Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: SbWzuz06pSxbZn3XLbqWtt7Urz56ceD8QaIO62PSBvU=
Subject key identifier: B0:6D:4C:EB:EE:1C:7A:77:8E:3E:E6:52:8B:23:ED:8E:42:53:8E:D5
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 019D371B840B8075CCC814F4B384391CD678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0A99
Signing time: Sun 29 Mar 2026 01:00:43 +0000
Manifest this update: Sun 29 Mar 2026 01:00:43 +0000
Manifest next update: Mon 30 Mar 2026 01:00:43 +0000
Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: tklyfg7+s3m/exB4O9hTfnVaJgWKm1KsfT9cXJyylSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:84:0b:80:75:cc:c8:14:f4:b3:84:39:1c:d6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Mar 29 01:00:43 2026 GMT
Not After : Mar 30 01:00:43 2026 GMT
Subject: CN=b06d4cebee1c7a778e3ee6528b23ed8e42538ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:03:b3:e3:db:cb:46:cf:b1:0a:39:43:a4:
53:b3:42:62:37:02:08:9c:7f:69:ec:dc:da:5e:9f:
39:4a:16:d9:42:a6:b1:3e:c3:f9:70:4c:5b:f6:20:
c0:4f:a1:bb:45:c7:e2:86:e9:e5:01:48:d0:65:f6:
bb:d7:a1:8f:2d:23:af:c8:b6:ad:4d:f3:80:bc:ee:
c7:59:0a:8f:20:46:7f:de:6e:02:1c:0b:4b:29:39:
ab:bc:b8:f2:12:42:71:1c:eb:c0:77:56:c4:5a:82:
43:b9:1a:ff:54:32:fa:50:d2:29:70:ee:d9:86:9f:
b9:cd:02:04:c3:00:1d:a0:d8:15:83:2c:a3:5e:8f:
2d:cb:3f:71:79:03:f0:b0:f3:ba:c1:80:a5:31:bf:
68:a2:c9:2a:90:45:7f:2a:d4:09:6c:a1:53:18:ae:
07:90:60:c9:ba:bb:b5:9e:14:58:90:73:b0:cf:1a:
d6:82:13:c4:05:cb:0b:3e:d0:1e:af:f5:04:15:cf:
7d:d9:5c:94:fb:38:91:3f:6e:78:7e:ce:0d:08:07:
df:e4:84:86:b9:62:6b:4f:b2:94:14:bc:d5:99:d5:
ae:03:03:95:f5:0d:57:63:a4:b5:eb:79:ea:25:58:
72:10:43:c4:2f:64:4e:95:8f:80:cc:d7:d4:24:b2:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:4C:EB:EE:1C:7A:77:8E:3E:E6:52:8B:23:ED:8E:42:53:8E:D5
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:c0:83:52:03:cf:c9:c1:94:08:64:3f:54:1b:77:b1:f7:eb:
55:dc:cf:a9:ba:4e:1b:5d:1b:af:79:66:0a:34:28:93:18:a5:
a1:e3:3e:d8:af:78:ad:1f:91:2a:2c:24:3c:22:c3:58:90:92:
d4:d2:4c:cb:a4:35:5a:9b:33:0d:d8:b7:56:92:93:7d:83:54:
b4:f8:04:43:36:f3:cb:20:d6:87:77:f7:09:9c:be:23:55:47:
1f:a6:c1:e0:a8:4c:54:6a:3c:8f:5e:56:ff:e4:5e:74:1d:05:
a5:3c:7c:9d:94:19:4d:48:f5:ad:0a:2a:e3:3c:27:6e:2b:72:
45:27:7a:31:e0:f2:24:c2:d5:0e:f7:a5:2f:61:84:ca:fc:bb:
c0:12:b6:5a:86:77:8a:b8:94:db:e6:8d:ab:78:15:94:7a:7f:
2a:f5:5a:87:62:6a:ce:92:5e:b0:30:05:1d:39:98:5f:4c:eb:
3e:29:6e:6c:57:d1:46:04:41:ca:af:72:5f:e4:0a:f7:0b:1f:
d0:40:7a:30:3e:71:13:7d:68:13:39:24:54:aa:dd:7c:62:a0:
af:bf:e7:f6:34:af:73:81:ec:5f:e9:9c:7f:62:85:37:16:1a:
73:83:1f:26:39:58:79:15:29:bf:11:a9:03:d8:69:40:44:2e:
89:b4:c6:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G4QLgHXMyBT0s4Q5HNZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNGU0ODc3YjQ2NGU0ODllOGUxZTYxYmU1N2I4YmJlOGU1
MGU3OTkwHhcNMjYwMzI5MDEwMDQzWhcNMjYwMzMwMDEwMDQzWjAzMTEwLwYDVQQD
EyhiMDZkNGNlYmVlMWM3YTc3OGUzZWU2NTI4YjIzZWQ4ZTQyNTM4ZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+ADs+Pby0bPsQo5Q6RTs0JiNwII
nH9p7NzaXp85ShbZQqaxPsP5cExb9iDAT6G7RcfihunlAUjQZfa716GPLSOvyLat
TfOAvO7HWQqPIEZ/3m4CHAtLKTmrvLjyEkJxHOvAd1bEWoJDuRr/VDL6UNIpcO7Z
hp+5zQIEwwAdoNgVgyyjXo8tyz9xeQPwsPO6wYClMb9ooskqkEV/KtQJbKFTGK4H
kGDJuru1nhRYkHOwzxrWghPEBcsLPtAer/UEFc992VyU+ziRP254fs4NCAff5ISG
uWJrT7KUFLzVmdWuAwOV9Q1XY6S163nqJVhyEEPEL2ROlY+AzNfUJLJY3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBtTOvuHHp3jj7mUosj7Y5CU47VMB8GA1UdIwQY
MBaAFH5OSHe0ZOSJ6OHmG+V7i76OUOeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYt
MGFmMjZiYzc2NDIxLzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYtMGFmMjZiYzc2NDIx
LzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMCDUgPP
ycGUCGQ/VBt3sffrVdzPqbpOG10br3lmCjQokxiloeM+2K94rR+RKiwkPCLDWJCS
1NJMy6Q1WpszDdi3VpKTfYNUtPgEQzbzyyDWh3f3CZy+I1VHH6bB4KhMVGo8j15W
/+RedB0FpTx8nZQZTUj1rQoq4zwnbityRSd6MeDyJMLVDvelL2GEyvy7wBK2WoZ3
iriU2+aNq3gVlHp/KvVah2JqzpJesDAFHTmYX0zrPilubFfRRgRByq9yX+QK9wsf
0EB6MD5xE31oEzkkVKrdfGKgr7/n9jSvc4HsX+mcf2KFNxYac4MfJjlYeRUpvxGp
A9hpQEQuibTGHw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:32 2026 by rpki-client