Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json)
Hash identifier: jDjBB52tOW0DjtBdWMEL8NaoQOnpo8hVqxxmOAbOS0A=
Subject key identifier: AE:BE:EC:95:E9:BF:D1:AA:3A:FD:92:CC:25:BF:A2:E4:19:A6:E3:4F
Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a
Certificate serial: 019D284DFE75449E1A1B9FB7A77A91CF3E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
Manifest number: 0A60
Signing time: Thu 26 Mar 2026 04:01:33 +0000
Manifest this update: Thu 26 Mar 2026 04:01:33 +0000
Manifest next update: Fri 27 Mar 2026 04:01:33 +0000
Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: R44P2hg/IvfLqdW4slLb9wbQwN1lgDcoOMGQya2YSHg=)
2: wzKWY6Wt2mb7gzv6ILxVI9gqBVI.roa (hash: Ih5+NRozSgaecg0vA3twm5kYdnmkAGbTAu9H3wik/xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:fe:75:44:9e:1a:1b:9f:b7:a7:7a:91:cf:3e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a
Validity
Not Before: Mar 26 04:01:33 2026 GMT
Not After : Mar 27 04:01:33 2026 GMT
Subject: CN=aebeec95e9bfd1aa3afd92cc25bfa2e419a6e34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:cb:56:fe:2c:1b:62:41:e9:f4:6a:71:60:
c5:b9:31:46:6a:4b:cc:ff:96:3e:3c:8a:9d:8f:e1:
4c:a3:c5:00:01:f4:40:81:ee:9a:77:dd:3e:a1:1e:
1d:38:5a:99:ea:94:44:60:bf:7a:25:77:24:79:ab:
d2:7c:06:e2:74:90:43:89:38:7a:ff:a4:7c:f3:37:
28:18:d2:35:d8:40:50:27:a2:d6:11:1a:7d:26:2c:
7a:00:e8:b5:73:77:bf:1f:d4:45:c5:a4:92:e8:b0:
96:a6:d1:f8:53:a5:c0:f6:3a:fc:83:6d:76:e0:e2:
14:f1:70:69:a9:34:7c:f2:c3:32:59:05:64:d8:5e:
8f:5a:65:97:56:c9:2a:f6:13:8e:c9:81:aa:cb:4e:
d7:f5:22:1e:63:19:ed:cb:03:6e:dd:f8:2a:a2:36:
d3:03:15:53:21:00:82:ff:87:dc:89:32:8b:1f:7d:
63:81:ef:e0:85:17:74:80:43:dc:9d:80:01:d5:7a:
e0:8d:3c:56:69:84:07:2a:4a:3c:7e:65:13:26:0f:
75:91:82:4b:0d:fd:de:a2:bf:84:40:55:28:a2:d4:
c4:2c:6e:5e:63:9e:6f:71:95:c1:df:19:bb:08:0b:
c7:26:ac:16:87:b4:9e:8d:f6:46:9c:07:fa:33:4b:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BE:EC:95:E9:BF:D1:AA:3A:FD:92:CC:25:BF:A2:E4:19:A6:E3:4F
X509v3 Authority Key Identifier:
keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9a:cc:02:87:f6:ad:96:59:66:67:51:7c:0f:90:a5:c8:38:
a5:79:bb:68:70:b1:1c:5c:5c:70:82:29:23:a6:4e:08:91:27:
f4:fb:db:ee:c3:9b:2f:db:c5:2c:94:66:c6:da:4d:3e:2b:9b:
56:be:4c:45:af:78:ab:1c:ff:a7:87:d6:3d:2a:a9:c5:bd:47:
60:db:6b:fc:93:7f:ae:f9:de:b1:2f:17:8b:f2:c9:47:1c:a1:
92:ed:e7:88:2f:46:89:2b:fb:81:2a:8a:45:5d:d2:f5:10:ec:
52:41:78:f5:42:6f:89:3e:5b:5b:cc:70:7f:1b:07:7f:77:8c:
0c:9a:d7:ec:9a:b8:79:ee:0e:86:5e:4b:71:c7:9f:fd:be:2b:
d7:e9:bc:b3:68:05:85:4b:97:9b:26:2d:30:24:25:4f:57:17:
ce:00:d6:b0:76:99:59:dd:12:0a:0a:33:ea:5a:cb:bf:02:07:
65:da:67:e9:29:a1:43:d4:51:4b:e3:25:32:10:f0:57:6c:6b:
d9:c1:fb:eb:8f:83:69:48:fa:dd:19:40:4a:8e:ac:09:37:65:
c4:0f:09:a8:4e:fc:d8:36:94:f5:ac:06:86:22:a6:c7:64:c7:
ed:43:ba:e1:6f:18:d4:fc:dd:c2:99:c4:e6:65:a7:7e:d1:93:
3c:2e:66:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTf51RJ4aG5+3p3qRzz5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ODM4MDUzMTlkODQ4NTU4NGRjMzljZjUzODE1ODNmYjY0
MzFkN2EwHhcNMjYwMzI2MDQwMTMzWhcNMjYwMzI3MDQwMTMzWjAzMTEwLwYDVQQD
EyhhZWJlZWM5NWU5YmZkMWFhM2FmZDkyY2MyNWJmYTJlNDE5YTZlMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrnLVv4sG2JB6fRqcWDFuTFGakvM
/5Y+PIqdj+FMo8UAAfRAge6ad90+oR4dOFqZ6pREYL96JXckeavSfAbidJBDiTh6
/6R88zcoGNI12EBQJ6LWERp9Jix6AOi1c3e/H9RFxaSS6LCWptH4U6XA9jr8g212
4OIU8XBpqTR88sMyWQVk2F6PWmWXVskq9hOOyYGqy07X9SIeYxntywNu3fgqojbT
AxVTIQCC/4fciTKLH31jge/ghRd0gEPcnYAB1XrgjTxWaYQHKko8fmUTJg91kYJL
Df3eor+EQFUootTELG5eY55vcZXB3xm7CAvHJqwWh7SejfZGnAf6M0uDwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6+7JXpv9GqOv2SzCW/ouQZpuNPMB8GA1UdIwQY
MBaAFBaDgFMZ2EhVhNw5z1OBWD+2Qx16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iMjVjZjQtMGEzNS00YmRiLTlkY2Qt
ZWUxNjA4NmNmYzcyLzEvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iMjVjZjQtMGEzNS00YmRiLTlkY2QtZWUxNjA4NmNmYzcy
LzEvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZrMAof2
rZZZZmdRfA+Qpcg4pXm7aHCxHFxccIIpI6ZOCJEn9Pvb7sObL9vFLJRmxtpNPiub
Vr5MRa94qxz/p4fWPSqpxb1HYNtr/JN/rvnesS8Xi/LJRxyhku3niC9GiSv7gSqK
RV3S9RDsUkF49UJviT5bW8xwfxsHf3eMDJrX7Jq4ee4Ohl5Lccef/b4r1+m8s2gF
hUuXmyYtMCQlT1cXzgDWsHaZWd0SCgoz6lrLvwIHZdpn6SmhQ9RRS+MlMhDwV2xr
2cH764+DaUj63RlASo6sCTdlxA8JqE782DaU9awGhiKmx2TH7UO64W8Y1PzdwpnE
5mWnftGTPC5m5w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:08 2026 by rpki-client