Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File: FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier: O4frcCBL9TSyrJtlQovRjj6Os7Up4oYnm5uROyrPbso=
Subject key identifier: B7:F1:A8:D7:00:92:AD:6D:AB:D7:96:E0:42:CA:02:4B:2E:58:BA:8E
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial: 019D371BA82AE72D3137C3F3CE899F4196EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number: 0B9A
Signing time: Sun 29 Mar 2026 01:00:52 +0000
Manifest this update: Sun 29 Mar 2026 01:00:52 +0000
Manifest next update: Mon 30 Mar 2026 01:00:52 +0000
Files and hashes: 1: 20k_piblwEYsVd_YiDJCaz9Ey54.roa (hash: 4RIWua1sQFhhYH4ddyZN8LNm60NZVa4EtH71m0R8zfU=)
2: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: 4vGI8nDpJRYOh8V4IlwTbvClsZ0qmeADRvgk5VNXNV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a8:2a:e7:2d:31:37:c3:f3:ce:89:9f:41:96:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Validity
Not Before: Mar 29 01:00:52 2026 GMT
Not After : Mar 30 01:00:52 2026 GMT
Subject: CN=b7f1a8d70092ad6dabd796e042ca024b2e58ba8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:f7:cc:67:55:8c:dc:eb:0f:e2:56:a3:c7:
3f:a8:1a:d4:54:10:9d:d5:fc:86:3a:0e:48:25:7f:
d4:9a:62:4d:8e:89:ce:b8:26:0f:34:63:06:ea:20:
6a:34:c4:18:20:9b:d7:a1:8b:b0:55:fb:1a:00:b4:
42:c9:f1:96:5f:fc:de:a8:67:97:de:0f:4a:0e:7e:
76:2e:f8:21:16:d4:27:ae:9d:36:04:20:82:48:21:
7e:6c:20:8d:c2:c4:7c:e6:21:0a:55:39:20:4a:7f:
80:65:e5:57:12:e4:45:ba:8f:ce:f9:05:e4:36:f4:
f5:79:d1:cf:b4:d5:3e:5f:2c:46:a0:8d:17:d2:b7:
ea:4d:b2:c5:eb:99:29:7d:fc:8d:82:e8:b2:c9:3c:
5e:61:75:78:c4:37:b8:b0:1d:44:2f:64:3a:5b:57:
4e:0c:5e:7f:2e:11:66:3b:89:0a:80:d1:c9:30:74:
a3:e9:a6:eb:ea:4a:d7:74:10:39:4d:df:d2:a2:15:
a9:da:2d:72:35:39:d5:77:f4:4f:1f:83:44:db:ef:
7d:27:ff:76:67:05:00:bf:9e:45:94:b7:c6:cb:70:
a2:de:bd:03:4f:94:26:2a:b3:e6:52:98:65:11:f4:
d4:c6:3a:c5:fb:ec:d4:a7:2d:c4:83:8d:c5:31:68:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F1:A8:D7:00:92:AD:6D:AB:D7:96:E0:42:CA:02:4B:2E:58:BA:8E
X509v3 Authority Key Identifier:
keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6b:16:9d:72:f1:27:3b:b0:76:ff:d3:ca:27:db:69:cf:a7:
e4:d5:bb:9e:bc:87:31:50:46:1d:91:07:0d:e7:51:af:f2:a7:
37:01:65:94:6c:ac:ed:9f:60:c9:51:93:fc:cc:6b:a4:1b:87:
8b:16:c3:a2:68:e0:79:fc:67:1c:69:b9:e1:ea:6d:33:66:61:
36:c5:ed:21:35:7b:77:f2:11:66:74:32:5b:c7:c8:30:c2:8f:
e6:c3:0f:0f:0e:b7:5f:7d:12:3b:f5:71:66:4b:e3:f3:b2:27:
a3:d3:fa:8c:9f:40:d1:fc:c3:25:f0:93:16:9c:41:49:c0:4c:
7a:d1:5b:ce:e5:87:33:77:c4:26:df:6f:d8:00:95:5c:d1:f5:
2d:db:50:9d:8f:e3:56:64:cb:cd:79:8e:8a:cf:39:1b:ca:3a:
79:c3:f4:6b:f5:63:44:41:12:d1:50:af:2f:36:e3:f4:29:c8:
51:fc:6f:55:fa:47:86:6a:7b:5d:49:3f:51:db:b9:ec:6b:dd:
21:de:0c:08:e4:18:46:bc:16:97:c9:3c:83:13:e6:60:3d:8b:
be:0f:5c:41:07:d3:cf:89:01:53:77:bd:de:cc:7d:3a:97:18:
8c:48:43:69:0d:49:c5:89:05:e2:0d:5a:a4:6f:53:b7:97:0b:
72:d2:13:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G6gq5y0xN8PzzomfQZbrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OThkZjAzMDBhYWI1ZTJhNmYxYWM3OGU1OTNlY2M5NzQw
ZGFhZGIwHhcNMjYwMzI5MDEwMDUyWhcNMjYwMzMwMDEwMDUyWjAzMTEwLwYDVQQD
EyhiN2YxYThkNzAwOTJhZDZkYWJkNzk2ZTA0MmNhMDI0YjJlNThiYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8f3zGdVjNzrD+JWo8c/qBrUVBCd
1fyGOg5IJX/UmmJNjonOuCYPNGMG6iBqNMQYIJvXoYuwVfsaALRCyfGWX/zeqGeX
3g9KDn52LvghFtQnrp02BCCCSCF+bCCNwsR85iEKVTkgSn+AZeVXEuRFuo/O+QXk
NvT1edHPtNU+XyxGoI0X0rfqTbLF65kpffyNguiyyTxeYXV4xDe4sB1EL2Q6W1dO
DF5/LhFmO4kKgNHJMHSj6abr6krXdBA5Td/SohWp2i1yNTnVd/RPH4NE2+99J/92
ZwUAv55FlLfGy3Ci3r0DT5QmKrPmUphlEfTUxjrF++zUpy3Eg43FMWh/QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfxqNcAkq1tq9eW4ELKAksuWLqOMB8GA1UdIwQY
MBaAFBaY3wMAqrXipvGseOWT7Ml0DarbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NGNkNGUtMTQyYy00MjY4LWJlZjYt
NmVjOWQ5ODhhNDA4LzEvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84NGNkNGUtMTQyYy00MjY4LWJlZjYtNmVjOWQ5ODhhNDA4
LzEvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWsWnXLx
Jzuwdv/Tyifbac+n5NW7nryHMVBGHZEHDedRr/KnNwFllGys7Z9gyVGT/MxrpBuH
ixbDomjgefxnHGm54eptM2ZhNsXtITV7d/IRZnQyW8fIMMKP5sMPDw63X30SO/Vx
Zkvj87Ino9P6jJ9A0fzDJfCTFpxBScBMetFbzuWHM3fEJt9v2ACVXNH1LdtQnY/j
VmTLzXmOis85G8o6ecP0a/VjREES0VCvLzbj9CnIUfxvVfpHhmp7XUk/Udu57Gvd
Id4MCOQYRrwWl8k8gxPmYD2Lvg9cQQfTz4kBU3e93sx9OpcYjEhDaQ1JxYkF4g1a
pG9Tt5cLctITFg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:02 2026 by rpki-client