Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft
File: rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft (raw, json)
Hash identifier: HG21tXes7+oTN1QdhOl4NR3YEvB5980MkObLFki7AOw=
Subject key identifier: F1:A1:C1:9E:79:90:11:63:F2:70:93:CC:EF:AE:1D:30:C5:1F:52:10
Authority key identifier: AC:5D:4C:EA:41:58:5A:0A:36:84:01:69:92:80:AC:1B:6B:B7:32:23
Certificate issuer: /CN=ac5d4cea41585a0a368401699280ac1b6bb73223
Certificate serial: 019D382E8492D99035E630D5788722082221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft
Manifest number: 0148
Signing time: Sun 29 Mar 2026 06:01:05 +0000
Manifest this update: Sun 29 Mar 2026 06:01:05 +0000
Manifest next update: Mon 30 Mar 2026 06:01:05 +0000
Files and hashes: 1: BP5yGhcJXG9r0lMiv4L7Etmp26E.roa (hash: 6Sxk0HL0oTOArUlf31KZylLt+2Pj/BGdXVCipqveahM=)
2: KZqOTg79baj8AoD8ZTcTWzUxDrY.roa (hash: GsTbz6kRyxTcuZicC3bVdI5BpCL5hf76eSHiBsXm+nM=)
3: rF1M6kFYWgo2hAFpkoCsG2u3MiM.crl (hash: fgDhsmMCXMTj84L6Sts5hc+rq5wsu9WcYzum7hhMq3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:84:92:d9:90:35:e6:30:d5:78:87:22:08:22:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5d4cea41585a0a368401699280ac1b6bb73223
Validity
Not Before: Mar 29 06:01:05 2026 GMT
Not After : Mar 30 06:01:05 2026 GMT
Subject: CN=f1a1c19e79901163f27093ccefae1d30c51f5210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8b:18:1c:24:3f:7f:c7:a3:01:cb:d0:8a:1d:
5c:8f:2a:6d:99:a8:c0:f8:2b:49:26:26:a6:51:f1:
a1:18:bc:8c:47:b9:7e:6f:71:52:e6:59:30:15:3d:
11:d2:9c:d1:74:c2:b7:3f:62:7a:c8:1f:d5:18:a1:
96:95:7c:e3:52:a6:07:b3:19:19:fe:6d:9c:0f:ca:
70:c2:f6:90:08:b0:8b:44:e9:6b:05:ee:5f:4c:f1:
3a:87:b5:fb:e9:17:0f:42:ca:58:f8:2c:8d:ff:13:
22:94:bb:12:b6:d2:77:94:55:c4:f4:ab:3e:e4:cf:
1a:e8:b1:3b:5e:a9:c7:8a:4c:12:3d:16:64:7e:07:
66:89:6f:f8:76:fa:60:1e:d7:88:69:5f:44:74:2e:
ab:09:39:08:d6:97:01:9a:b7:e8:7e:6c:46:8a:1d:
ec:34:16:64:59:be:0b:ff:a0:cb:23:7e:89:fb:93:
23:88:b2:e6:37:62:4e:5c:5a:c6:77:24:f5:fb:1c:
95:46:29:3d:17:e2:b9:c3:be:32:b8:5d:19:f7:aa:
7b:87:09:80:f2:bf:fb:5c:13:20:cf:3c:f3:c1:b5:
70:5f:b1:d5:73:7b:7b:b4:8c:45:d1:f9:92:2f:d7:
08:6d:72:c8:f7:1e:10:7a:af:01:27:70:2f:89:5f:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:C1:9E:79:90:11:63:F2:70:93:CC:EF:AE:1D:30:C5:1F:52:10
X509v3 Authority Key Identifier:
keyid:AC:5D:4C:EA:41:58:5A:0A:36:84:01:69:92:80:AC:1B:6B:B7:32:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF1M6kFYWgo2hAFpkoCsG2u3MiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5a5e87-95dd-45b3-87c1-badd696cc986/1/rF1M6kFYWgo2hAFpkoCsG2u3MiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:18:74:e1:3f:0f:6f:ed:41:99:b5:6f:21:93:e5:6b:f2:b4:
c3:fa:e8:38:e6:7b:21:07:37:41:33:24:f3:9d:7a:de:33:15:
ed:d1:dd:fc:fc:3a:11:d8:a6:e0:47:40:13:1e:5f:32:de:12:
73:50:37:5c:d3:f4:3e:ae:2b:4c:40:83:5c:27:5a:48:0c:cd:
17:09:ce:d2:ae:e6:61:da:57:d4:89:a8:c3:2c:16:c6:89:59:
4a:18:0b:a0:86:6d:22:f4:36:f0:e7:38:40:6a:7a:78:07:b7:
cc:b6:ca:77:32:dc:ba:99:2b:bb:81:fe:f5:20:d8:34:3d:4e:
50:2e:cd:27:0d:4d:ff:25:a2:62:7f:a8:f2:9e:b3:a8:ff:64:
21:ae:dc:65:5e:f9:eb:b6:b4:26:4d:9c:96:dc:49:3c:4c:9c:
fe:61:9d:8c:53:69:bd:0c:d5:12:54:8f:93:1e:00:c6:9c:58:
b8:73:19:74:13:e8:77:af:3d:de:8a:2b:68:f2:02:3a:69:ca:
3c:13:26:b9:72:b1:ed:39:a6:5a:5c:a3:d0:6a:fa:fc:46:b2:
32:f4:4b:5c:4a:de:38:b2:4b:38:e6:5c:d6:45:d1:1d:25:ea:
2c:32:11:5e:94:10:1c:f6:a9:e0:9d:19:e7:62:9c:5c:77:bb:
5d:f7:82:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LoSS2ZA15jDVeIciCCIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNWQ0Y2VhNDE1ODVhMGEzNjg0MDE2OTkyODBhYzFiNmJi
NzMyMjMwHhcNMjYwMzI5MDYwMTA1WhcNMjYwMzMwMDYwMTA1WjAzMTEwLwYDVQQD
EyhmMWExYzE5ZTc5OTAxMTYzZjI3MDkzY2NlZmFlMWQzMGM1MWY1MjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2osYHCQ/f8ejAcvQih1cjyptmajA
+CtJJiamUfGhGLyMR7l+b3FS5lkwFT0R0pzRdMK3P2J6yB/VGKGWlXzjUqYHsxkZ
/m2cD8pwwvaQCLCLROlrBe5fTPE6h7X76RcPQspY+CyN/xMilLsSttJ3lFXE9Ks+
5M8a6LE7XqnHikwSPRZkfgdmiW/4dvpgHteIaV9EdC6rCTkI1pcBmrfofmxGih3s
NBZkWb4L/6DLI36J+5MjiLLmN2JOXFrGdyT1+xyVRik9F+K5w74yuF0Z96p7hwmA
8r/7XBMgzzzzwbVwX7HVc3t7tIxF0fmSL9cIbXLI9x4Qeq8BJ3AviV+UmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGhwZ55kBFj8nCTzO+uHTDFH1IQMB8GA1UdIwQY
MBaAFKxdTOpBWFoKNoQBaZKArBtrtzIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckYxTTZrRllXZ28yaEFGcGtvQ3NHMnUzTWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81YTVlODctOTVkZC00NWIzLTg3YzEt
YmFkZDY5NmNjOTg2LzEvckYxTTZrRllXZ28yaEFGcGtvQ3NHMnUzTWlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS81YTVlODctOTVkZC00NWIzLTg3YzEtYmFkZDY5NmNjOTg2
LzEvckYxTTZrRllXZ28yaEFGcGtvQ3NHMnUzTWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuBh04T8P
b+1BmbVvIZPla/K0w/roOOZ7IQc3QTMk85163jMV7dHd/Pw6Edim4EdAEx5fMt4S
c1A3XNP0Pq4rTECDXCdaSAzNFwnO0q7mYdpX1ImowywWxolZShgLoIZtIvQ28Oc4
QGp6eAe3zLbKdzLcupkru4H+9SDYND1OUC7NJw1N/yWiYn+o8p6zqP9kIa7cZV75
67a0Jk2cltxJPEyc/mGdjFNpvQzVElSPkx4AxpxYuHMZdBPod6893ooraPICOmnK
PBMmuXKx7TmmWlyj0Gr6/EayMvRLXEreOLJLOOZc1kXRHSXqLDIRXpQQHPap4J0Z
52KcXHe7XfeC8Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:00 2026 by rpki-client