Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: YBbg0U/TtqrH/wr7WpDNiSf6iaBc74nNI9cSpDVeHiw=
Subject key identifier: CB:51:F1:99:0D:6A:73:DA:B3:A1:54:02:3B:AC:69:74:64:A3:14:14
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 019D386570B22B0B53A00AD273C8F3E12D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 0420
Signing time: Sun 29 Mar 2026 07:01:05 +0000
Manifest this update: Sun 29 Mar 2026 07:01:05 +0000
Manifest next update: Mon 30 Mar 2026 07:01:05 +0000
Files and hashes: 1: 0hS-dXastI13cpwFNDpfMzpMJMo.roa (hash: /PWpz2GpXrpBSZf2HusroGndm5V0a7tNkaagb+MoyqQ=)
2: T2C7WIfF0wbXIdpisxkUUAqC7Vg.roa (hash: IG8wYbRO9EgR+lhTadWwp9VBM4VCFO/ElkXU+SiTN5o=)
3: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: 5ATBUV9c2qruVxP3ahC9A+9fBueAFoT4oFXS9VRc/PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:70:b2:2b:0b:53:a0:0a:d2:73:c8:f3:e1:2d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Mar 29 07:01:05 2026 GMT
Not After : Mar 30 07:01:05 2026 GMT
Subject: CN=cb51f1990d6a73dab3a154023bac697464a31414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:5f:8d:d5:57:35:5c:5d:42:59:2a:ed:05:
95:75:ac:82:f0:1d:0d:af:28:0a:73:fd:82:39:1d:
09:af:93:7b:c3:da:77:c1:f5:37:7c:f5:db:8b:9c:
a2:8b:3b:3c:e8:d4:a8:84:68:7e:cb:cf:75:d3:98:
a2:0a:d8:93:29:5c:51:91:4e:36:ce:82:2e:21:71:
e4:89:07:61:23:d3:c3:96:72:c4:f1:66:57:94:e4:
0e:32:0a:00:86:20:02:6b:d9:e6:88:63:6f:29:24:
a0:ef:b0:ad:ad:e7:94:92:0e:a1:f0:f0:63:bd:91:
fa:cd:68:85:07:38:16:f6:00:e5:c1:d3:f8:f8:51:
6b:fe:b1:10:06:4a:de:3e:0f:9a:4f:83:55:55:9e:
6f:df:b3:cb:58:d3:06:b1:62:d2:68:c0:ed:aa:7b:
19:70:f1:cb:95:d8:5e:f9:3c:13:80:92:c3:e5:95:
90:63:01:42:98:6e:22:a2:42:b5:6d:c5:d8:99:7b:
87:3f:cd:ec:7c:e0:bc:76:b7:e6:a0:d4:78:18:56:
c6:05:15:be:ab:10:77:6b:7d:6a:fb:8c:14:e7:12:
d8:f6:ac:32:a6:4b:7c:38:fc:e5:1a:39:0c:72:ea:
10:74:86:22:44:8d:91:cd:55:b1:1a:e3:3d:a6:70:
e3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:51:F1:99:0D:6A:73:DA:B3:A1:54:02:3B:AC:69:74:64:A3:14:14
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2b:20:95:0a:b4:0b:35:05:66:ea:82:4c:df:71:fa:ce:a3:
e3:a3:7e:14:69:6f:d2:3e:df:a1:1e:e2:e6:ae:ea:cf:9e:71:
be:c2:b3:06:62:0c:e6:0d:3a:0a:48:e6:e2:5a:52:1e:08:f5:
97:e1:cf:07:5a:8c:3c:d1:71:b8:2b:0f:9a:39:c9:40:06:7b:
74:9c:b2:36:95:c3:65:92:03:78:15:34:ee:8f:38:08:98:3a:
71:f7:83:6c:2a:78:c3:28:09:42:6b:f5:39:7a:10:13:5a:90:
c0:e0:a8:85:89:05:6c:50:d4:de:9f:54:a3:06:d2:d7:20:fd:
92:3d:5b:63:ba:d2:a0:9a:81:2a:c5:4e:4c:c5:7f:6b:b9:05:
2f:4d:1e:f3:84:a1:c9:f0:2b:98:03:cd:ca:da:3e:b5:2f:f0:
d5:cf:4d:ef:e4:11:3b:77:fb:d4:b5:7d:a4:fb:ea:9e:bc:cb:
2f:31:1e:59:e6:b0:41:09:58:01:ba:54:a8:f3:24:c3:c7:3e:
14:61:51:a5:f0:ce:94:32:50:d7:fc:98:3b:93:19:1c:65:2b:
da:f6:a9:57:ce:2f:c7:36:06:77:cf:9d:d0:fb:85:e0:57:c7:
e9:a9:88:12:47:c2:d4:3f:88:fd:66:0a:ae:6c:db:87:d0:72:
fb:aa:e3:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXCyKwtToArSc8jz4S0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTBkMjNhMTE0NzBlMjQzMGY1MmUxYmUyZTAzMDE0ZTJi
ODRlZTEwHhcNMjYwMzI5MDcwMTA1WhcNMjYwMzMwMDcwMTA1WjAzMTEwLwYDVQQD
EyhjYjUxZjE5OTBkNmE3M2RhYjNhMTU0MDIzYmFjNjk3NDY0YTMxNDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhVfjdVXNVxdQlkq7QWVdayC8B0N
rygKc/2COR0Jr5N7w9p3wfU3fPXbi5yiizs86NSohGh+y89105iiCtiTKVxRkU42
zoIuIXHkiQdhI9PDlnLE8WZXlOQOMgoAhiACa9nmiGNvKSSg77CtreeUkg6h8PBj
vZH6zWiFBzgW9gDlwdP4+FFr/rEQBkrePg+aT4NVVZ5v37PLWNMGsWLSaMDtqnsZ
cPHLldhe+TwTgJLD5ZWQYwFCmG4iokK1bcXYmXuHP83sfOC8drfmoNR4GFbGBRW+
qxB3a31q+4wU5xLY9qwypkt8OPzlGjkMcuoQdIYiRI2RzVWxGuM9pnDjzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtR8ZkNanPas6FUAjusaXRkoxQUMB8GA1UdIwQY
MBaAFH3g0joRRw4kMPUuG+LgMBTiuE7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAt
MGNlOTgxM2Q0OTI1LzEvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAtMGNlOTgxM2Q0OTI1
LzEvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSsglQq0
CzUFZuqCTN9x+s6j46N+FGlv0j7foR7i5q7qz55xvsKzBmIM5g06Ckjm4lpSHgj1
l+HPB1qMPNFxuCsPmjnJQAZ7dJyyNpXDZZIDeBU07o84CJg6cfeDbCp4wygJQmv1
OXoQE1qQwOCohYkFbFDU3p9UowbS1yD9kj1bY7rSoJqBKsVOTMV/a7kFL00e84Sh
yfArmAPNyto+tS/w1c9N7+QRO3f71LV9pPvqnrzLLzEeWeawQQlYAbpUqPMkw8c+
FGFRpfDOlDJQ1/yYO5MZHGUr2vapV84vxzYGd8+d0PuF4FfH6amIEkfC1D+I/WYK
rmzbh9By+6rjTA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:22 2026 by rpki-client