Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File: f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier: z7HlO4UBSFKFtBi7Ui9+14f6YcZVz2TbsOXOOVAWYLc=
Subject key identifier: 39:8F:98:4D:75:A0:51:89:4C:78:EA:4C:7A:20:A1:7A:DE:D7:A2:F9
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial: 019D389C0415D833A3FCD3208CFE3CAE71A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number: 05D0
Signing time: Sun 29 Mar 2026 08:00:41 +0000
Manifest this update: Sun 29 Mar 2026 08:00:41 +0000
Manifest next update: Mon 30 Mar 2026 08:00:41 +0000
Files and hashes: 1: 2BwDzZ1-4qodQHGn7IRXAaLWAn8.roa (hash: KLT4hK24Sh8oeO2o5C+Q82TS186W3R8CPounbGac6TY=)
2: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: vbmZ/EwHL43RoD5iaunElxQjLNkW+1JCeTgi6VKqbs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:04:15:d8:33:a3:fc:d3:20:8c:fe:3c:ae:71:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Validity
Not Before: Mar 29 08:00:41 2026 GMT
Not After : Mar 30 08:00:41 2026 GMT
Subject: CN=398f984d75a051894c78ea4c7a20a17aded7a2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:7e:af:95:72:2d:d9:24:0a:3a:d5:be:59:
cc:47:6d:57:c7:87:10:29:26:2c:b2:36:79:4c:c2:
42:c9:f7:7c:ff:a4:f4:f2:30:2c:4e:a3:d2:6e:27:
09:a7:37:6b:97:34:73:06:be:d9:ae:94:38:67:c1:
ce:c7:1f:a5:7f:2c:af:61:48:03:99:b9:4f:cc:c0:
21:6a:cc:12:db:46:a9:9b:59:72:9c:93:8b:fc:ee:
36:b6:3f:ab:6a:cd:9f:2a:8f:f0:60:f1:58:b5:28:
57:3a:ab:13:e2:b1:bb:11:ba:af:d2:fb:c6:65:c2:
b7:68:e8:e6:4e:b4:30:1a:3a:17:9c:39:67:c7:e2:
93:d1:11:e6:09:1c:a5:bb:ec:bb:c4:5b:07:ad:88:
21:59:37:69:55:fc:5b:07:06:83:8f:02:64:13:72:
97:19:e2:26:ed:2f:d2:f3:0e:f0:07:42:d3:cc:26:
c1:ef:6c:b1:49:25:41:66:6d:08:2c:7d:45:80:97:
de:fa:50:74:bc:5e:c7:cd:1c:55:5a:dc:a4:57:6d:
d2:5c:e3:bc:4d:95:62:ee:c8:2e:96:a0:cb:74:37:
62:6a:73:0b:4e:aa:bd:ec:c1:35:bd:6e:9e:8b:28:
a0:cb:10:e1:02:2a:22:73:dc:31:17:a4:a1:f0:3e:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8F:98:4D:75:A0:51:89:4C:78:EA:4C:7A:20:A1:7A:DE:D7:A2:F9
X509v3 Authority Key Identifier:
keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0a:59:1f:4a:b0:31:93:65:f0:4c:72:1e:05:a3:fc:ba:f6:
fe:14:6f:72:87:6c:80:35:38:85:f5:41:53:17:04:08:5d:9f:
43:b6:96:7b:f2:11:bd:22:b8:7b:e2:6b:d0:4b:41:75:7b:7c:
79:4a:06:5f:d4:4d:d2:ec:ad:d5:50:97:bc:a2:42:6f:79:4a:
d2:a5:93:bd:88:12:6e:fc:5f:1c:f6:88:17:d8:f2:16:f4:de:
8a:d7:ac:f6:3c:df:d5:67:9c:7e:e7:e5:09:f8:f7:ee:f6:89:
59:7a:af:96:d3:97:bd:ff:e4:ab:05:f3:9c:25:d9:a9:86:b3:
e3:9f:a1:2e:2e:11:51:6a:65:7c:d0:c0:fa:78:9f:26:37:b7:
05:b1:33:f0:06:08:09:32:5f:85:fc:66:cd:f0:cf:75:79:48:
4b:c5:44:71:da:73:e8:19:f9:86:55:85:e0:0e:ec:ef:8a:ba:
c2:68:f2:0b:ed:94:4a:cd:fe:c8:d9:9d:8f:e5:84:b0:f6:a6:
08:ea:c5:5f:ad:52:15:24:21:ea:42:b1:69:fd:52:f7:20:7f:
4a:0e:0b:49:87:23:87:8b:8a:52:42:9e:2c:be:83:61:4d:a2:
fe:44:74:70:ff:a6:26:0f:af:7c:ee:9a:a2:82:a2:84:7f:58:
f0:45:43:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nAQV2DOj/NMgjP48rnGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZTNkNjNiNGE1YjQwNGI1ZmY4M2NiZjJiMTUyNWEzMDQ3
N2Y2NWMwHhcNMjYwMzI5MDgwMDQxWhcNMjYwMzMwMDgwMDQxWjAzMTEwLwYDVQQD
EygzOThmOTg0ZDc1YTA1MTg5NGM3OGVhNGM3YTIwYTE3YWRlZDdhMmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIR+r5VyLdkkCjrVvlnMR21Xx4cQ
KSYssjZ5TMJCyfd8/6T08jAsTqPSbicJpzdrlzRzBr7ZrpQ4Z8HOxx+lfyyvYUgD
mblPzMAhaswS20apm1lynJOL/O42tj+ras2fKo/wYPFYtShXOqsT4rG7Ebqv0vvG
ZcK3aOjmTrQwGjoXnDlnx+KT0RHmCRylu+y7xFsHrYghWTdpVfxbBwaDjwJkE3KX
GeIm7S/S8w7wB0LTzCbB72yxSSVBZm0ILH1FgJfe+lB0vF7HzRxVWtykV23SXOO8
TZVi7sgulqDLdDdianMLTqq97ME1vW6eiyigyxDhAioic9wxF6Sh8D5hYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmPmE11oFGJTHjqTHogoXre16L5MB8GA1UdIwQY
MBaAFH/j1jtKW0BLX/g8vysVJaMEd/ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMt
MmNiN2EzYjZlNDJmLzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMtMmNiN2EzYjZlNDJm
LzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeApZH0qw
MZNl8ExyHgWj/Lr2/hRvcodsgDU4hfVBUxcECF2fQ7aWe/IRvSK4e+Jr0EtBdXt8
eUoGX9RN0uyt1VCXvKJCb3lK0qWTvYgSbvxfHPaIF9jyFvTeites9jzf1Wecfufl
Cfj37vaJWXqvltOXvf/kqwXznCXZqYaz45+hLi4RUWplfNDA+nifJje3BbEz8AYI
CTJfhfxmzfDPdXlIS8VEcdpz6Bn5hlWF4A7s74q6wmjyC+2USs3+yNmdj+WEsPam
COrFX61SFSQh6kKxaf1S9yB/Sg4LSYcjh4uKUkKeLL6DYU2i/kR0cP+mJg+vfO6a
ooKihH9Y8EVDdg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:48 2026 by rpki-client