Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json)
Hash identifier: ZObCwYFaji4o/gDULMPVY8ZbgtUTJDasToSgo4wI4us=
Subject key identifier: 9B:57:D2:48:25:55:9E:BD:A7:47:21:2F:69:60:37:96:F2:F5:D1:AF
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 019D27DFA6D0E73043C9F5C0F23B89539E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
Manifest number: 12E9
Signing time: Thu 26 Mar 2026 02:01:01 +0000
Manifest this update: Thu 26 Mar 2026 02:01:01 +0000
Manifest next update: Fri 27 Mar 2026 02:01:01 +0000
Files and hashes: 1: 1-PeFhmqOuGLWhYL6e4WamiqcSm8.roa (hash: D5OapCvUQLtel5Rjh+LrTfB4vqxFkS0kdGHkxYpTPSk=)
2: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: kwEsCEGUA+O5XjvKHABr7Nu8vy3z83cn+LFB7lBQoUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a6:d0:e7:30:43:c9:f5:c0:f2:3b:89:53:9e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Mar 26 02:01:01 2026 GMT
Not After : Mar 27 02:01:01 2026 GMT
Subject: CN=9b57d24825559ebda747212f69603796f2f5d1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:61:d0:6f:81:4b:36:89:47:d9:ec:5d:4a:
a0:21:fc:a4:be:74:ce:ef:a0:00:cb:32:d0:28:3b:
36:55:bd:d8:f5:4c:94:59:c8:11:bc:8e:57:64:a2:
e0:0c:97:3c:7d:94:a8:9f:67:62:9a:ff:4f:6c:dc:
d5:ef:24:0a:e7:f5:17:ba:8c:2e:c7:e7:97:d1:ab:
60:40:1a:46:c8:57:4a:32:6f:2e:2e:e6:50:94:ca:
86:b0:ec:4e:f8:b9:a6:22:0f:10:33:9f:9a:ed:93:
55:b8:17:51:18:75:de:75:87:d2:e5:c9:c7:78:41:
89:c4:6a:5c:66:5f:fc:35:bc:cf:98:cd:0a:b0:95:
99:e9:f3:fd:26:30:78:8b:0e:f1:97:44:68:c4:75:
bf:44:70:76:6f:90:0a:44:3c:59:de:ea:d1:ed:3e:
cd:23:6a:b0:13:06:1b:ec:0d:23:47:f1:75:82:58:
30:15:8c:12:b9:7e:58:c7:56:9c:0c:8a:78:86:fe:
ed:c6:f3:97:f9:37:5c:cd:19:5c:aa:4b:16:15:cf:
18:4f:7a:f3:5f:2c:8b:48:9a:4c:c9:ad:b5:31:e5:
0a:a7:f3:9b:e8:ca:26:e6:f2:e7:07:94:6c:84:57:
ec:72:05:40:c3:e1:04:45:c7:8e:7e:44:de:4c:0b:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:57:D2:48:25:55:9E:BD:A7:47:21:2F:69:60:37:96:F2:F5:D1:AF
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c2:a7:97:aa:95:0b:ce:9f:ad:d2:30:b1:8c:ca:7f:e1:af:
fb:ea:24:29:fc:d8:23:55:2e:d0:73:31:71:b2:00:0b:ec:ea:
96:14:73:99:dd:fd:ea:31:2e:b4:3c:dd:ee:22:a6:17:b7:70:
37:f2:9d:62:02:de:6c:ee:9b:26:90:b0:d3:49:9e:98:a8:b5:
51:9b:32:b3:e1:bc:8a:ce:2a:00:f5:6b:6d:07:a7:fa:5d:25:
8a:98:76:dd:72:86:9b:76:15:83:be:ec:95:10:61:78:c3:87:
c5:71:9d:58:17:a2:af:00:fc:5b:cc:b2:6c:ed:77:d0:6e:ff:
c8:89:83:90:60:4a:5d:51:f0:30:77:aa:f9:84:82:a0:2f:e2:
fd:dc:a2:48:7c:23:cc:d1:51:75:65:d9:ba:9a:ea:66:b2:74:
28:4c:70:6a:e6:33:ca:60:73:d9:50:22:e7:e2:f4:41:f4:d5:
4c:5e:75:77:61:28:ad:43:b5:2c:04:e9:95:c9:e3:4a:5c:20:
ae:74:26:62:79:0c:ec:f0:e1:70:47:e8:32:60:c3:0e:95:9d:
fe:dc:ad:b5:c0:fc:6e:7c:80:51:d3:65:ac:98:c1:2e:d5:ef:
72:71:f5:1d:9e:d1:2e:59:3c:53:3f:05:7c:9b:80:07:4c:5e:
42:c6:7f:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n36bQ5zBDyfXA8juJU56GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTYzN2U3Y2UyMWQ2YzkxYjU0YTA2ODhlMjBmOTI0MTYy
MjIyMzcwHhcNMjYwMzI2MDIwMTAxWhcNMjYwMzI3MDIwMTAxWjAzMTEwLwYDVQQD
Eyg5YjU3ZDI0ODI1NTU5ZWJkYTc0NzIxMmY2OTYwMzc5NmYyZjVkMWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb1h0G+BSzaJR9nsXUqgIfykvnTO
76AAyzLQKDs2Vb3Y9UyUWcgRvI5XZKLgDJc8fZSon2dimv9PbNzV7yQK5/UXuowu
x+eX0atgQBpGyFdKMm8uLuZQlMqGsOxO+LmmIg8QM5+a7ZNVuBdRGHXedYfS5cnH
eEGJxGpcZl/8NbzPmM0KsJWZ6fP9JjB4iw7xl0RoxHW/RHB2b5AKRDxZ3urR7T7N
I2qwEwYb7A0jR/F1glgwFYwSuX5Yx1acDIp4hv7txvOX+TdczRlcqksWFc8YT3rz
XyyLSJpMya21MeUKp/Ob6Mom5vLnB5RshFfscgVAw+EERceOfkTeTAuSiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtX0kglVZ69p0chL2lgN5by9dGvMB8GA1UdIwQY
MBaAFH3mN+fOIdbJG1SgaI4g+SQWIiI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83ZGQ0OGItMzMxZi00NTdhLTg0OWQt
MDM5NjFlMmIwNjAxLzEvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83ZGQ0OGItMzMxZi00NTdhLTg0OWQtMDM5NjFlMmIwNjAx
LzEvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsKnl6qV
C86frdIwsYzKf+Gv++okKfzYI1Uu0HMxcbIAC+zqlhRzmd396jEutDzd7iKmF7dw
N/KdYgLebO6bJpCw00memKi1UZsys+G8is4qAPVrbQen+l0liph23XKGm3YVg77s
lRBheMOHxXGdWBeirwD8W8yybO130G7/yImDkGBKXVHwMHeq+YSCoC/i/dyiSHwj
zNFRdWXZuprqZrJ0KExwauYzymBz2VAi5+L0QfTVTF51d2EorUO1LATplcnjSlwg
rnQmYnkM7PDhcEfoMmDDDpWd/tyttcD8bnyAUdNlrJjBLtXvcnH1HZ7RLlk8Uz8F
fJuAB0xeQsZ//g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:37 2026 by rpki-client