Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File: fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier: HLd59+Y738gpAeYVJh0BxDOLhuYDfKHv7IeMeC7rCcw=
Subject key identifier: 40:DA:53:75:BE:F1:2F:A2:7B:2C:1B:ED:A1:35:C9:18:B0:FD:88:4E
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019CCA1A0BCD4719F7E43090C0D6C9B33C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number: 0BB8
Signing time: Sat 07 Mar 2026 21:00:30 +0000
Manifest this update: Sat 07 Mar 2026 21:00:30 +0000
Manifest next update: Sun 08 Mar 2026 21:00:30 +0000
Files and hashes: 1: 1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (hash: SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=)
2: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (hash: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY=)
3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: lr9MI/9b5Yw7AQhADe4RfFEtcHtdSD4/p9mGk5ICSW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:1a:0b:cd:47:19:f7:e4:30:90:c0:d6:c9:b3:3c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Mar 7 21:00:30 2026 GMT
Not After : Mar 8 21:00:30 2026 GMT
Subject: CN=40da5375bef12fa27b2c1beda135c918b0fd884e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ce:c4:f5:f9:65:cd:7e:1c:02:c3:4a:ea:3a:
a4:7a:01:ee:24:ba:0e:8c:0a:f9:0d:03:81:3c:31:
19:7f:ea:23:cd:9e:c0:48:76:8e:0e:b8:92:0d:ab:
7a:33:80:28:23:0b:dd:27:8f:a9:b9:e4:0f:ff:5a:
82:91:3d:7a:27:dc:cf:41:fe:d4:09:da:cc:d1:db:
8a:34:fa:9d:22:0b:8f:1d:bf:c7:1d:bd:16:03:20:
c2:64:cd:8f:5a:ba:a0:ff:02:b4:04:be:fe:d3:50:
3a:4a:44:20:d4:91:19:dc:04:50:85:2f:b7:40:18:
9f:2d:fc:42:d0:66:82:bc:f2:65:8c:99:74:ba:b2:
dc:97:8d:e4:ef:bb:05:a5:13:a3:64:0c:60:96:05:
c7:1a:8d:58:7c:50:29:dc:d0:b1:88:4f:0b:01:1d:
22:66:62:bc:95:f4:65:57:d7:b3:c8:8c:a2:89:1a:
ea:6b:7b:bc:74:07:ed:c5:8e:4a:ec:0a:4b:49:87:
fb:57:1b:8f:57:c3:e9:8d:1e:9f:19:e8:1f:e6:b4:
b9:aa:c4:fd:cc:4b:87:2a:4e:3c:f9:17:e7:31:bc:
c1:3f:1c:19:9b:c4:64:a9:30:4d:77:c5:a7:9a:56:
8c:8d:af:67:4a:d7:a1:50:e8:3b:e3:66:29:0e:47:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:53:75:BE:F1:2F:A2:7B:2C:1B:ED:A1:35:C9:18:B0:FD:88:4E
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cf:6a:c2:46:be:de:59:78:3c:83:fe:c6:6e:23:93:2a:5e:
31:e0:dd:11:66:6c:2d:41:56:8e:ca:ed:40:8e:2b:83:01:23:
81:1f:63:6b:72:5b:90:c5:98:90:5e:1a:58:53:a4:47:47:93:
a9:04:f0:4b:78:81:61:83:83:3f:2c:50:9c:74:53:3b:c3:82:
98:79:ca:d8:6d:cf:61:a4:a6:6d:1b:e8:1c:23:ab:3a:37:c9:
47:46:61:23:9e:63:7b:3f:ff:1b:0a:87:be:e5:14:d8:fb:ec:
92:ad:f2:2b:d8:c8:3a:5a:a8:6f:42:e6:a2:95:2a:e9:b3:a2:
bf:81:14:b7:d2:2e:41:1a:f5:4c:61:4d:80:67:25:dc:f1:fa:
e8:4b:a2:72:c2:b2:c9:fb:0f:83:52:f9:ce:07:1a:3c:cd:77:
94:6c:e4:19:5d:67:2e:33:a8:be:ef:bc:c5:3f:d6:f3:b9:2d:
68:70:86:05:6e:8e:b8:55:ff:12:26:ce:14:4d:9e:ce:b2:d0:
e1:bc:a4:b8:fa:b4:00:31:12:2d:c7:39:10:40:6a:81:ed:16:
07:c7:8e:4a:ab:f6:5f:bc:80:e5:3a:a6:e4:38:51:58:20:70:
dd:c4:bf:cf:e2:64:a6:4c:05:21:4c:4f:bc:b1:c7:d3:7d:d7:
ae:d9:be:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzKGgvNRxn35DCQwNbJszwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzJkZWRhMzFmZThlYWZjZGFkNmUyYTA2ZmRlMjM2ZTdk
MTFkNjEwHhcNMjYwMzA3MjEwMDMwWhcNMjYwMzA4MjEwMDMwWjAzMTEwLwYDVQQD
Eyg0MGRhNTM3NWJlZjEyZmEyN2IyYzFiZWRhMTM1YzkxOGIwZmQ4ODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs7E9fllzX4cAsNK6jqkegHuJLoO
jAr5DQOBPDEZf+ojzZ7ASHaODriSDat6M4AoIwvdJ4+pueQP/1qCkT16J9zPQf7U
CdrM0duKNPqdIguPHb/HHb0WAyDCZM2PWrqg/wK0BL7+01A6SkQg1JEZ3ARQhS+3
QBifLfxC0GaCvPJljJl0urLcl43k77sFpROjZAxglgXHGo1YfFAp3NCxiE8LAR0i
ZmK8lfRlV9ezyIyiiRrqa3u8dAftxY5K7ApLSYf7VxuPV8PpjR6fGegf5rS5qsT9
zEuHKk48+RfnMbzBPxwZm8RkqTBNd8WnmlaMja9nStehUOg742YpDkfFtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDaU3W+8S+ieywb7aE1yRiw/YhOMB8GA1UdIwQY
MBaAFH0y3tox/o6vza1uKgb94jbn0R1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgt
NTNmYjAxOGE4YzBlLzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgtNTNmYjAxOGE4YzBl
LzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJs9qwka+
3ll4PIP+xm4jkypeMeDdEWZsLUFWjsrtQI4rgwEjgR9ja3JbkMWYkF4aWFOkR0eT
qQTwS3iBYYODPyxQnHRTO8OCmHnK2G3PYaSmbRvoHCOrOjfJR0ZhI55jez//GwqH
vuUU2Pvskq3yK9jIOlqob0LmopUq6bOiv4EUt9IuQRr1TGFNgGcl3PH66EuicsKy
yfsPg1L5zgcaPM13lGzkGV1nLjOovu+8xT/W87ktaHCGBW6OuFX/EibOFE2ezrLQ
4bykuPq0ADESLcc5EEBqge0WB8eOSqv2X7yA5Tqm5DhRWCBw3cS/z+JkpkwFIUxP
vLHH033Xrtm+vg==
-----END CERTIFICATE-----
Generated at Sun Mar 8 03:30:19 2026 by rpki-client