Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
File: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft (raw, json)
Hash identifier: dkZdHgGJlHL4vU8t1UqSJDhiES5pDxDrdVoqHGAw9pA=
Subject key identifier: 66:4C:59:FB:92:A4:D1:88:E3:FB:5B:C3:4D:1A:16:3D:AD:E4:EC:4F
Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
Certificate issuer: /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Certificate serial: 019D38D2EE433A3B97BC90475B50179B96BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
Manifest number: B7
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (hash: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g=)
2: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl (hash: y+FrVfgHgJNUfRfWDpCqZYruGXbbI/7UFbYJdqixkKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ee:43:3a:3b:97:bc:90:47:5b:50:17:9b:96:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=664c59fb92a4d188e3fb5bc34d1a163dade4ec4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:12:98:56:58:95:9b:3d:06:17:26:5b:16:
11:7e:e8:df:da:27:78:a3:0d:28:0f:d5:ac:a4:54:
2e:a7:5c:d1:ed:fc:ce:97:e4:94:bb:d2:6f:b4:e0:
6b:98:e3:fd:0f:49:da:96:52:ab:34:8f:66:b4:38:
c5:77:2d:df:a1:a4:68:a5:37:8b:db:5d:af:ea:23:
da:f5:4a:52:d4:53:7d:5f:14:c1:6d:4d:45:0d:d1:
62:d9:53:3d:95:f7:e5:ab:45:e9:26:9c:1a:67:81:
e2:b0:fb:4e:25:dd:05:d4:04:9a:0c:72:a2:8a:d7:
31:42:11:53:ca:e4:12:80:c8:4a:9a:c4:04:5e:b9:
ca:e1:76:bd:2e:82:f6:1c:e9:62:70:b5:db:ed:14:
e0:6f:f1:08:56:a5:80:68:f6:61:46:5a:72:d2:0e:
34:8b:42:4d:ee:09:a0:37:0d:37:23:d3:51:46:eb:
65:20:0a:22:d3:ba:67:39:96:73:ed:3d:48:f3:c2:
59:7e:52:f6:5b:a8:32:b6:8a:de:54:95:e3:a8:ca:
a5:78:5d:5a:bd:bc:e3:0c:25:4f:a9:3f:3b:98:b9:
52:56:86:32:7b:05:1e:57:df:d6:83:7c:23:53:86:
d8:99:a5:90:57:d5:b0:27:f7:c6:0c:cc:86:78:dd:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4C:59:FB:92:A4:D1:88:E3:FB:5B:C3:4D:1A:16:3D:AD:E4:EC:4F
X509v3 Authority Key Identifier:
keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:33:cd:35:ad:53:f3:9d:0c:e2:a3:d8:d0:7e:31:62:46:a7:
ba:ad:9b:a2:c5:9c:0c:94:de:32:9c:25:69:f4:96:8d:d9:1a:
c8:7f:6d:17:8c:33:7a:5b:9d:26:f8:1b:38:44:af:c3:65:40:
e9:00:07:92:5c:23:94:17:cd:ff:29:d0:9a:65:29:8b:a1:86:
b3:59:60:c8:ab:a9:4c:61:42:cc:97:ce:99:21:d7:72:f2:9c:
1c:55:6a:fd:ab:73:6b:08:7e:b2:a3:77:a8:9f:d8:1f:b9:30:
c8:6e:e0:39:4a:82:65:78:bb:3b:da:7f:1a:da:e4:07:d4:bc:
00:5a:b7:60:75:8d:c0:cf:f3:05:2e:1f:8a:98:4f:50:a2:6b:
1b:9e:3e:5a:70:5d:3e:df:ef:1c:ed:2f:55:aa:6d:39:33:6a:
83:ff:53:55:6c:0c:55:4e:ed:52:50:6b:fe:a1:c5:04:3c:38:
e7:fa:8d:82:d8:b5:0a:ad:dd:23:79:41:87:38:6e:df:c3:91:
59:55:eb:68:a6:53:d3:00:0c:2d:d6:dc:6d:ea:46:f1:27:e6:
e8:3d:0f:ae:2a:b3:1c:e0:83:26:72:b9:19:37:6c:de:d0:0b:
37:91:8d:49:fc:57:49:fb:d2:3b:78:9d:9b:90:d1:3b:98:78:
65:35:6d:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040u5DOjuXvJBHW1AXm5a6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZWY2MGQ5ZmE2YWEwYWMwM2JhMTY3ZGIwMWZjMTgyYjU4
NTYzZGEwHhcNMjYwMzI5MDkwMDQwWhcNMjYwMzMwMDkwMDQwWjAzMTEwLwYDVQQD
Eyg2NjRjNTlmYjkyYTRkMTg4ZTNmYjViYzM0ZDFhMTYzZGFkZTRlYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIESmFZYlZs9BhcmWxYRfujf2id4
ow0oD9WspFQup1zR7fzOl+SUu9JvtOBrmOP9D0nallKrNI9mtDjFdy3foaRopTeL
212v6iPa9UpS1FN9XxTBbU1FDdFi2VM9lfflq0XpJpwaZ4HisPtOJd0F1ASaDHKi
itcxQhFTyuQSgMhKmsQEXrnK4Xa9LoL2HOlicLXb7RTgb/EIVqWAaPZhRlpy0g40
i0JN7gmgNw03I9NRRutlIAoi07pnOZZz7T1I88JZflL2W6gytoreVJXjqMqleF1a
vbzjDCVPqT87mLlSVoYyewUeV9/Wg3wjU4bYmaWQV9WwJ/fGDMyGeN19WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZMWfuSpNGI4/tbw00aFj2t5OxPMB8GA1UdIwQY
MBaAFPzvYNn6aqCsA7oWfbAfwYK1hWPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kOGY5YTEtMGE4OS00ZGRlLWEzMWEt
MGY0NzViZjE0NjAzLzEvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kOGY5YTEtMGE4OS00ZGRlLWEzMWEtMGY0NzViZjE0NjAz
LzEvX085ZzJmcHFvS3dEdWhaOXNCX0JncldGWTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDPNNa1T
850M4qPY0H4xYkanuq2bosWcDJTeMpwlafSWjdkayH9tF4wzeludJvgbOESvw2VA
6QAHklwjlBfN/ynQmmUpi6GGs1lgyKupTGFCzJfOmSHXcvKcHFVq/atzawh+sqN3
qJ/YH7kwyG7gOUqCZXi7O9p/GtrkB9S8AFq3YHWNwM/zBS4fiphPUKJrG54+WnBd
Pt/vHO0vVaptOTNqg/9TVWwMVU7tUlBr/qHFBDw45/qNgti1Cq3dI3lBhzhu38OR
WVXraKZT0wAMLdbcbepG8Sfm6D0PriqzHOCDJnK5GTds3tALN5GNSfxXSfvSO3id
m5DRO5h4ZTVt4g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:28 2026 by rpki-client