
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: k09TOLnI74B2T7MZPyToUwqGugzgZxYV36X9cF22DWY=
Subject key identifier: D9:84:B4:30:CC:95:74:24:7B:56:77:84:76:7A:BE:7A:26:1E:EC:82
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 019E7B5537B786987A9E529AED50A87962C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: 03FA
Signing time: Sun 31 May 2026 00:00:42 +0000
Manifest this update: Sun 31 May 2026 00:00:42 +0000
Manifest next update: Mon 01 Jun 2026 00:00:42 +0000
Files and hashes: 1: 2QUxpcZo42MO8NPw3ViO527hXWk.roa (hash: jXv9njLEXA5SkLC2GOthlPZiLCWl9vdzZCcofBzcG18=)
2: JNor73gXz2ec5FVJvGqRzBpyxSI.roa (hash: k/2ZGjtnrbIQP29sZmOjF46Dom6I0jn9nqS/95MSEu4=)
3: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: owTO5gQZUkyMPJDxG4zfKV9tRNUs3NiN9lU49h1iwaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7b:55:37:b7:86:98:7a:9e:52:9a:ed:50:a8:79:62:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: May 31 00:00:42 2026 GMT
Not After : Jun 1 00:00:42 2026 GMT
Subject: CN=d984b430cc9574247b567784767abe7a261eec82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:73:3b:4e:e9:a5:df:b3:b3:dd:cd:c2:61:
f2:e6:63:56:14:af:14:34:0f:49:78:78:78:45:0c:
91:31:41:f0:2d:f5:07:20:35:a8:aa:c7:57:08:7f:
7c:dd:d6:b5:f8:6d:3c:19:0c:48:30:f6:ae:ff:4b:
7d:6a:4e:82:28:6c:bf:b8:c8:33:1c:48:fb:68:d1:
a8:5d:37:d5:7d:cb:30:d8:c2:e0:65:54:a1:19:5b:
ed:d2:b1:cc:32:b9:12:9c:38:b2:d3:8f:c4:f0:56:
13:5d:c9:3c:ac:b1:e5:ae:59:23:46:84:69:ec:ad:
99:69:cc:45:69:97:be:2a:b7:4a:50:2f:18:40:83:
b0:08:c3:58:fd:93:b3:59:21:35:52:3d:23:65:91:
f4:e4:ed:c7:b4:07:48:35:cb:a7:b9:12:a5:1b:a3:
fd:31:fb:95:7f:b1:04:02:c2:ad:f6:44:18:49:5e:
cf:d0:a6:b0:db:44:89:c4:07:5b:24:83:a0:4a:59:
ff:4c:34:be:56:d0:56:f5:4c:41:0f:d1:d6:f5:bc:
7e:50:33:f9:eb:3b:a4:29:e8:4b:d9:b2:a3:3f:e0:
c1:54:db:48:57:80:5a:47:09:43:5f:7e:f5:86:87:
43:e0:04:0d:51:99:36:e1:cc:34:e6:51:a2:ba:af:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:84:B4:30:CC:95:74:24:7B:56:77:84:76:7A:BE:7A:26:1E:EC:82
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:db:7f:ba:fc:96:d4:a2:12:e1:3a:e6:0f:09:33:85:6e:0f:
07:c0:ff:3b:df:68:d7:81:ee:f7:07:71:8c:b3:4b:12:82:18:
97:9a:af:f0:6b:39:59:71:46:39:bc:65:35:27:7f:e5:89:9c:
3b:31:9b:75:14:f4:15:7d:f9:a9:04:cd:c3:a1:21:d6:20:e5:
e6:f5:d5:25:97:9f:89:a6:3c:79:91:3c:44:0f:a1:80:b6:16:
2e:97:2c:b8:2b:ac:bd:ee:6f:91:bd:0f:9f:6d:e1:ee:8e:84:
bd:cf:d7:22:76:87:a6:8e:c5:55:70:05:ef:e8:ee:e0:d7:2d:
51:92:5d:b0:93:96:c0:97:be:c9:e5:b9:16:f7:98:92:dc:2b:
cf:60:9b:e8:5c:93:4d:39:51:13:0b:80:64:d3:85:f7:eb:8c:
2c:14:86:54:76:5f:64:47:5c:ef:2c:c8:17:40:ea:a6:60:15:
0d:f1:0b:22:c7:ac:c1:5f:30:61:c0:07:49:f5:80:61:46:fb:
8a:33:95:27:ed:aa:55:43:e5:52:3e:9c:a1:4a:b5:4d:0a:ab:
66:2e:cf:de:e6:df:c3:ab:ed:00:42:19:4d:42:6b:ba:30:98:
5c:2b:a5:60:b0:17:ef:a6:92:76:7c:52:17:42:a3:df:84:e3:
cb:f6:7a:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ57VTe3hph6nlKa7VCoeWLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZjU0YjE4NzlhMTQ1Mzk3ZmFjMGQzNThlZmFiZDJmNWZk
MGFjYTEwHhcNMjYwNTMxMDAwMDQyWhcNMjYwNjAxMDAwMDQyWjAzMTEwLwYDVQQD
EyhkOTg0YjQzMGNjOTU3NDI0N2I1Njc3ODQ3NjdhYmU3YTI2MWVlYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLpzO07ppd+zs93NwmHy5mNWFK8U
NA9JeHh4RQyRMUHwLfUHIDWoqsdXCH983da1+G08GQxIMPau/0t9ak6CKGy/uMgz
HEj7aNGoXTfVfcsw2MLgZVShGVvt0rHMMrkSnDiy04/E8FYTXck8rLHlrlkjRoRp
7K2ZacxFaZe+KrdKUC8YQIOwCMNY/ZOzWSE1Uj0jZZH05O3HtAdINcunuRKlG6P9
MfuVf7EEAsKt9kQYSV7P0Kaw20SJxAdbJIOgSln/TDS+VtBW9UxBD9HW9bx+UDP5
6zukKehL2bKjP+DBVNtIV4BaRwlDX371hodD4AQNUZk24cw05lGiuq+gWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmEtDDMlXQke1Z3hHZ6vnomHuyCMB8GA1UdIwQY
MBaAFP31Sxh5oUU5f6wNNY76vS9f0KyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OWI0NjItNzVhZS00YWNjLWI1MmUt
NzExODZlMmI1MTZhLzEvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80OWI0NjItNzVhZS00YWNjLWI1MmUtNzExODZlMmI1MTZh
LzEvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAudt/uvyW
1KIS4TrmDwkzhW4PB8D/O99o14Hu9wdxjLNLEoIYl5qv8Gs5WXFGObxlNSd/5Ymc
OzGbdRT0FX35qQTNw6Eh1iDl5vXVJZefiaY8eZE8RA+hgLYWLpcsuCusve5vkb0P
n23h7o6Evc/XInaHpo7FVXAF7+ju4NctUZJdsJOWwJe+yeW5FveYktwrz2Cb6FyT
TTlREwuAZNOF9+uMLBSGVHZfZEdc7yzIF0DqpmAVDfELIseswV8wYcAHSfWAYUb7
ijOVJ+2qVUPlUj6coUq1TQqrZi7P3ubfw6vtAEIZTUJrujCYXCulYLAX76aSdnxS
F0Kj34Tjy/Z6ZQ==
-----END CERTIFICATE-----
Generated at Sun May 31 10:41:24 2026 by rpki-client