Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: zt1YQrvh4BNAVhviCo7veaVj0uH6ByMQEBpMvk27XKU=
Subject key identifier: 0F:6B:1E:C9:42:BC:92:B3:84:71:A9:F3:97:F7:1C:B3:76:C9:AD:C6
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 019D382E94A3B8ADECF064D1FF0CEC5AB818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 1570
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: N611FyyDWK9ug4tcbq7YvkQysOc.roa (hash: cBgwqk8mDKhuXD2KmuvuFfz0Mfhld+DUNOT4u8hWcPE=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: cMFemKICxBHnS4Zqjkb1yZQ+102lAfK7nr6k0IYJIUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:94:a3:b8:ad:ec:f0:64:d1:ff:0c:ec:5a:b8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=0f6b1ec942bc92b38471a9f397f71cb376c9adc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:ac:a2:f7:6a:4e:63:27:d4:4e:15:30:a1:
38:40:93:04:05:47:38:0f:45:5e:56:10:cc:33:9b:
a3:48:69:47:ff:ec:f7:78:91:d0:49:6d:64:7c:4b:
bb:d0:b4:91:51:11:13:d5:59:7d:89:a6:8d:03:bf:
4f:45:5c:bb:dc:54:e2:d6:45:77:4e:cc:03:4b:8f:
e2:c5:95:a2:eb:e9:d9:4a:5b:c2:5b:27:f7:0e:9e:
84:fb:7c:00:b1:43:d0:a4:50:74:7d:09:c2:88:42:
fc:32:e4:14:f1:e9:33:f8:04:7d:af:36:c4:ed:c9:
63:3b:c9:06:46:8e:a9:ef:2b:4c:91:ae:a8:b0:a9:
a7:38:6e:b7:53:0c:f4:2d:da:37:27:a8:a8:25:45:
8b:62:02:14:56:6f:6c:75:d7:79:75:c8:01:ba:ba:
c7:a0:db:de:47:01:e7:a0:a3:4a:34:cf:90:6b:55:
f6:e3:c0:d8:4f:ac:23:4d:1a:ef:bd:71:2d:f5:e1:
f7:68:c2:49:43:28:52:57:b9:dd:8b:df:c9:6a:77:
6e:1f:73:f4:c0:69:11:34:cf:7e:79:a5:aa:61:a0:
d7:d6:c9:c7:c4:e5:1b:20:d3:dc:0e:47:4e:c6:5d:
61:88:55:a9:af:13:88:98:dd:32:1d:0a:e7:a7:34:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6B:1E:C9:42:BC:92:B3:84:71:A9:F3:97:F7:1C:B3:76:C9:AD:C6
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:9e:2f:55:85:c8:c5:40:e5:33:41:76:14:41:84:75:f6:88:
f0:75:04:bd:5d:f0:c4:1f:40:ca:f8:75:08:53:68:c7:64:18:
20:4c:0f:18:26:de:3f:fb:17:02:c2:c1:4e:79:27:c8:fc:8d:
4c:69:1e:c0:fe:42:46:77:90:de:e1:6c:b3:c6:12:8d:b3:1b:
a6:b1:be:08:0b:e1:11:5e:ff:22:73:aa:d8:82:9c:fa:bc:11:
9b:64:55:67:69:68:14:cf:a5:ff:b1:28:57:ea:1c:2d:c7:23:
99:60:c9:36:2e:cc:b9:4d:53:56:06:4e:03:d3:dd:f3:51:e5:
5f:f6:18:d5:f7:1f:c0:f2:23:22:29:11:43:22:74:96:48:cf:
f6:a0:c7:b5:29:b1:bd:10:95:50:eb:c4:b5:36:e4:41:d5:cd:
b9:b8:c4:fa:2e:5b:2a:e9:83:5a:32:2b:4a:e7:13:04:0b:d4:
36:26:46:40:b7:14:38:3e:bf:e6:20:70:c2:04:a1:a3:65:71:
e1:52:7e:66:7b:c6:69:58:7b:6f:db:be:38:84:ce:c4:b7:4e:
fe:67:0d:8b:b4:bc:db:4e:2e:db:c5:b4:e8:51:7e:41:b3:e5:
7c:58:ab:7f:ac:3a:11:a6:cf:0c:66:26:5b:7d:c5:9e:03:0a:
cb:d9:05:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LpSjuK3s8GTR/wzsWrgYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNmRjNzM5NTgxNWFmMDQ1MDQ4ZjRjZTM5MTBkMDQwMDhm
ZjNhN2MwHhcNMjYwMzI5MDYwMTA5WhcNMjYwMzMwMDYwMTA5WjAzMTEwLwYDVQQD
EygwZjZiMWVjOTQyYmM5MmIzODQ3MWE5ZjM5N2Y3MWNiMzc2YzlhZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BusovdqTmMn1E4VMKE4QJMEBUc4
D0VeVhDMM5ujSGlH/+z3eJHQSW1kfEu70LSRURET1Vl9iaaNA79PRVy73FTi1kV3
TswDS4/ixZWi6+nZSlvCWyf3Dp6E+3wAsUPQpFB0fQnCiEL8MuQU8ekz+AR9rzbE
7cljO8kGRo6p7ytMka6osKmnOG63Uwz0Ldo3J6ioJUWLYgIUVm9sddd5dcgBurrH
oNveRwHnoKNKNM+Qa1X248DYT6wjTRrvvXEt9eH3aMJJQyhSV7ndi9/JanduH3P0
wGkRNM9+eaWqYaDX1snHxOUbINPcDkdOxl1hiFWprxOImN0yHQrnpzTunwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9rHslCvJKzhHGp85f3HLN2ya3GMB8GA1UdIwQY
MBaAFHxtxzlYFa8EUEj0zjkQ0EAI/zp8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkczSE9WZ1Zyd1JRU1BUT09SRFFRQWpfT253LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NDY4N2YtZWZhNS00NjIwLTg2MTkt
MzE1NWJhOGNiNzRmLzEvZkczSE9WZ1Zyd1JRU1BUT09SRFFRQWpfT253Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81NDY4N2YtZWZhNS00NjIwLTg2MTktMzE1NWJhOGNiNzRm
LzEvZkczSE9WZ1Zyd1JRU1BUT09SRFFRQWpfT253LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZ4vVYXI
xUDlM0F2FEGEdfaI8HUEvV3wxB9Ayvh1CFNox2QYIEwPGCbeP/sXAsLBTnknyPyN
TGkewP5CRneQ3uFss8YSjbMbprG+CAvhEV7/InOq2IKc+rwRm2RVZ2loFM+l/7Eo
V+ocLccjmWDJNi7MuU1TVgZOA9Pd81HlX/YY1fcfwPIjIikRQyJ0lkjP9qDHtSmx
vRCVUOvEtTbkQdXNubjE+i5bKumDWjIrSucTBAvUNiZGQLcUOD6/5iBwwgSho2Vx
4VJ+ZnvGaVh7b9u+OITOxLdO/mcNi7S8204u28W06FF+QbPlfFirf6w6EabPDGYm
W33FngMKy9kF6w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:03 2026 by rpki-client