Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
File: FEz3GmQFf4aSkG29men2hEB9boA.mft (raw, json)
Hash identifier: BZ2APbm0sUJzxWdIOih9CJlAeJ4zNBGjm/EXeUwHUdI=
Subject key identifier: CC:0B:C9:FC:B4:51:5D:0B:25:8E:EC:BB:3B:FF:6E:FF:1E:47:33:42
Authority key identifier: 14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
Certificate issuer: /CN=144cf71a64057f8692906dbd99e9f684407d6e80
Certificate serial: 019DCC3D747F48D61CF37ACFB7BFE0F60459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
Manifest number: 7E
Signing time: Mon 27 Apr 2026 00:01:12 +0000
Manifest this update: Mon 27 Apr 2026 00:01:12 +0000
Manifest next update: Tue 28 Apr 2026 00:01:12 +0000
Files and hashes: 1: FEz3GmQFf4aSkG29men2hEB9boA.crl (hash: t0mKi+uEd/wI0RwsRcIUgf5XDRegfdYj/41BxYrll2I=)
2: V7cyqG-pYyAMULVUem9DUD4mh5Y.roa (hash: NfpPyZF7G0X8PIMTTllt/U0ECaL4KgW7SFDL7u8msig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:74:7f:48:d6:1c:f3:7a:cf:b7:bf:e0:f6:04:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144cf71a64057f8692906dbd99e9f684407d6e80
Validity
Not Before: Apr 27 00:01:12 2026 GMT
Not After : Apr 28 00:01:12 2026 GMT
Subject: CN=cc0bc9fcb4515d0b258eecbb3bff6eff1e473342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:8e:a4:e7:d4:83:89:50:d8:9f:65:41:84:
82:fe:9c:be:9f:0d:b0:cd:95:83:7f:a8:49:90:53:
15:b9:96:d0:f2:26:9a:f6:ee:01:be:01:41:b2:c3:
a1:b5:d7:1f:6a:b1:1c:9b:7c:8c:9a:84:1f:f6:36:
cb:c1:1c:2d:26:c3:4d:59:86:b9:3d:f9:9d:e5:a9:
e3:17:f9:42:f4:57:02:55:88:7e:6b:15:33:90:80:
46:27:d0:5e:14:1e:9c:cb:ea:fe:e9:15:89:13:42:
0a:a5:9c:e9:b9:23:54:ff:70:13:a5:2e:74:1c:4b:
6e:79:51:58:4e:36:bb:61:0c:ea:1e:47:6f:1d:16:
4d:7e:ab:eb:e3:3a:3c:d8:44:a5:24:62:9c:d4:15:
b5:02:0d:b6:da:ae:81:d0:c3:66:09:95:8f:ff:9e:
01:d1:f0:f3:b0:53:b1:bf:d6:b9:3d:ce:d8:74:f9:
c7:c3:cc:20:ab:60:df:8a:4a:29:ed:55:12:bb:81:
e0:4d:77:8c:c4:2e:7d:9a:0c:ba:7a:53:71:89:82:
42:d1:5d:1a:6b:42:66:4e:b8:34:91:77:9b:db:eb:
47:4e:a3:09:e3:7e:5e:53:66:02:55:f4:88:fb:9a:
26:89:a0:90:59:05:35:cc:a6:b5:c9:a0:ce:e1:58:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:C9:FC:B4:51:5D:0B:25:8E:EC:BB:3B:FF:6E:FF:1E:47:33:42
X509v3 Authority Key Identifier:
keyid:14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6a:e3:1d:9d:77:bb:bd:6b:b6:65:87:14:2a:54:eb:ee:bf:
32:ea:fd:c5:ee:b6:ea:23:d1:3c:7e:ca:10:f2:1f:35:16:40:
f3:a4:cc:a6:18:71:a4:fc:72:88:20:68:75:6e:9f:87:12:1d:
62:c9:99:33:12:9d:c4:ab:aa:e8:cf:39:a3:a8:0f:29:9a:d2:
74:03:9b:cd:4c:80:de:e3:0e:e3:1d:61:60:75:3f:0d:bb:2a:
a7:44:b9:0b:74:51:c3:15:52:86:a7:8a:1b:8b:8d:ba:9a:82:
d2:bd:cf:f0:2c:f5:10:cf:e9:4a:c5:17:b4:e1:48:61:af:69:
64:10:ef:c7:1c:34:88:c0:7b:77:7c:8b:3d:79:4b:5a:17:f6:
81:88:11:7f:f1:f0:c9:9d:be:87:01:d4:bd:e0:4c:a0:7d:51:
27:4d:fc:9a:f3:b2:39:80:31:b5:cf:f9:56:58:e6:4a:d8:f2:
c0:6e:bc:89:50:91:4d:14:be:29:34:b2:f2:3d:55:ec:4d:85:
e4:37:b6:d0:d9:13:a0:58:d8:9e:4e:26:00:45:7d:c7:ae:60:
a9:05:9b:54:a6:f4:19:1c:03:53:bb:93:d7:6a:d3:14:22:a6:
fb:31:cd:cf:0d:41:c5:65:83:f4:7e:74:e6:61:51:95:34:71:
b8:8d:01:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MPXR/SNYc83rPt7/g9gRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NGNmNzFhNjQwNTdmODY5MjkwNmRiZDk5ZTlmNjg0NDA3
ZDZlODAwHhcNMjYwNDI3MDAwMTEyWhcNMjYwNDI4MDAwMTEyWjAzMTEwLwYDVQQD
EyhjYzBiYzlmY2I0NTE1ZDBiMjU4ZWVjYmIzYmZmNmVmZjFlNDczMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QOOpOfUg4lQ2J9lQYSC/py+nw2w
zZWDf6hJkFMVuZbQ8iaa9u4BvgFBssOhtdcfarEcm3yMmoQf9jbLwRwtJsNNWYa5
Pfmd5anjF/lC9FcCVYh+axUzkIBGJ9BeFB6cy+r+6RWJE0IKpZzpuSNU/3ATpS50
HEtueVFYTja7YQzqHkdvHRZNfqvr4zo82ESlJGKc1BW1Ag222q6B0MNmCZWP/54B
0fDzsFOxv9a5Pc7YdPnHw8wgq2Dfikop7VUSu4HgTXeMxC59mgy6elNxiYJC0V0a
a0JmTrg0kXeb2+tHTqMJ435eU2YCVfSI+5omiaCQWQU1zKa1yaDO4VhDsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwLyfy0UV0LJY7suzv/bv8eRzNCMB8GA1UdIwQY
MBaAFBRM9xpkBX+GkpBtvZnp9oRAfW6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkV6M0dtUUZmNGFTa0cyOW1lbjJoRUI5Ym9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xNDBkMDQtY2FmYi00NmUzLThjZmEt
YjA1Y2RlOTNkOGU1LzEvRkV6M0dtUUZmNGFTa0cyOW1lbjJoRUI5Ym9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8xNDBkMDQtY2FmYi00NmUzLThjZmEtYjA1Y2RlOTNkOGU1
LzEvRkV6M0dtUUZmNGFTa0cyOW1lbjJoRUI5Ym9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmrjHZ13
u71rtmWHFCpU6+6/Mur9xe626iPRPH7KEPIfNRZA86TMphhxpPxyiCBodW6fhxId
YsmZMxKdxKuq6M85o6gPKZrSdAObzUyA3uMO4x1hYHU/Dbsqp0S5C3RRwxVShqeK
G4uNupqC0r3P8Cz1EM/pSsUXtOFIYa9pZBDvxxw0iMB7d3yLPXlLWhf2gYgRf/Hw
yZ2+hwHUveBMoH1RJ038mvOyOYAxtc/5VljmStjywG68iVCRTRS+KTSy8j1V7E2F
5De20NkToFjYnk4mAEV9x65gqQWbVKb0GRwDU7uT12rTFCKm+zHNzw1BxWWD9H50
5mFRlTRxuI0Bwg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:31 2026 by rpki-client