Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier: l+WtRxIPs8MIvWG42DiNVVgkEv8l5quPVrC8qPg8Oe8=
Subject key identifier: 88:B8:5E:7F:E9:99:36:A1:22:90:E2:77:D4:C6:DA:19:98:50:B7:E0
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 019D0553D68AFDC5410288388574B544D8DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number: 1875
Signing time: Thu 19 Mar 2026 09:01:13 +0000
Manifest this update: Thu 19 Mar 2026 09:01:13 +0000
Manifest next update: Fri 20 Mar 2026 09:01:13 +0000
Files and hashes: 1: 3BxhZ35N8Qx2oPV8uifmlMo5dOs.roa (hash: bD1bjEPm+DLe/WM+85t8bSN4Tr3PbaJNuazlrJ3Q/3o=)
2: SoyEFopk-R4dS6W4GId_dIzG6Fo.roa (hash: 8Qh9O/rztM/wDJzj5wDIv0KZPNCBmgUCZ7Xbj18mMsE=)
3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: ypZtyB0v59KUMni92G4fSzZmRw6D0ZBNCpDf/mwHbAM=)
4: zfvsegXog0j8iHhgS6fpZB-7wA0.roa (hash: bFu3gDNhMpBoThiANf0cCs15MmxVpxeF1StwYMxxHlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:53:d6:8a:fd:c5:41:02:88:38:85:74:b5:44:d8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Mar 19 09:01:13 2026 GMT
Not After : Mar 20 09:01:13 2026 GMT
Subject: CN=88b85e7fe99936a12290e277d4c6da199850b7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:75:28:b4:de:f7:17:19:c1:24:32:b6:bc:7b:
4a:4c:4a:3d:bd:75:64:5f:59:b8:0b:b5:e3:9a:2c:
5f:3f:a7:a0:39:a2:9c:77:67:9d:a7:e3:62:67:bd:
c7:86:7e:13:58:4b:4a:a0:13:1e:4f:1e:06:aa:ef:
52:31:d1:70:c6:7c:d4:4c:7c:b4:8b:19:40:19:57:
f8:79:ec:a9:b9:49:7e:1e:a0:17:4a:8f:a5:0d:3b:
81:de:a6:62:f5:5c:14:0e:e9:9b:9a:a1:0f:0b:4c:
1d:7a:b2:ab:17:68:82:f6:3b:e5:18:01:45:5d:dd:
28:3c:58:93:a9:28:5f:63:78:c6:57:7c:b3:e3:85:
cf:56:be:40:40:52:1e:30:25:28:a2:2e:3d:86:59:
d6:df:a4:de:d2:f6:79:b5:4f:1e:d3:9b:a5:f7:c2:
c9:aa:5d:c9:90:3a:51:2d:ce:e1:39:4a:9a:d8:29:
ef:60:0f:45:37:ea:42:15:d0:24:e9:7d:86:72:9c:
b2:53:8e:17:26:50:77:01:fa:7e:0e:fc:79:06:05:
f7:77:16:fc:81:c5:85:0c:87:dc:22:e7:4b:1a:3d:
8a:fc:0a:43:a6:6f:dd:6a:87:2b:d4:1a:17:7b:93:
77:17:df:45:4b:d2:84:74:80:17:57:13:b6:0d:e9:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:5E:7F:E9:99:36:A1:22:90:E2:77:D4:C6:DA:19:98:50:B7:E0
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d6:04:c0:ee:f0:49:45:12:f4:6b:12:43:43:00:6c:92:90:
7a:3b:6f:5e:f7:35:53:1a:94:d9:53:14:42:0a:24:a1:b8:b4:
b5:c2:52:95:aa:32:e9:8f:23:13:eb:4e:b4:57:b4:f7:f0:7b:
d8:dc:f2:44:2e:d0:51:1f:17:f5:86:83:db:33:2e:f2:4a:09:
82:ce:35:74:c6:a4:4a:3b:73:56:f1:f3:eb:3d:fd:19:8b:4a:
50:fb:c4:82:8e:40:ad:b0:5c:ef:ae:d9:93:7a:11:0f:0a:a4:
39:75:c8:35:5b:61:5a:12:9f:4b:fe:82:74:9e:fe:05:82:dc:
39:5c:3c:86:6f:99:dc:06:4e:62:d8:51:3c:50:67:67:83:63:
14:e6:c2:96:f1:e6:5d:bc:c7:b1:25:8f:c3:b9:7b:4d:83:90:
47:85:58:b3:f1:86:6a:2f:30:6a:03:b4:db:d3:e6:f3:97:2f:
f8:f4:25:7b:c1:69:f7:ca:bc:ed:cb:4a:52:60:75:44:66:07:
2d:ec:4e:32:08:4d:15:b6:e7:cd:89:d3:b9:5c:d6:75:44:f5:
b7:60:46:9d:5d:59:d0:66:97:e7:f8:d8:7a:2c:74:bd:f9:f8:
51:b0:ae:52:7e:e7:ac:b5:c6:e2:1f:be:2f:86:35:29:62:31:
31:34:95:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0FU9aK/cVBAog4hXS1RNjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTZmMjg5NDhjODMyZjJkNDM0YmI0NGQ1ZGUwZWExMjI2
MDFiMDUwHhcNMjYwMzE5MDkwMTEzWhcNMjYwMzIwMDkwMTEzWjAzMTEwLwYDVQQD
Eyg4OGI4NWU3ZmU5OTkzNmExMjI5MGUyNzdkNGM2ZGExOTk4NTBiN2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XUotN73FxnBJDK2vHtKTEo9vXVk
X1m4C7XjmixfP6egOaKcd2edp+NiZ73Hhn4TWEtKoBMeTx4Gqu9SMdFwxnzUTHy0
ixlAGVf4eeypuUl+HqAXSo+lDTuB3qZi9VwUDumbmqEPC0wderKrF2iC9jvlGAFF
Xd0oPFiTqShfY3jGV3yz44XPVr5AQFIeMCUooi49hlnW36Te0vZ5tU8e05ul98LJ
ql3JkDpRLc7hOUqa2CnvYA9FN+pCFdAk6X2GcpyyU44XJlB3Afp+Dvx5BgX3dxb8
gcWFDIfcIudLGj2K/ApDpm/daocr1BoXe5N3F99FS9KEdIAXVxO2Dely7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIi4Xn/pmTahIpDid9TG2hmYULfgMB8GA1UdIwQY
MBaAFH9W8olIyDLy1DS7RNXeDqEiYBsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjIt
NGU4NmFkNjRmNzc0LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjItNGU4NmFkNjRmNzc0
LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdYEwO7w
SUUS9GsSQ0MAbJKQejtvXvc1UxqU2VMUQgokobi0tcJSlaoy6Y8jE+tOtFe09/B7
2NzyRC7QUR8X9YaD2zMu8koJgs41dMakSjtzVvHz6z39GYtKUPvEgo5ArbBc767Z
k3oRDwqkOXXINVthWhKfS/6CdJ7+BYLcOVw8hm+Z3AZOYthRPFBnZ4NjFObClvHm
XbzHsSWPw7l7TYOQR4VYs/GGai8wagO029Pm85cv+PQle8Fp98q87ctKUmB1RGYH
LexOMghNFbbnzYnTuVzWdUT1t2BGnV1Z0GaX5/jYeix0vfn4UbCuUn7nrLXG4h++
L4Y1KWIxMTSVVA==
-----END CERTIFICATE-----
Generated at Thu Mar 19 15:31:16 2026 by rpki-client