Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: O+9nROz1TeatPjCuxCof/CQE9+zIacdco5wSnNI9vUY=
Subject key identifier: 72:D5:A3:83:23:EE:FE:CE:15:84:66:23:2C:57:B4:FF:00:F2:D0:B9
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 019D2A7235FF37CF523E75263742325F00DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 10E6
Signing time: Thu 26 Mar 2026 14:00:21 +0000
Manifest this update: Thu 26 Mar 2026 14:00:21 +0000
Manifest next update: Fri 27 Mar 2026 14:00:21 +0000
Files and hashes: 1: 49LVYnP73rA79wdiuJHMdcdFkIQ.roa (hash: WzC9WsaFwOO23usPmJCjxbi0AXme2savY/KQqeCN0+c=)
2: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: vzbGCMEe4rkkwhb1EDg83lrBZ9yaBZHF9hoJMyqmhfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:35:ff:37:cf:52:3e:75:26:37:42:32:5f:00:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Mar 26 14:00:21 2026 GMT
Not After : Mar 27 14:00:21 2026 GMT
Subject: CN=72d5a38323eefece158466232c57b4ff00f2d0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:be:aa:53:17:0c:6f:2f:7b:ff:e0:02:2f:
37:15:8b:a3:3f:b9:0e:40:cd:fe:d2:c3:90:8a:a7:
d8:ab:21:83:d8:cc:bf:32:3e:e2:8f:f3:c9:4f:79:
1c:fe:23:95:36:04:72:cb:d3:a3:b3:d6:15:b1:e6:
ed:46:fc:b1:24:42:5e:41:76:61:c3:e0:e4:91:6d:
b8:2f:9f:18:57:b7:36:61:6c:5f:25:d3:93:0b:2b:
88:7a:c9:bf:1a:9a:d3:4b:cc:10:4d:34:a9:3d:69:
bf:d2:e7:b1:d3:77:ce:47:85:f6:3d:d4:18:5d:41:
b9:1a:25:f9:b1:88:b3:cb:0e:76:ec:ef:fa:d9:94:
d6:3b:b7:ed:a8:a3:ba:7c:06:b9:16:d7:28:10:3b:
72:e1:25:62:90:52:8f:6b:f2:28:34:6f:07:8e:ba:
47:64:01:61:28:8a:02:d8:a4:e0:e9:7b:1c:37:3f:
e1:2c:b5:d1:1b:07:f4:8d:a0:4f:f6:73:ad:47:e9:
e0:36:d9:d9:95:7a:fb:2f:63:66:05:e0:db:58:37:
c8:99:29:5d:60:82:3b:9f:ea:a0:af:78:69:08:a5:
55:ed:75:6b:a5:a7:a6:3d:f0:5a:57:e6:28:84:2a:
70:29:42:7e:02:69:e7:5c:b3:c5:f8:6f:0e:8e:03:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D5:A3:83:23:EE:FE:CE:15:84:66:23:2C:57:B4:FF:00:F2:D0:B9
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bd:28:0d:66:c8:cb:b3:9d:d3:5e:e2:3e:8f:9a:c2:3f:5d:
36:b2:a3:2e:ec:7c:ab:45:63:0b:f4:3d:c7:46:d9:90:ac:bc:
4f:83:90:aa:2e:95:a7:76:b5:1c:fc:89:0d:50:e5:81:02:11:
e7:a4:11:78:10:62:0e:0c:18:b1:39:00:98:2d:e5:c3:47:7b:
c1:0a:00:6a:99:c8:ba:6c:22:16:47:3b:12:c5:3a:bf:d6:2b:
67:98:18:4d:cf:af:ee:0b:b3:3d:c7:73:8b:44:48:62:52:86:
bf:08:72:de:40:5f:5d:b4:65:b8:d2:51:86:7f:be:28:4f:0d:
97:af:bf:37:c6:44:00:b3:f2:4a:86:c7:ba:7b:22:04:37:2a:
27:e3:45:3e:7a:d6:16:d5:81:8b:2b:36:8b:df:54:78:88:7e:
06:f8:09:4f:4c:21:52:90:be:ce:8f:16:12:cf:75:ce:07:12:
db:11:e4:15:24:a8:43:68:d3:f7:98:52:41:5e:b0:37:19:88:
ca:e4:9a:55:ab:88:04:63:c1:62:f3:09:f6:a2:5c:66:2d:cd:
c3:c1:6c:64:dc:ad:a5:b7:65:3a:4c:31:da:3f:51:90:33:55:
90:58:fc:9f:34:10:6c:c9:b9:e2:06:ed:d5:cf:67:72:7f:01:
d3:3a:80:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcjX/N89SPnUmN0IyXwDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzliOTVkOGE1OGZjY2E2YTgxMmU3NzdlN2VmNjk0NTNm
OGFjOTgwHhcNMjYwMzI2MTQwMDIxWhcNMjYwMzI3MTQwMDIxWjAzMTEwLwYDVQQD
Eyg3MmQ1YTM4MzIzZWVmZWNlMTU4NDY2MjMyYzU3YjRmZjAwZjJkMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNy+qlMXDG8ve//gAi83FYujP7kO
QM3+0sOQiqfYqyGD2My/Mj7ij/PJT3kc/iOVNgRyy9Ojs9YVsebtRvyxJEJeQXZh
w+DkkW24L58YV7c2YWxfJdOTCyuIesm/GprTS8wQTTSpPWm/0uex03fOR4X2PdQY
XUG5GiX5sYizyw527O/62ZTWO7ftqKO6fAa5FtcoEDty4SVikFKPa/IoNG8HjrpH
ZAFhKIoC2KTg6XscNz/hLLXRGwf0jaBP9nOtR+ngNtnZlXr7L2NmBeDbWDfImSld
YII7n+qgr3hpCKVV7XVrpaemPfBaV+YohCpwKUJ+AmnnXLPF+G8OjgN4AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLVo4Mj7v7OFYRmIyxXtP8A8tC5MB8GA1UdIwQY
MBaAFBd5uV2KWPzKaoEud35+9pRT+KyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYt
NDA3ZTNmZTYzOTQ1LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYtNDA3ZTNmZTYzOTQ1
LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg70oDWbI
y7Od017iPo+awj9dNrKjLux8q0VjC/Q9x0bZkKy8T4OQqi6Vp3a1HPyJDVDlgQIR
56QReBBiDgwYsTkAmC3lw0d7wQoAapnIumwiFkc7EsU6v9YrZ5gYTc+v7guzPcdz
i0RIYlKGvwhy3kBfXbRluNJRhn++KE8Nl6+/N8ZEALPySobHunsiBDcqJ+NFPnrW
FtWBiys2i99UeIh+BvgJT0whUpC+zo8WEs91zgcS2xHkFSSoQ2jT95hSQV6wNxmI
yuSaVauIBGPBYvMJ9qJcZi3Nw8FsZNytpbdlOkwx2j9RkDNVkFj8nzQQbMm54gbt
1c9ncn8B0zqAUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:04 2026 by rpki-client