Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: jimLekB5Lmx/x7i1ejuBI768BMOTh94mLjUNxCGhxN0=
Subject key identifier: 27:AE:7E:0E:60:27:5A:22:70:94:A1:58:59:61:22:4A:52:20:10:BA
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019D3940F26A2FCF2F884E41696F12C95E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 11:00:50 +0000
Manifest this update: Sun 29 Mar 2026 11:00:50 +0000
Manifest next update: Mon 30 Mar 2026 11:00:50 +0000
Files and hashes: 1: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: 9eeuSlcR4JHhqEngka1EYo/5qLHEPiwc+adbOnFBQ44=)
2: gFOjbWB7I_w-vrenN-Bunfa99k4.roa (hash: jwgceh/3ITVpquNuTB6w5OIjCduknP3STqxn7Za9hOo=)
3: yDOczuJC_WLHV4Ya3yqTtThAzjc.roa (hash: rUsqBRYV5w6oIt/F9qarEoMetvvYx4/9g1ZMzy8MePc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f2:6a:2f:cf:2f:88:4e:41:69:6f:12:c9:5e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Mar 29 11:00:50 2026 GMT
Not After : Mar 30 11:00:50 2026 GMT
Subject: CN=27ae7e0e60275a227094a1585961224a522010ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:e7:56:9c:f6:9c:bf:df:c3:85:0b:9e:c2:
33:aa:77:84:be:b7:f4:52:ef:83:2d:13:a9:07:5b:
15:26:0a:58:f4:f8:90:5a:50:18:f5:d3:64:10:cb:
b6:e3:43:10:a2:5e:fb:0f:e0:4f:8c:58:df:40:b8:
b8:b9:fe:05:49:1d:38:d3:87:fe:6f:7c:64:a2:56:
25:b2:65:88:ff:12:17:3e:21:3d:8c:e8:92:c0:c9:
23:e6:b3:3e:7f:44:b8:60:dd:85:51:b2:2c:64:3b:
43:5f:b5:ea:f1:6c:0a:8d:ef:08:1f:3d:e0:e0:88:
63:e5:e7:6a:8d:4e:97:35:c1:2a:8e:ef:d9:e1:f2:
27:49:d7:30:24:31:82:17:b8:f9:d5:e7:43:ba:f8:
a8:d0:62:d0:b4:7b:19:83:07:50:dd:4f:5a:6e:35:
cc:bb:94:d0:75:0b:50:f8:63:86:58:c3:0f:62:b4:
32:c9:64:a5:9a:e8:cc:d8:08:75:dc:bd:7e:1f:1e:
43:d9:37:cd:b8:1a:07:42:2f:92:dd:31:a5:53:cc:
c7:dd:0d:19:94:d0:34:19:26:d6:f4:7f:f6:da:10:
78:ed:29:7e:cd:81:5b:a7:96:a4:dd:b2:65:11:38:
ff:f8:98:ec:9d:38:d7:0a:85:53:b4:99:4e:3c:8e:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AE:7E:0E:60:27:5A:22:70:94:A1:58:59:61:22:4A:52:20:10:BA
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a5:40:8a:03:ee:14:45:93:d9:d2:34:8f:62:ca:ab:d9:98:
dc:d7:dd:d5:0a:39:28:31:ae:24:70:1a:68:63:76:d9:4e:bb:
52:b4:61:2a:6d:30:ed:62:26:c8:63:3f:f7:d4:03:cc:93:e9:
36:26:03:1d:a3:0b:2a:8b:32:7e:bc:df:47:84:3d:2c:0a:e8:
8a:a2:6a:d2:4c:16:bf:8b:33:a4:fb:16:28:6e:f6:ac:cd:45:
01:04:f0:37:95:60:30:4b:dc:71:bf:62:c8:f0:4b:53:16:b2:
85:85:3a:6f:2a:aa:12:56:29:f3:f0:51:0c:f4:53:ec:2a:ee:
a4:49:72:b8:fc:7e:7a:12:80:06:9e:32:d4:00:fd:c9:22:8e:
b2:18:1f:42:15:86:ac:72:06:c6:64:5b:ed:fe:54:2b:ad:dc:
b3:ea:5c:93:6a:d4:da:77:a6:a5:04:6b:09:b4:71:ef:40:ac:
05:63:e0:04:76:fc:8e:23:73:f3:68:5d:8a:4e:d6:1c:79:d5:
75:48:8e:94:b2:6f:f9:5e:6c:0c:f0:61:d5:a8:d9:31:da:9e:
a8:5e:98:02:1d:8d:22:6c:f3:7a:b6:24:fe:5f:7e:24:13:7e:
b1:87:f8:33:b5:9a:cb:b8:ec:bf:42:b7:75:7c:33:a7:63:6c:
fa:9f:70:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QPJqL88viE5BaW8SyV4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTAyZTJkMjRiMWYyMTY5MTMwODgyMDdhMjY4ZTY2MjZi
MGNlMzkwHhcNMjYwMzI5MTEwMDUwWhcNMjYwMzMwMTEwMDUwWjAzMTEwLwYDVQQD
EygyN2FlN2UwZTYwMjc1YTIyNzA5NGExNTg1OTYxMjI0YTUyMjAxMGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB3nVpz2nL/fw4ULnsIzqneEvrf0
Uu+DLROpB1sVJgpY9PiQWlAY9dNkEMu240MQol77D+BPjFjfQLi4uf4FSR0404f+
b3xkolYlsmWI/xIXPiE9jOiSwMkj5rM+f0S4YN2FUbIsZDtDX7Xq8WwKje8IHz3g
4Ihj5edqjU6XNcEqju/Z4fInSdcwJDGCF7j51edDuvio0GLQtHsZgwdQ3U9abjXM
u5TQdQtQ+GOGWMMPYrQyyWSlmujM2Ah13L1+Hx5D2TfNuBoHQi+S3TGlU8zH3Q0Z
lNA0GSbW9H/22hB47Sl+zYFbp5ak3bJlETj/+JjsnTjXCoVTtJlOPI4iZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeufg5gJ1oicJShWFlhIkpSIBC6MB8GA1UdIwQY
MBaAFH1QLi0ksfIWkTCIIHomjmYmsM45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMt
NTFkNzU1NjhhOWUzLzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMtNTFkNzU1NjhhOWUz
LzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6VAigPu
FEWT2dI0j2LKq9mY3Nfd1Qo5KDGuJHAaaGN22U67UrRhKm0w7WImyGM/99QDzJPp
NiYDHaMLKosyfrzfR4Q9LAroiqJq0kwWv4szpPsWKG72rM1FAQTwN5VgMEvccb9i
yPBLUxayhYU6byqqElYp8/BRDPRT7CrupElyuPx+ehKABp4y1AD9ySKOshgfQhWG
rHIGxmRb7f5UK63cs+pck2rU2nempQRrCbRx70CsBWPgBHb8jiNz82hdik7WHHnV
dUiOlLJv+V5sDPBh1ajZMdqeqF6YAh2NImzzerYk/l9+JBN+sYf4M7Way7jsv0K3
dXwzp2Ns+p9wtQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:23 2026 by rpki-client