Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier: ewBnuIyT2Az2D+i5IQSxmuqhnWDRXwA0dy/zWdU3IiQ=
Subject key identifier: F5:21:74:2A:5A:69:5E:CA:F8:27:E2:8A:F5:2F:DE:36:A6:47:08:7B
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial: 019D3909B81EE396964C97352E4A1CEB8372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number: 1385
Signing time: Sun 29 Mar 2026 10:00:31 +0000
Manifest this update: Sun 29 Mar 2026 10:00:31 +0000
Manifest next update: Mon 30 Mar 2026 10:00:31 +0000
Files and hashes: 1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: Vfn71ucSocT5ipXOebuQhRhMexlnaVH6zj+6/h0kWss=)
2: yUKFZeoKxy_IydCROx3RAxlkij4.roa (hash: tQWywAFGnlvDGY+xP5LWd6/G2Ef4/YYyX7hiYF4DqWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b8:1e:e3:96:96:4c:97:35:2e:4a:1c:eb:83:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Validity
Not Before: Mar 29 10:00:31 2026 GMT
Not After : Mar 30 10:00:31 2026 GMT
Subject: CN=f521742a5a695ecaf827e28af52fde36a647087b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:1b:52:f8:1d:69:a5:3f:5a:01:25:52:7b:
2e:13:fe:ff:c1:ec:4d:bd:53:c5:79:81:f6:92:12:
e2:f7:48:36:b7:8c:4c:d5:c2:21:c4:af:fe:77:12:
30:d4:26:65:fa:4b:af:a1:0b:05:16:c4:d5:06:9f:
00:e9:74:d8:9b:e8:cc:95:a1:9e:96:b8:0c:e9:c6:
b2:ac:4d:6e:bc:ab:0c:04:9d:06:9c:bb:25:7c:d0:
2f:9f:aa:76:55:af:06:f2:03:a5:05:d2:e6:2e:e0:
0d:68:ab:43:3d:46:cd:48:ba:ec:d3:98:0b:55:6d:
dd:61:9a:b5:44:82:f5:36:d1:39:d6:2c:b2:cb:3c:
eb:d9:a9:90:12:fa:98:87:f0:88:6b:9b:f8:bf:4a:
7d:78:71:22:ed:9e:38:f4:55:f7:57:e5:0c:7b:91:
54:e3:46:65:5e:9a:74:11:65:66:69:0f:ba:23:7b:
df:db:d3:41:83:75:e2:ea:10:5d:72:28:f5:88:2a:
ab:bd:50:48:2f:c5:50:7d:e2:c5:31:8b:ea:50:59:
b9:fd:37:69:2a:7e:6d:b8:2d:17:68:49:26:b4:86:
40:9b:b3:3f:2c:0a:74:4b:89:40:14:fd:d3:f8:7f:
ee:4c:ee:42:90:6b:cb:91:25:46:90:d6:55:23:1a:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:21:74:2A:5A:69:5E:CA:F8:27:E2:8A:F5:2F:DE:36:A6:47:08:7B
X509v3 Authority Key Identifier:
keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e9:d5:cc:76:af:61:61:d8:7e:60:d1:b0:47:e5:44:66:5d:
8d:1a:c7:a7:42:2a:b4:6d:3b:d3:9e:85:d8:ab:77:e7:76:dc:
87:b5:31:ac:ce:7a:7b:05:32:63:b2:67:4d:da:57:23:42:2a:
11:3e:44:0d:31:7d:13:71:6e:61:c5:dc:0a:b3:4e:a0:18:f1:
eb:6d:f4:20:75:6e:8c:29:21:36:8a:f5:0a:bc:6e:99:1d:cf:
a9:84:04:12:4f:a1:04:9c:78:fe:3b:b1:df:7a:ef:e8:52:4e:
03:b3:81:ba:17:14:a6:2f:fa:22:0c:59:59:e7:4e:a8:b3:3d:
6a:f5:41:28:75:5b:49:eb:41:e7:cd:84:25:a2:b3:df:ff:4e:
7a:3e:14:ea:64:0f:5c:b6:5c:d3:4e:40:69:d0:de:f1:5c:4b:
02:c6:19:9a:b1:2a:53:b8:f1:51:ff:0e:82:35:e4:bc:7e:b6:
26:60:54:89:b2:89:c3:68:59:2c:b6:b1:bc:fa:96:69:83:e5:
d4:52:94:96:8b:0e:5b:12:10:46:41:5f:4a:16:35:db:61:80:
cc:8a:69:48:9d:0d:01:e7:a6:19:ec:e2:4b:1d:1e:e3:45:7d:
54:f2:f7:17:20:58:bc:10:0d:10:00:ad:b5:8d:25:bb:e5:35:
19:a2:56:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cbge45aWTJc1Lkoc64NyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOGVlNGFmMmZjMWM0ZWMxYjE3NjdlM2QzZjI2MDczMmVk
ZjkxNjkwHhcNMjYwMzI5MTAwMDMxWhcNMjYwMzMwMTAwMDMxWjAzMTEwLwYDVQQD
EyhmNTIxNzQyYTVhNjk1ZWNhZjgyN2UyOGFmNTJmZGUzNmE2NDcwODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiIbUvgdaaU/WgElUnsuE/7/wexN
vVPFeYH2khLi90g2t4xM1cIhxK/+dxIw1CZl+kuvoQsFFsTVBp8A6XTYm+jMlaGe
lrgM6cayrE1uvKsMBJ0GnLslfNAvn6p2Va8G8gOlBdLmLuANaKtDPUbNSLrs05gL
VW3dYZq1RIL1NtE51iyyyzzr2amQEvqYh/CIa5v4v0p9eHEi7Z449FX3V+UMe5FU
40ZlXpp0EWVmaQ+6I3vf29NBg3Xi6hBdcij1iCqrvVBIL8VQfeLFMYvqUFm5/Tdp
Kn5tuC0XaEkmtIZAm7M/LAp0S4lAFP3T+H/uTO5CkGvLkSVGkNZVIxqMqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUhdCpaaV7K+CfiivUv3jamRwh7MB8GA1UdIwQY
MBaAFHyO5K8vwcTsGxdn49PyYHMu35FpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjIt
ODNjMjE1N2JkYWMwLzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hOWUwYmQtYWM4NS00ZTJlLThmMjItODNjMjE1N2JkYWMw
LzEvZkk3a3J5X0J4T3diRjJmajBfSmdjeTdma1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOnVzHav
YWHYfmDRsEflRGZdjRrHp0IqtG07056F2Kt353bch7UxrM56ewUyY7JnTdpXI0Iq
ET5EDTF9E3FuYcXcCrNOoBjx6230IHVujCkhNor1CrxumR3PqYQEEk+hBJx4/jux
33rv6FJOA7OBuhcUpi/6IgxZWedOqLM9avVBKHVbSetB582EJaKz3/9Oej4U6mQP
XLZc005AadDe8VxLAsYZmrEqU7jxUf8OgjXkvH62JmBUibKJw2hZLLaxvPqWaYPl
1FKUlosOWxIQRkFfShY122GAzIppSJ0NAeemGeziSx0e40V9VPL3FyBYvBANEACt
tY0lu+U1GaJWlQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:13 2026 by rpki-client