Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: w8xaJ9cJbl1bylmA2rto9Nro1cLA6p+eGlBOSpdQegY=
Subject key identifier: E8:F4:50:F5:31:57:A3:69:BE:AB:BE:61:66:5D:9A:0E:CD:4B:AB:4C
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 019D29CE5AB7FB995C61806060DAA4B69D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 0914
Signing time: Thu 26 Mar 2026 11:01:22 +0000
Manifest this update: Thu 26 Mar 2026 11:01:22 +0000
Manifest next update: Fri 27 Mar 2026 11:01:22 +0000
Files and hashes: 1: f4bD2j2ZctfyMRffHbpMKHwXRSU.roa (hash: rtGJzd+eO3rg+u8EKiSavSngCqzv1WolCN9nYYZQY64=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: PZI/hJsGPKL+ToB/aEdHJoRKyfZEte6Jz38iq/Wu4RA=)
3: sWzc9UukZssUn_EjgB277LtZfe4.roa (hash: pyPZe27dAwl2biV/QtNdOvZ13e3NYVb6oI5PNCsGFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:5a:b7:fb:99:5c:61:80:60:60:da:a4:b6:9d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Mar 26 11:01:22 2026 GMT
Not After : Mar 27 11:01:22 2026 GMT
Subject: CN=e8f450f53157a369beabbe61665d9a0ecd4bab4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:06:af:e8:16:0f:38:c9:6a:bc:20:56:a2:
01:b1:07:dc:6f:ce:18:3b:95:46:65:36:a9:ec:e0:
08:b6:80:46:0a:b5:ba:2a:ea:fb:94:c7:9f:f0:25:
12:de:e6:12:46:a1:3d:92:c2:0a:e5:f8:b9:d1:13:
76:fb:ba:19:4e:91:23:47:94:4f:c0:98:43:dc:4d:
f3:7b:63:fc:b8:42:8b:88:c0:97:b9:0a:4c:8b:e4:
2e:dc:be:72:43:d4:e9:74:b5:e1:59:3d:4f:87:1e:
37:24:80:3d:b2:0a:ab:84:30:c2:e0:47:f3:ac:b2:
54:ce:19:f1:5c:9e:91:1c:d7:65:0a:47:9c:38:10:
93:b0:ad:5b:12:99:e4:f9:2c:78:ad:ab:22:64:07:
d8:cc:31:c7:b3:ca:42:e5:d6:40:11:78:ea:05:58:
36:b6:0a:9a:74:2e:d4:3c:cd:a8:d0:ee:56:a3:bb:
7e:fc:11:90:c1:10:43:21:23:c5:a8:f5:4f:ba:b0:
c2:05:09:ab:ef:89:30:a5:9b:e6:96:eb:af:88:6d:
ab:39:c6:f0:d9:3c:58:67:0f:3e:c8:67:62:d0:1d:
f5:85:b8:aa:77:16:c1:9f:52:25:fd:6b:6b:ff:71:
45:72:ce:57:0e:d1:e6:56:b8:e6:ac:52:59:2a:5f:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F4:50:F5:31:57:A3:69:BE:AB:BE:61:66:5D:9A:0E:CD:4B:AB:4C
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7a:4f:00:0a:9b:2c:6b:5d:a5:b7:2b:da:d0:ac:f4:d7:67:
6f:4a:45:f8:14:a5:7a:d3:4a:36:66:26:bf:f9:26:2a:b5:26:
b0:81:85:9a:74:1b:ef:ba:03:61:9d:5d:ce:02:9b:9f:fa:59:
b3:f3:a5:28:cc:47:3a:f3:44:33:94:dc:35:3e:a0:91:0d:f8:
da:5b:a9:c7:35:79:5c:20:06:fd:4c:f0:cf:b6:15:58:c0:10:
8c:17:f0:7d:89:4a:37:b0:7c:d5:cc:93:bf:8d:7b:e6:68:8c:
3c:76:db:8c:f6:0a:ef:5a:d3:fc:14:d1:44:b8:00:fb:28:47:
44:bb:38:a1:f6:7d:27:db:72:04:f6:cb:ad:e7:a7:8d:90:16:
96:03:4a:27:0d:aa:89:f2:a9:99:a5:27:2b:ef:5e:05:85:04:
94:45:20:e8:e7:7a:c0:eb:0b:64:ff:83:63:fa:33:cb:66:9c:
b9:6f:da:e2:f8:ca:3c:de:b4:64:9b:63:d6:c3:22:ba:91:0c:
54:a2:71:84:8a:04:55:4e:ca:96:c8:24:e2:d9:57:5c:8d:14:
d5:9f:a9:27:4a:3b:9f:97:70:33:f5:dd:9a:a8:8f:52:a4:52:
dd:2a:c8:f0:54:e1:7e:72:66:7c:af:fd:1d:ec:9a:cc:ae:85:
48:2e:7a:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzlq3+5lcYYBgYNqktp15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODZmMTNhOWI3MjFjZDE4NjlmYmI5NzRlZTUzZDkwMDIy
ZWFhMmMwHhcNMjYwMzI2MTEwMTIyWhcNMjYwMzI3MTEwMTIyWjAzMTEwLwYDVQQD
EyhlOGY0NTBmNTMxNTdhMzY5YmVhYmJlNjE2NjVkOWEwZWNkNGJhYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLAGr+gWDzjJarwgVqIBsQfcb84Y
O5VGZTap7OAItoBGCrW6Kur7lMef8CUS3uYSRqE9ksIK5fi50RN2+7oZTpEjR5RP
wJhD3E3ze2P8uEKLiMCXuQpMi+Qu3L5yQ9TpdLXhWT1Phx43JIA9sgqrhDDC4Efz
rLJUzhnxXJ6RHNdlCkecOBCTsK1bEpnk+Sx4rasiZAfYzDHHs8pC5dZAEXjqBVg2
tgqadC7UPM2o0O5Wo7t+/BGQwRBDISPFqPVPurDCBQmr74kwpZvmluuviG2rOcbw
2TxYZw8+yGdi0B31hbiqdxbBn1Il/Wtr/3FFcs5XDtHmVrjmrFJZKl/FAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOj0UPUxV6Npvqu+YWZdmg7NS6tMMB8GA1UdIwQY
MBaAFHyG8TqbchzRhp+7l07lPZACLqosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklieE9wdHlITkdHbjd1WFR1VTlrQUl1cWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDc3MjEtMDBmZi00NTgxLTgwZTUt
NmZhODQ0MDJkNmEwLzEvZklieE9wdHlITkdHbjd1WFR1VTlrQUl1cWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MDc3MjEtMDBmZi00NTgxLTgwZTUtNmZhODQ0MDJkNmEw
LzEvZklieE9wdHlITkdHbjd1WFR1VTlrQUl1cWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXpPAAqb
LGtdpbcr2tCs9Ndnb0pF+BSletNKNmYmv/kmKrUmsIGFmnQb77oDYZ1dzgKbn/pZ
s/OlKMxHOvNEM5TcNT6gkQ342lupxzV5XCAG/Uzwz7YVWMAQjBfwfYlKN7B81cyT
v4175miMPHbbjPYK71rT/BTRRLgA+yhHRLs4ofZ9J9tyBPbLreenjZAWlgNKJw2q
ifKpmaUnK+9eBYUElEUg6Od6wOsLZP+DY/ozy2acuW/a4vjKPN60ZJtj1sMiupEM
VKJxhIoEVU7Klsgk4tlXXI0U1Z+pJ0o7n5dwM/XdmqiPUqRS3SrI8FThfnJmfK/9
HeyazK6FSC56kQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:26 2026 by rpki-client