f18fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:23:91:1e:c1:cf:23:a4:8f:8f:73:cc:9e:0b:
7a:59:c1:fc:df:a6:c2:55:2a:1c:05:d1:18:31:d3:
a0:4c:10:c0:99:76:8f:cd:88:d5:65:c3:0d:47:b8:
1c:4f:d1:e4:b8:b6:f3:57:1e:c1:ad:43:c2:4d:0f:
3d:30:42:da:08:40:65:26:86:8e:37:ab:f4:08:83:
73:85:68:51:c1:38:0a:79:22:2a:ea:6f:e9:b9:78:
4d:6f:cd:c7:9c:0c:55:10:49:d5:c0:9f:f1:39:3b:
0d:c7:1f:e3:55:6a:ba:2b:d4:34:23:cb:85:4c:55:
9e:89:5b:e6:f3:4e:f1:a7:84:03:d4:df:47:17:ee:
57:21:52:28:33:42:27:50:f6:94:9e:20:37:67:05:
ef:1a:35:88:b7:23:cb:48:88:19:34:01:33:cc:4d:
18:b1:53:55:66:4a:17:99:de:c6:5d:8c:8c:76:a7:
c4:5a:48:2b:0d:4b:12:1e:2c:90:e5:34:64:73:f6:
9f:f4:77:34:85:c5:55:20:fa:fa:3e:1b:ce:28:71:
0c:a3:23:0a:3b:00:52:3f:56:cf:0b:b2:b9:9a:af:
26:fc:fb:5c:29:01:eb:c8:ee:6d:72:f3:5f:fc:95:
82:2b:b2:84:1d:ca:66:5c:58:ba:04:c1:f9:d0:cd:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F8:A6:BD:DB:04:FD:30:F5:A3:4D:A2:F2:89:ED:06:D1:6F:18:FB
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9b:ed:45:1a:10:df:43:f7:c5:59:2f:60:25:8d:d9:50:2c:
cb:dc:6f:89:2e:25:40:04:43:cb:93:42:1c:63:ee:73:2e:a6:
82:71:a2:9f:a7:3e:6f:ca:45:26:f0:4c:be:06:d5:f6:75:79:
f2:a2:84:a9:7f:2a:91:25:ea:55:ad:d8:c5:2f:67:d1:95:94:
cc:fc:0c:ee:bf:fd:5c:1a:bf:69:2b:2f:93:8e:c3:f5:09:4d:
f7:7d:f8:c5:70:fe:14:50:17:a9:e1:9e:3f:25:4c:94:a8:fa:
24:29:df:a3:1b:df:eb:9b:39:36:3b:48:b2:1a:91:b8:20:2b:
c9:af:87:e3:58:2a:a9:8d:0e:43:f1:d6:f2:44:bc:af:2f:9c:
60:51:62:2a:b5:d5:cd:66:49:70:30:fe:8f:1e:1b:cb:a2:6a:
43:41:f0:d5:ef:ee:c3:9e:fe:d6:bd:ce:b7:b9:2f:ed:47:a5:
8b:95:dd:45:52:ca:f6:8f:b1:57:d6:86:32:3e:83:ae:85:f2:
b1:2c:0e:b7:a2:ee:24:40:94:f9:f1:97:de:85:f5:37:14:a6:
af:7b:f6:c9:ae:21:48:6e:69:19:a2:fa:a2:e1:a3:47:d7:f6:
a4:1a:18:01:d2:f7:f3:a1:64:cd:9a:38:aa:e5:9a:48:8d:13:
81:d7:6e:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G/2g2g800HK/n/2YVgRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTE0MTZhZTM5MjlkZjM3YmY2NmE0NTljZDNhY2E2Mzg5
MWU5NDYwHhcNMjYwMzI5MDEwMTE0WhcNMjYwMzMwMDEwMTE0WjAzMTEwLwYDVQQD
EygxOGY4YTZiZGRiMDRmZDMwZjVhMzRkYTJmMjg5ZWQwNmQxNmYxOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiORHsHPI6SPj3PMngt6WcH836bC
VSocBdEYMdOgTBDAmXaPzYjVZcMNR7gcT9HkuLbzVx7BrUPCTQ89MELaCEBlJoaO
N6v0CINzhWhRwTgKeSIq6m/puXhNb83HnAxVEEnVwJ/xOTsNxx/jVWq6K9Q0I8uF
TFWeiVvm807xp4QD1N9HF+5XIVIoM0InUPaUniA3ZwXvGjWItyPLSIgZNAEzzE0Y
sVNVZkoXmd7GXYyMdqfEWkgrDUsSHiyQ5TRkc/af9Hc0hcVVIPr6PhvOKHEMoyMK
OwBSP1bPC7K5mq8m/PtcKQHryO5tcvNf/JWCK7KEHcpmXFi6BMH50M3zZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBj4pr3bBP0w9aNNovKJ7QbRbxj7MB8GA1UdIwQY
MBaAFH8RQWrjkp3ze/ZqRZzTrKY4kelGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQt
Njc1NmY3YjBjMGRiLzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82YjIyZTgtM2RjZC00NGRkLTk1MTQtNjc1NmY3YjBjMGRi
LzEvZnhGQmF1T1NuZk43OW1wRm5OT3NwamlSNlVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5vtRRoQ
30P3xVkvYCWN2VAsy9xviS4lQARDy5NCHGPucy6mgnGin6c+b8pFJvBMvgbV9nV5
8qKEqX8qkSXqVa3YxS9n0ZWUzPwM7r/9XBq/aSsvk47D9QlN9334xXD+FFAXqeGe
PyVMlKj6JCnfoxvf65s5NjtIshqRuCArya+H41gqqY0OQ/HW8kS8ry+cYFFiKrXV
zWZJcDD+jx4by6JqQ0Hw1e/uw57+1r3Ot7kv7Ueli5XdRVLK9o+xV9aGMj6DroXy
sSwOt6LuJECU+fGX3oX1NxSmr3v2ya4hSG5pGaL6ouGjR9f2pBoYAdL386FkzZo4
quWaSI0Tgddu7w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:10 2026 by rpki-client