Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: aNa/IfEVhUVc8d0F6qxnrbxaDt5aLStJmNMJLCnXmtw=
Subject key identifier: 62:3D:F9:76:81:97:CF:99:AE:45:08:33:59:53:24:38:F3:3C:59:55
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 019CE7B7129912A6146244E3051A382584FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 186C
Signing time: Fri 13 Mar 2026 15:01:00 +0000
Manifest this update: Fri 13 Mar 2026 15:01:00 +0000
Manifest next update: Sat 14 Mar 2026 15:01:00 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: tSGtJ0hAUl17Mqlw4sCcflpTcipvZ96d8M1FFtQ8RXE=)
2: TphEoqHx74oTxzeHIHgNhG40Etg.roa (hash: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U=)
3: kOKbG2uwlgUTF9jmaFzt7vMoGYE.roa (hash: XPUsHAjyze1ymKKQjjk6fHKi5djr0xICcWZpDJI1q+M=)
4: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (hash: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b7:12:99:12:a6:14:62:44:e3:05:1a:38:25:84:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Mar 13 15:01:00 2026 GMT
Not After : Mar 14 15:01:00 2026 GMT
Subject: CN=623df9768197cf99ae45083359532438f33c5955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:76:96:65:df:66:28:d6:81:ab:fc:7f:0b:
78:c1:dc:03:5d:80:ee:6f:32:9e:61:51:61:83:0b:
c4:34:43:88:95:2d:2b:44:77:95:5e:55:67:bc:54:
b7:a8:6c:72:6c:36:db:d4:24:69:0e:a6:70:9c:60:
97:c4:fe:04:5a:e9:7b:fe:f9:9a:39:ed:a3:94:9d:
44:d1:42:af:79:5a:1e:3b:b7:79:05:64:23:b7:ae:
35:ac:0c:95:44:6d:46:c5:29:5a:06:85:d6:30:1b:
1e:cc:7d:f2:0b:aa:72:f2:2a:15:11:29:8e:31:9c:
1a:13:80:9f:21:e9:74:e5:9f:5e:76:79:56:a2:63:
e6:67:5e:44:f3:e7:3a:20:15:fb:e3:99:02:8e:da:
b5:a0:19:36:88:78:f6:b4:a5:5a:8d:69:51:30:d2:
1a:d1:ca:0c:bd:15:46:6f:93:0d:a3:b2:dd:a7:4f:
57:14:57:e4:ec:9d:53:86:3b:11:45:d8:2f:d2:76:
69:d2:14:84:71:d3:20:65:62:5b:34:ff:3b:3b:33:
d7:36:ac:b3:10:79:15:8f:70:8c:ee:b6:65:b6:b3:
03:64:c4:a2:e7:d4:1f:ea:99:cd:e5:bb:b8:3f:b0:
94:20:17:51:7a:b5:66:ad:8c:fa:86:d3:c4:08:34:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3D:F9:76:81:97:CF:99:AE:45:08:33:59:53:24:38:F3:3C:59:55
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:55:67:d0:7e:9f:2b:e5:3f:02:4f:98:b2:e5:5b:78:ec:b4:
e7:61:79:eb:42:21:59:53:43:af:fd:66:31:a5:09:b5:aa:31:
88:a9:5d:f9:ee:50:74:a2:65:31:6f:d9:7a:e5:37:84:b8:17:
87:87:d7:3f:c5:f2:d0:15:cd:72:ef:9a:be:a3:44:45:a2:e0:
87:c3:97:e4:aa:7f:75:d2:e8:04:a9:ed:85:01:72:0f:85:d9:
03:74:ad:e1:f7:12:07:90:bc:e3:9f:dd:97:a4:19:c0:51:46:
d0:13:a4:b3:b3:d6:33:26:c4:1c:c8:6e:61:bd:cd:13:c9:2f:
0b:a5:c7:06:1d:04:ec:82:ca:58:ef:05:8c:67:df:98:af:61:
0f:99:c2:02:d6:8b:67:da:98:48:3a:82:70:3a:e6:d2:a2:36:
74:61:67:fb:b3:c5:74:58:a4:3b:94:b4:c6:de:6d:38:22:73:
c3:b9:90:4a:87:4b:e3:ef:34:f5:11:3a:c7:75:47:a8:9d:3a:
23:2b:49:bc:1a:71:1d:bb:98:a1:d2:d3:68:1d:2a:79:8f:6e:
f1:1d:a8:7a:22:c6:71:f7:91:9e:a6:25:fc:67:1e:8b:9f:ce:
a0:e6:b4:0c:c9:c8:84:74:59:92:a2:ca:20:93:b6:bc:c3:b4:
e4:e7:fb:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzntxKZEqYUYkTjBRo4JYT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx
ZGYzOTAwHhcNMjYwMzEzMTUwMTAwWhcNMjYwMzE0MTUwMTAwWjAzMTEwLwYDVQQD
Eyg2MjNkZjk3NjgxOTdjZjk5YWU0NTA4MzM1OTUzMjQzOGYzM2M1OTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilt2lmXfZijWgav8fwt4wdwDXYDu
bzKeYVFhgwvENEOIlS0rRHeVXlVnvFS3qGxybDbb1CRpDqZwnGCXxP4EWul7/vma
Oe2jlJ1E0UKveVoeO7d5BWQjt641rAyVRG1GxSlaBoXWMBsezH3yC6py8ioVESmO
MZwaE4CfIel05Z9ednlWomPmZ15E8+c6IBX745kCjtq1oBk2iHj2tKVajWlRMNIa
0coMvRVGb5MNo7Ldp09XFFfk7J1ThjsRRdgv0nZp0hSEcdMgZWJbNP87OzPXNqyz
EHkVj3CM7rZltrMDZMSi59Qf6pnN5bu4P7CUIBdRerVmrYz6htPECDROJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGI9+XaBl8+ZrkUIM1lTJDjzPFlVMB8GA1UdIwQY
MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt
NmNiZTk0OTUzMmU0LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0
LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFVn0H6f
K+U/Ak+YsuVbeOy052F560IhWVNDr/1mMaUJtaoxiKld+e5QdKJlMW/ZeuU3hLgX
h4fXP8Xy0BXNcu+avqNERaLgh8OX5Kp/ddLoBKnthQFyD4XZA3St4fcSB5C845/d
l6QZwFFG0BOks7PWMybEHMhuYb3NE8kvC6XHBh0E7ILKWO8FjGffmK9hD5nCAtaL
Z9qYSDqCcDrm0qI2dGFn+7PFdFikO5S0xt5tOCJzw7mQSodL4+809RE6x3VHqJ06
IytJvBpxHbuYodLTaB0qeY9u8R2oeiLGcfeRnqYl/Gcei5/OoOa0DMnIhHRZkqLK
IJO2vMO05Of7Mg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 21:31:36 2026 by rpki-client