Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier: RITECZOAFhI37/+q5vwjvqrYYzFzWwIR+MYJG9siAg8=
Subject key identifier: 1B:48:31:7F:1E:60:A4:A6:5B:B8:58:A7:1B:9D:ED:A5:3B:78:23:67
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial: 019D284D56C8CC0ED97D3664935E4F01BF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number: 15DC
Signing time: Thu 26 Mar 2026 04:00:50 +0000
Manifest this update: Thu 26 Mar 2026 04:00:50 +0000
Manifest next update: Fri 27 Mar 2026 04:00:50 +0000
Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: N+r7EK5ZKl6hcrIIY6hJKZQJKsi6T5zDMQHQDQryovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:56:c8:cc:0e:d9:7d:36:64:93:5e:4f:01:bf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
Validity
Not Before: Mar 26 04:00:50 2026 GMT
Not After : Mar 27 04:00:50 2026 GMT
Subject: CN=1b48317f1e60a4a65bb858a71b9deda53b782367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:3b:f9:cc:b5:75:a6:85:e7:26:6e:91:d1:
73:d1:60:34:30:fb:a1:63:0a:04:56:08:48:a2:2a:
b1:d9:af:f8:98:65:e4:23:35:3c:a7:89:ff:d3:07:
b9:cf:f0:b8:38:26:b3:cd:48:18:b7:e5:84:88:2e:
93:5c:57:de:d9:97:f6:83:ab:48:fa:5a:9d:79:e7:
e7:d1:e5:a1:ca:66:f6:8b:82:cc:81:f1:dd:63:b7:
4a:04:28:f9:6e:d5:0a:60:03:48:92:d3:71:82:31:
00:05:8b:54:d7:0e:b5:15:f7:aa:1c:a0:ac:eb:3b:
c7:f2:96:00:d4:a0:3c:4c:d8:4f:d1:7a:35:e0:60:
c8:0c:9e:3f:5c:42:70:5a:f3:fc:46:58:e2:95:97:
c5:b6:08:e9:02:f9:29:d8:04:98:9f:dd:f8:a5:f3:
f0:dd:a7:84:57:cf:bd:8a:90:eb:73:d7:83:1d:69:
be:28:f8:0b:ec:e1:d5:aa:b6:a6:f9:ad:42:eb:4f:
da:fa:32:14:cd:b3:78:c0:6e:59:e4:bf:04:c4:92:
e9:ea:0f:d7:ce:cb:67:a2:40:f4:d9:9a:ad:e8:97:
4a:cd:d8:43:af:a0:71:e0:9f:a6:ff:9e:9c:72:68:
04:83:00:f0:cb:dd:60:34:a3:a6:8c:4a:d5:18:69:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:31:7F:1E:60:A4:A6:5B:B8:58:A7:1B:9D:ED:A5:3B:78:23:67
X509v3 Authority Key Identifier:
keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e5:41:29:92:11:42:39:70:a7:2c:a9:57:5f:51:cc:cb:e7:
15:a0:1b:a2:c1:82:7b:fa:5e:5a:50:48:36:94:08:3b:e0:6b:
1b:c2:67:31:0c:4c:04:07:e9:40:44:62:54:61:01:a2:19:01:
74:ac:9f:fe:e1:3f:f4:ce:98:97:c6:bb:fd:71:be:72:ed:12:
a8:98:a0:84:2b:ee:53:78:f3:16:0c:1e:04:06:89:fb:ab:77:
96:6d:65:1b:d8:55:7e:0c:b9:9e:f9:c7:aa:a6:23:35:78:9c:
84:97:df:bf:d4:93:59:a1:2e:07:fc:c2:45:a8:32:98:a4:f7:
ab:54:d5:ec:da:e6:e3:81:87:32:ff:97:2d:cb:09:d1:f0:a9:
34:9a:51:e0:4c:a4:7a:ea:59:7b:4a:f2:c7:b6:5a:19:c3:f9:
7c:c0:77:17:37:07:e4:20:d6:73:2d:70:aa:07:ce:c8:20:d0:
22:c6:b4:61:f1:16:3b:a6:e6:ed:bc:32:14:d2:1c:ee:ed:62:
5f:22:00:30:36:e1:17:4b:11:b3:70:13:8b:fd:86:7b:a3:57:
10:93:b4:aa:9d:1d:ae:6d:f7:34:ef:5d:75:c4:23:68:a4:e9:
a3:77:a5:42:e6:1d:35:66:9e:4a:2d:01:63:03:e9:29:82:a0:
67:ab:3e:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTVbIzA7ZfTZkk15PAb8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYWY1NzE0YzUwNTZjYmUyNjlkMTJmYTMwOTkzNzhhOTU3
Mjg0MjQwHhcNMjYwMzI2MDQwMDUwWhcNMjYwMzI3MDQwMDUwWjAzMTEwLwYDVQQD
EygxYjQ4MzE3ZjFlNjBhNGE2NWJiODU4YTcxYjlkZWRhNTNiNzgyMzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT07+cy1daaF5yZukdFz0WA0MPuh
YwoEVghIoiqx2a/4mGXkIzU8p4n/0we5z/C4OCazzUgYt+WEiC6TXFfe2Zf2g6tI
+lqdeefn0eWhymb2i4LMgfHdY7dKBCj5btUKYANIktNxgjEABYtU1w61FfeqHKCs
6zvH8pYA1KA8TNhP0Xo14GDIDJ4/XEJwWvP8RljilZfFtgjpAvkp2ASYn934pfPw
3aeEV8+9ipDrc9eDHWm+KPgL7OHVqram+a1C60/a+jIUzbN4wG5Z5L8ExJLp6g/X
zstnokD02Zqt6JdKzdhDr6Bx4J+m/56ccmgEgwDwy91gNKOmjErVGGnxiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtIMX8eYKSmW7hYpxud7aU7eCNnMB8GA1UdIwQY
MBaAFH6vVxTFBWy+Jp0S+jCZN4qVcoQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lODdhYTgtNmU1YS00YzRjLWJjYzkt
ZjIwZDRlODY4MDNiLzEvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lODdhYTgtNmU1YS00YzRjLWJjYzktZjIwZDRlODY4MDNi
LzEvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+VBKZIR
QjlwpyypV19RzMvnFaAbosGCe/peWlBINpQIO+BrG8JnMQxMBAfpQERiVGEBohkB
dKyf/uE/9M6Yl8a7/XG+cu0SqJighCvuU3jzFgweBAaJ+6t3lm1lG9hVfgy5nvnH
qqYjNXichJffv9STWaEuB/zCRagymKT3q1TV7Nrm44GHMv+XLcsJ0fCpNJpR4Eyk
eupZe0ryx7ZaGcP5fMB3FzcH5CDWcy1wqgfOyCDQIsa0YfEWO6bm7bwyFNIc7u1i
XyIAMDbhF0sRs3ATi/2Ge6NXEJO0qp0drm33NO9ddcQjaKTpo3elQuYdNWaeSi0B
YwPpKYKgZ6s+Hg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:27 2026 by rpki-client