Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json)
Hash identifier: PF2XOU8/UHZ2v3BXatzheMtX1tIn7H4RSCx4R2NenpU=
Subject key identifier: 5C:4C:1C:0E:A5:51:F2:E0:23:1A:24:D1:FC:47:DF:5F:61:50:F8:16
Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Certificate serial: 019D38D33ECEB90169E635013C4093CD79AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
Manifest number: 158E
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: 7fDVFx_W8cXxkevRfIg2i3GdYio.roa (hash: Fsf0L/tikLEgDCmVChLeIt5Pn4gsSm28h3gpWcwkAMM=)
2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: X0AXIm+PjMfNGJpj+ZSyfV3KAsrQ1pRBfkmUocITy4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3e:ce:b9:01:69:e6:35:01:3c:40:93:cd:79:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=5c4c1c0ea551f2e0231a24d1fc47df5f6150f816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a1:93:41:ed:f7:cb:17:4b:3f:b7:6f:1e:02:
61:f0:d1:cb:98:f6:07:ed:46:b9:77:5c:6a:82:bd:
28:01:79:e4:45:85:f0:74:af:aa:37:bb:24:23:cc:
c8:17:53:5c:42:7f:69:1b:33:92:fd:5e:3b:fc:e7:
aa:96:3d:43:4c:69:fa:95:e7:96:51:44:70:55:80:
3e:1d:dd:90:42:8f:90:45:f7:19:ca:66:44:91:00:
4e:11:15:69:63:b2:c9:f3:95:ff:cf:76:08:4b:a0:
46:e2:2e:7d:f3:39:06:75:27:b3:5a:7d:87:6b:6b:
42:bf:57:3f:9b:78:51:a0:d2:26:11:7e:0c:de:73:
a2:f2:59:68:81:8f:ac:0b:0d:49:e4:71:60:18:fe:
21:99:ac:dc:02:54:a4:50:22:8f:5e:cc:83:a4:8f:
64:ce:b2:c3:fe:e2:23:69:e7:6d:8c:c9:43:36:19:
46:9d:b0:18:60:c7:39:cd:47:1f:3a:9a:02:89:bd:
39:44:f5:b5:c0:53:d0:e4:0c:66:8f:d9:5b:64:b4:
3f:56:72:25:89:51:f1:3a:11:34:8b:8b:54:9b:0f:
ef:8e:82:eb:07:46:eb:40:8a:b5:49:9e:88:c0:50:
8b:7c:f3:0f:eb:fe:ce:68:8f:91:71:d8:f0:6e:0b:
6f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:1C:0E:A5:51:F2:E0:23:1A:24:D1:FC:47:DF:5F:61:50:F8:16
X509v3 Authority Key Identifier:
keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f8:f6:21:d7:8d:ef:75:74:b5:b9:c2:f0:78:03:39:49:58:
6e:65:07:87:dc:bd:27:d9:d2:9f:be:12:46:74:9a:40:30:4c:
b7:ca:d3:a6:2a:c4:ad:ba:bb:e3:47:c9:a6:05:d9:42:5e:81:
c5:61:63:bd:c0:bf:60:19:63:bf:c0:2d:5c:61:a4:44:08:78:
34:e9:96:3c:f4:ae:b4:ec:29:5e:ff:06:70:9f:2d:e0:0d:7f:
25:e9:e4:13:2b:94:4d:52:f0:ab:0e:88:af:31:74:e5:7d:fb:
1b:2b:58:27:cf:75:7a:eb:cd:a0:e4:c5:5e:3d:d9:43:66:2a:
23:c3:59:40:93:17:b7:73:c3:f0:ba:ee:0a:ce:53:a5:57:2a:
61:8c:c5:f4:45:2f:00:6c:d3:c2:4f:2c:75:0b:57:67:2c:03:
45:8b:eb:6a:8e:4d:da:91:99:a1:24:3a:98:1f:0a:24:d1:e2:
9e:66:9e:4d:7d:89:f2:e5:5b:79:16:1e:f7:91:8e:95:79:e3:
8f:f4:37:40:8b:a9:34:83:49:c8:81:c1:16:bf:a2:5a:02:7f:
a0:ff:5d:16:a8:f4:17:8e:83:16:c2:aa:9f:88:d9:70:e9:72:
ba:84:de:a4:09:77:35:a7:80:10:7f:ad:15:a6:80:f1:4e:3c:
f5:75:bc:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040z7OuQFp5jUBPECTzXmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2M2QyNTcyMTgwZjRiNzg0ZmI0ZjJhNWVkNTBlOWZlNWU2
YmU2YTcwHhcNMjYwMzI5MDkwMTAxWhcNMjYwMzMwMDkwMTAxWjAzMTEwLwYDVQQD
Eyg1YzRjMWMwZWE1NTFmMmUwMjMxYTI0ZDFmYzQ3ZGY1ZjYxNTBmODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaGTQe33yxdLP7dvHgJh8NHLmPYH
7Ua5d1xqgr0oAXnkRYXwdK+qN7skI8zIF1NcQn9pGzOS/V47/Oeqlj1DTGn6leeW
UURwVYA+Hd2QQo+QRfcZymZEkQBOERVpY7LJ85X/z3YIS6BG4i598zkGdSezWn2H
a2tCv1c/m3hRoNImEX4M3nOi8llogY+sCw1J5HFgGP4hmazcAlSkUCKPXsyDpI9k
zrLD/uIjaedtjMlDNhlGnbAYYMc5zUcfOpoCib05RPW1wFPQ5Axmj9lbZLQ/VnIl
iVHxOhE0i4tUmw/vjoLrB0brQIq1SZ6IwFCLfPMP6/7OaI+RcdjwbgtvuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxMHA6lUfLgIxok0fxH319hUPgWMB8GA1UdIwQY
MBaAFBY9JXIYD0t4T7Type1Q6f5ea+anMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEt
NzBiYmM3YzBhOWE1LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEtNzBiYmM3YzBhOWE1
LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifj2IdeN
73V0tbnC8HgDOUlYbmUHh9y9J9nSn74SRnSaQDBMt8rTpirErbq740fJpgXZQl6B
xWFjvcC/YBljv8AtXGGkRAh4NOmWPPSutOwpXv8GcJ8t4A1/JenkEyuUTVLwqw6I
rzF05X37GytYJ891euvNoOTFXj3ZQ2YqI8NZQJMXt3PD8LruCs5TpVcqYYzF9EUv
AGzTwk8sdQtXZywDRYvrao5N2pGZoSQ6mB8KJNHinmaeTX2J8uVbeRYe95GOlXnj
j/Q3QIupNINJyIHBFr+iWgJ/oP9dFqj0F46DFsKqn4jZcOlyuoTepAl3NaeAEH+t
FaaA8U489XW8pw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:57 2026 by rpki-client