Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
File: fggLq1W_NHMYjCDHNmpssETHGVw.mft (raw, json)
Hash identifier: r6QLZMWT4GziDZsznnOsYTrdaZzhnKbs/AczIG10ae0=
Subject key identifier: 17:0B:B9:3B:77:7B:24:C1:D4:9B:84:72:9A:F7:9F:01:DD:88:CB:8E
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 019D3A1CC055777671F0CF5B908F3AB07958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
Manifest number: 1335
Signing time: Sun 29 Mar 2026 15:00:55 +0000
Manifest this update: Sun 29 Mar 2026 15:00:55 +0000
Manifest next update: Mon 30 Mar 2026 15:00:55 +0000
Files and hashes: 1: 7Xjnrks0V0KJBUvovHU5FPRBPgI.roa (hash: Uj+974AkqjIOmRxxULMnodgkGY00aGKR4YY4cfemHV0=)
2: fggLq1W_NHMYjCDHNmpssETHGVw.crl (hash: Xw9h/uOPMj3NnQFRYoJgKCmGm5GY2emcFccSxDwrYEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:c0:55:77:76:71:f0:cf:5b:90:8f:3a:b0:79:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Mar 29 15:00:55 2026 GMT
Not After : Mar 30 15:00:55 2026 GMT
Subject: CN=170bb93b777b24c1d49b84729af79f01dd88cb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:d4:a6:ac:7a:62:84:5b:cf:05:f4:88:11:
ac:01:b6:ec:f8:48:17:52:1b:e5:61:5e:46:ed:1d:
ce:74:66:12:c8:a6:56:be:9f:40:74:39:d4:6f:aa:
7f:9c:8b:5e:49:9b:fc:88:9f:66:e3:cc:ae:f2:d0:
11:40:a5:fa:4d:68:66:03:2b:d0:85:e6:25:fc:4b:
17:21:69:73:a2:cd:d9:5a:e7:4a:48:da:40:fc:73:
49:0d:6b:64:c1:89:ba:4b:f2:c6:c8:2f:e2:04:1d:
bf:26:98:b0:f9:c5:8a:6b:b1:d3:c2:96:c5:68:ba:
eb:de:2f:99:2f:c4:96:00:9c:6a:15:18:e7:81:15:
18:60:db:05:f6:d8:fb:56:11:ca:5a:54:5d:de:16:
73:75:2b:d1:c3:f3:13:5e:39:5e:99:e6:78:20:79:
94:0e:4a:9f:cc:84:3a:f8:ae:b2:6d:67:c0:1b:91:
c1:4a:4b:2d:9b:6c:04:70:97:37:11:de:65:21:ed:
86:00:99:8d:6d:7c:bd:2f:f7:86:d9:38:c4:b6:0a:
ba:9e:06:45:ad:7e:01:94:9b:da:6e:78:52:9b:db:
38:89:33:c7:a1:f4:18:01:88:c3:cc:19:b1:7a:b4:
12:e3:90:30:8b:30:bf:85:ff:3b:ea:4e:29:df:69:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0B:B9:3B:77:7B:24:C1:D4:9B:84:72:9A:F7:9F:01:DD:88:CB:8E
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d9:f3:fc:6d:87:fc:29:e2:40:c5:e3:0e:95:44:d9:84:b7:
8d:a2:1e:be:82:40:57:ad:df:c9:98:3c:3a:5c:00:cf:1e:d6:
4c:1d:9a:0c:59:9e:0c:31:e7:45:6c:e1:6a:6d:34:56:74:c8:
be:e2:47:da:f7:e0:a3:4f:3c:44:6b:8d:76:9f:59:77:cb:c0:
28:93:52:06:cc:0d:48:be:d7:05:25:9d:ff:77:e5:57:ec:98:
82:f4:31:d3:26:9f:e5:39:ec:f3:ce:85:b2:5a:da:bd:df:5e:
cc:d5:a5:72:58:5f:71:c4:e4:d7:18:65:64:b2:38:ae:7b:c0:
21:40:db:8f:6e:97:2a:74:fd:04:44:74:4a:75:f6:c0:d8:e8:
e0:7c:56:42:a7:c9:60:64:e9:8a:b0:f8:12:21:f3:6c:ed:f7:
7c:62:e4:ac:db:4f:f0:5f:cc:04:2a:44:50:c1:6a:75:ea:cd:
10:8b:46:14:d2:54:66:64:86:9c:27:ac:18:49:68:46:8a:14:
31:e1:29:42:f6:b8:e6:13:ba:19:c0:dd:c6:59:b9:16:bb:12:
db:d2:e0:70:c0:d6:31:d4:2e:fb:67:eb:5f:47:05:ed:55:55:
b2:c8:65:e6:fe:43:ea:b9:4e:c5:89:e6:36:69:bc:8a:94:a3:
b0:bd:c8:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HMBVd3Zx8M9bkI86sHlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDgwYmFiNTViZjM0NzMxODhjMjBjNzM2NmE2Y2IwNDRj
NzE5NWMwHhcNMjYwMzI5MTUwMDU1WhcNMjYwMzMwMTUwMDU1WjAzMTEwLwYDVQQD
EygxNzBiYjkzYjc3N2IyNGMxZDQ5Yjg0NzI5YWY3OWYwMWRkODhjYjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk33Upqx6YoRbzwX0iBGsAbbs+EgX
UhvlYV5G7R3OdGYSyKZWvp9AdDnUb6p/nIteSZv8iJ9m48yu8tARQKX6TWhmAyvQ
heYl/EsXIWlzos3ZWudKSNpA/HNJDWtkwYm6S/LGyC/iBB2/Jpiw+cWKa7HTwpbF
aLrr3i+ZL8SWAJxqFRjngRUYYNsF9tj7VhHKWlRd3hZzdSvRw/MTXjlemeZ4IHmU
DkqfzIQ6+K6ybWfAG5HBSkstm2wEcJc3Ed5lIe2GAJmNbXy9L/eG2TjEtgq6ngZF
rX4BlJvabnhSm9s4iTPHofQYAYjDzBmxerQS45AwizC/hf876k4p32kVgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcLuTt3eyTB1JuEcpr3nwHdiMuOMB8GA1UdIwQY
MBaAFH4IC6tVvzRzGIwgxzZqbLBExxlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mZGE4YzktNmVmYS00OTU0LWE1YzMt
NjMwYmQ3M2NlMjY3LzEvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mZGE4YzktNmVmYS00OTU0LWE1YzMtNjMwYmQ3M2NlMjY3
LzEvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdnz/G2H
/CniQMXjDpVE2YS3jaIevoJAV63fyZg8OlwAzx7WTB2aDFmeDDHnRWzham00VnTI
vuJH2vfgo088RGuNdp9Zd8vAKJNSBswNSL7XBSWd/3flV+yYgvQx0yaf5Tns886F
slravd9ezNWlclhfccTk1xhlZLI4rnvAIUDbj26XKnT9BER0SnX2wNjo4HxWQqfJ
YGTpirD4EiHzbO33fGLkrNtP8F/MBCpEUMFqderNEItGFNJUZmSGnCesGEloRooU
MeEpQva45hO6GcDdxlm5FrsS29LgcMDWMdQu+2frX0cF7VVVsshl5v5D6rlOxYnm
Nmm8ipSjsL3IPQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:17 2026 by rpki-client