Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File: f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier: iHA02q/VfdU/qDHfSNH/bdrrattgKNb+Lo34HuvshDI=
Subject key identifier: D0:FD:58:5A:8B:08:98:78:B8:19:FB:DA:90:62:10:AE:41:3C:07:12
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer: /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial: 019DCE2B7AACE0184B1E0203D4F3D18FA432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number: 0736
Signing time: Mon 27 Apr 2026 09:00:49 +0000
Manifest this update: Mon 27 Apr 2026 09:00:49 +0000
Manifest next update: Tue 28 Apr 2026 09:00:49 +0000
Files and hashes: 1: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: WOYy5E8+Dtz7qrqrxJ2WXpRywIvSV/TAB6O4xv1vjrQ=)
2: pXDB3JZOfxhx6kB_B6yjlms4hgg.roa (hash: 7CjufhrAy5+5Le+UMiFmAE/OHHfY94923x+MRoCs0Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:7a:ac:e0:18:4b:1e:02:03:d4:f3:d1:8f:a4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Validity
Not Before: Apr 27 09:00:49 2026 GMT
Not After : Apr 28 09:00:49 2026 GMT
Subject: CN=d0fd585a8b089878b819fbda906210ae413c0712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:96:34:a3:b5:0e:b4:12:4e:03:fd:68:ac:
80:a5:75:51:58:39:31:7a:5c:8d:36:9d:c1:06:6f:
f9:18:1b:84:77:33:93:3b:7f:6d:74:04:29:35:5e:
7e:bc:90:1e:9e:3c:82:7e:a3:60:a9:0e:4a:0f:8e:
fb:e5:d5:a7:19:2b:bd:7f:ff:75:70:ca:f2:81:cb:
37:ae:aa:d2:88:48:66:86:e4:42:c5:5f:d7:03:f9:
be:0b:56:ca:2e:a2:6e:fa:c8:b6:e5:85:95:de:06:
3b:66:76:93:db:af:dc:21:26:e0:e9:5d:b9:f8:ba:
08:db:dc:ed:14:68:27:a9:a2:03:6c:a0:8f:53:6c:
23:f6:a7:3d:b8:d3:38:93:8d:ba:de:34:1f:65:ea:
d6:b0:11:db:4d:b8:bb:a1:4f:cd:78:01:60:d6:f4:
1c:99:a3:1a:d0:e1:0b:2d:2e:bd:65:5c:ea:f8:d7:
0e:2d:4b:9a:c0:f7:72:9d:05:a3:49:af:26:81:d5:
48:de:14:ed:11:cf:27:92:5e:a7:92:32:5a:52:06:
e5:6a:69:bb:90:5c:3b:d4:40:63:66:df:8a:81:5b:
a6:0e:1b:9e:63:3e:72:85:47:ac:42:16:ad:5d:53:
2e:91:2e:2b:39:26:bd:8b:29:49:59:d3:b5:66:f7:
3c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FD:58:5A:8B:08:98:78:B8:19:FB:DA:90:62:10:AE:41:3C:07:12
X509v3 Authority Key Identifier:
keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d7:b4:82:c5:15:d9:51:8f:07:8f:78:e5:e6:a7:49:27:64:
a7:57:d7:ce:b7:61:ca:fe:0c:14:66:03:31:68:9b:bd:d4:d8:
24:80:17:73:51:f4:68:04:1a:da:33:20:58:2f:6f:c7:e5:da:
2d:14:21:a8:e9:8c:85:42:03:7f:cf:e9:2d:1e:a7:c7:27:7d:
f4:9f:e0:aa:9f:cc:77:b7:f2:db:d9:a8:15:1f:72:71:e2:bc:
10:bd:c9:93:15:ae:2e:23:17:6d:9c:fa:d3:d8:b2:a2:b7:55:
f4:aa:bd:55:d9:7b:bb:30:38:c0:d4:3c:20:ea:66:66:31:65:
a9:b3:80:c1:a2:a8:67:85:7d:cb:79:70:e2:c8:39:7c:7e:a1:
47:30:b1:06:78:30:72:41:90:f6:f9:a7:c9:35:d5:d1:25:75:
f8:f7:91:9f:36:d0:e6:89:46:24:73:3b:c3:ee:a9:00:ee:dd:
af:cf:5d:5a:bf:b7:f8:2b:14:28:f4:2a:2f:d9:2d:18:2a:ef:
ca:17:d8:ab:6d:a9:ec:6e:b2:ad:eb:7b:85:e0:f0:86:b3:4b:
20:34:c0:e7:55:02:34:4d:19:36:09:01:58:f7:a8:fe:16:94:
ce:66:d7:7a:08:38:f9:a7:03:06:39:53:5e:43:ef:7a:ae:2a:
e7:32:e6:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OK3qs4BhLHgID1PPRj6QyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNGQ1OTFjMjNhZDJjNjk0NzdkN2Y3YTFkNGNlOGViY2Vl
OTU5NmMwHhcNMjYwNDI3MDkwMDQ5WhcNMjYwNDI4MDkwMDQ5WjAzMTEwLwYDVQQD
EyhkMGZkNTg1YThiMDg5ODc4YjgxOWZiZGE5MDYyMTBhZTQxM2MwNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2OWNKO1DrQSTgP9aKyApXVRWDkx
elyNNp3BBm/5GBuEdzOTO39tdAQpNV5+vJAenjyCfqNgqQ5KD4775dWnGSu9f/91
cMrygcs3rqrSiEhmhuRCxV/XA/m+C1bKLqJu+si25YWV3gY7ZnaT26/cISbg6V25
+LoI29ztFGgnqaIDbKCPU2wj9qc9uNM4k4263jQfZerWsBHbTbi7oU/NeAFg1vQc
maMa0OELLS69ZVzq+NcOLUuawPdynQWjSa8mgdVI3hTtEc8nkl6nkjJaUgblamm7
kFw71EBjZt+KgVumDhueYz5yhUesQhatXVMukS4rOSa9iylJWdO1Zvc8dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND9WFqLCJh4uBn72pBiEK5BPAcSMB8GA1UdIwQY
MBaAFH9NWRwjrSxpR31/eh1M6OvO6VlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQt
ZDRmNWM5MmQ5MDk1LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8wZDY3YTItYmMzNi00YjkzLWI2MDQtZDRmNWM5MmQ5MDk1
LzEvZjAxWkhDT3RMR2xIZlg5NkhVem82ODdwV1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9e0gsUV
2VGPB4945eanSSdkp1fXzrdhyv4MFGYDMWibvdTYJIAXc1H0aAQa2jMgWC9vx+Xa
LRQhqOmMhUIDf8/pLR6nxyd99J/gqp/Md7fy29moFR9yceK8EL3JkxWuLiMXbZz6
09iyordV9Kq9Vdl7uzA4wNQ8IOpmZjFlqbOAwaKoZ4V9y3lw4sg5fH6hRzCxBngw
ckGQ9vmnyTXV0SV1+PeRnzbQ5olGJHM7w+6pAO7dr89dWr+3+CsUKPQqL9ktGCrv
yhfYq22p7G6yret7heDwhrNLIDTA51UCNE0ZNgkBWPeo/haUzmbXegg4+acDBjlT
XkPveq4q5zLmRA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:01 2026 by rpki-client