Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File: fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier: 4a2Ruy+bOZrBIA/p+HrpMkITSx7d9QdtPlg52mDMlbw=
Subject key identifier: 46:1D:D0:1B:7C:0A:D5:AA:93:29:75:0F:C0:EB:20:BD:82:09:B7:1F
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer: /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial: 019CE5918D1A5B6D1FFA239F51B26010CACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number: 17F7
Signing time: Fri 13 Mar 2026 05:00:47 +0000
Manifest this update: Fri 13 Mar 2026 05:00:47 +0000
Manifest next update: Sat 14 Mar 2026 05:00:47 +0000
Files and hashes: 1: RO8EIzazCz5i9qCar0Fb-jUPsko.roa (hash: DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=)
2: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: J/XbmiLv1fZ3sWHeOg+SX6dRgWimtVtK1GTeA81565c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:8d:1a:5b:6d:1f:fa:23:9f:51:b2:60:10:ca:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Validity
Not Before: Mar 13 05:00:47 2026 GMT
Not After : Mar 14 05:00:47 2026 GMT
Subject: CN=461dd01b7c0ad5aa9329750fc0eb20bd8209b71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:24:17:2a:72:ff:a6:d6:00:fd:ed:a5:dc:
a5:fa:f0:97:06:8f:06:79:ed:e2:80:54:29:c9:ce:
5b:3c:8b:b5:fb:46:c2:62:51:1a:a1:11:2f:0b:81:
46:d5:d0:b1:2f:46:7d:66:6e:ec:c0:a8:d7:25:bb:
cf:6a:8c:c8:b4:70:2d:c2:c1:aa:c2:88:fc:2e:65:
4c:8e:a6:c7:05:a5:0b:48:3b:39:83:b2:4e:b9:a4:
e3:a8:ac:a0:43:22:56:58:e9:6e:17:34:21:2b:23:
d3:9c:2b:13:af:19:25:76:49:78:57:ab:47:bd:48:
1a:9b:6c:c3:b9:42:82:67:2b:e8:b6:ec:4f:e5:28:
2a:d3:e4:5b:08:be:77:e2:07:ab:fc:ae:7b:48:a3:
4f:85:68:bb:ad:72:c4:df:f3:d6:f4:54:69:fd:05:
af:c1:0d:6f:e1:cf:eb:2a:54:65:57:eb:21:10:d2:
21:1b:dd:e5:6f:2b:97:a8:c4:8a:32:29:0f:5a:cf:
95:30:24:e5:54:2d:a3:86:12:ce:2a:cb:01:d3:88:
c4:81:65:5f:c9:ec:b5:57:12:af:ea:42:b8:7f:94:
8e:37:fa:aa:a4:0d:38:93:f1:9c:b7:06:99:49:c3:
14:9f:f9:75:ea:2a:7e:08:75:1a:77:6d:67:a8:fe:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1D:D0:1B:7C:0A:D5:AA:93:29:75:0F:C0:EB:20:BD:82:09:B7:1F
X509v3 Authority Key Identifier:
keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f4:e2:f0:89:e2:8f:8b:ec:84:55:aa:08:3b:e9:0e:1c:88:
65:b5:d3:49:41:9f:1e:b9:03:b0:c0:b4:95:2c:92:f2:86:90:
f3:32:5f:93:9f:25:bf:70:fa:b3:d8:37:28:55:44:bf:35:ec:
9a:58:be:fc:53:84:39:e7:df:81:9c:08:25:b7:06:ce:25:8b:
2e:26:7c:46:bb:80:c4:24:21:e4:55:2d:b6:bd:ca:cb:81:fe:
70:9e:28:59:c9:5e:17:98:7f:7c:f5:c4:cd:17:57:e0:0a:34:
14:15:4b:97:ca:ee:71:41:a3:d5:4a:47:38:7f:01:85:4f:53:
5e:aa:9b:3d:a6:59:1f:95:5a:a3:5b:95:bf:7c:49:66:9f:5e:
3e:01:92:e2:8d:50:d5:ca:a2:15:f1:a6:77:42:c2:a2:45:db:
fa:3a:52:1c:74:ed:c0:f1:7c:b3:f9:f0:3d:d2:0d:4d:42:8b:
58:b7:df:56:a2:1e:a6:98:ad:93:69:5e:9e:c8:11:00:32:d4:
04:65:2b:21:ee:36:16:99:c8:d2:d8:76:e1:e3:5e:e9:25:c8:
94:00:13:fe:93:c7:64:ed:50:7e:58:ab:c4:56:ad:ae:84:22:
60:7e:98:b2:51:14:c6:25:24:16:0b:df:40:0c:22:83:8c:2f:
ac:07:0c:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlkY0aW20f+iOfUbJgEMrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmM2UwODc0ODllZTIzYTk0MjRkNTNmYWMyMTZlZTRiOGUw
MTI4MGUwHhcNMjYwMzEzMDUwMDQ3WhcNMjYwMzE0MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg0NjFkZDAxYjdjMGFkNWFhOTMyOTc1MGZjMGViMjBiZDgyMDliNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLokFypy/6bWAP3tpdyl+vCXBo8G
ee3igFQpyc5bPIu1+0bCYlEaoREvC4FG1dCxL0Z9Zm7swKjXJbvPaozItHAtwsGq
woj8LmVMjqbHBaULSDs5g7JOuaTjqKygQyJWWOluFzQhKyPTnCsTrxkldkl4V6tH
vUgam2zDuUKCZyvotuxP5Sgq0+RbCL534ger/K57SKNPhWi7rXLE3/PW9FRp/QWv
wQ1v4c/rKlRlV+shENIhG93lbyuXqMSKMikPWs+VMCTlVC2jhhLOKssB04jEgWVf
yey1VxKv6kK4f5SON/qqpA04k/GctwaZScMUn/l16ip+CHUad21nqP5kuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYd0Bt8CtWqkyl1D8DrIL2CCbcfMB8GA1UdIwQY
MBaAFH8+CHSJ7iOpQk1T+sIW7kuOASgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUt
YTdjNjNkNTYyZTU2LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUtYTdjNjNkNTYyZTU2
LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfTi8Ini
j4vshFWqCDvpDhyIZbXTSUGfHrkDsMC0lSyS8oaQ8zJfk58lv3D6s9g3KFVEvzXs
mli+/FOEOeffgZwIJbcGziWLLiZ8RruAxCQh5FUttr3Ky4H+cJ4oWcleF5h/fPXE
zRdX4Ao0FBVLl8rucUGj1UpHOH8BhU9TXqqbPaZZH5Vao1uVv3xJZp9ePgGS4o1Q
1cqiFfGmd0LCokXb+jpSHHTtwPF8s/nwPdINTUKLWLffVqIeppitk2lensgRADLU
BGUrIe42FpnI0th24eNe6SXIlAAT/pPHZO1QflirxFatroQiYH6YslEUxiUkFgvf
QAwig4wvrAcMqQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:14:07 2026 by rpki-client