Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
File: fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft (raw, json)
Hash identifier: q+jILdEnuCUbH0uyOOaNWWUj0fKjLFLVFisjxw8wa0A=
Subject key identifier: 71:86:21:2C:8D:84:B7:14:74:D5:19:CB:4A:81:99:75:03:68:B7:4C
Authority key identifier: 7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
Certificate issuer: /CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Certificate serial: 019E1F7EBAC8DAAFD19EFC919C36976BFA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
Manifest number: 01EE
Signing time: Wed 13 May 2026 04:00:59 +0000
Manifest this update: Wed 13 May 2026 04:00:59 +0000
Manifest next update: Thu 14 May 2026 04:00:59 +0000
Files and hashes: 1: 1-DzzhuQacybavI0JEFJ_Pxy7kt4.roa (hash: uRHVp/iNbMxJaaaPObGWSNEIFbTXLqpiK+JCvtnSoQ4=)
2: fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl (hash: R66yPLgKWJNhsfGjhlH07WBMaeEMrBS5domiB1pHNMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:ba:c8:da:af:d1:9e:fc:91:9c:36:97:6b:fa:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Validity
Not Before: May 13 04:00:59 2026 GMT
Not After : May 14 04:00:59 2026 GMT
Subject: CN=7186212c8d84b71474d519cb4a8199750368b74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:20:e2:42:b5:5a:ef:19:7d:74:ab:8a:57:
bd:80:95:47:d4:11:ec:d3:53:fc:a4:4a:af:8f:91:
93:82:ac:fd:d3:48:29:2f:62:e2:b1:a3:8d:37:b9:
0f:b0:9d:5f:38:3b:04:34:f3:dd:49:3b:c7:dc:b4:
c1:23:e9:77:74:bc:ca:ef:c5:55:7a:a0:cd:39:52:
c2:03:74:5a:7c:7e:82:24:78:e0:31:d1:f3:11:8e:
c0:c0:22:41:7c:c6:13:03:86:a9:16:5f:6b:78:8b:
b3:fd:4d:1a:ef:7d:35:da:6a:23:de:a4:b8:b8:b0:
ba:00:ed:03:93:c2:c0:69:94:61:cd:be:bc:d5:fe:
dd:cc:4b:ac:b4:92:25:60:45:6e:f8:38:d4:3e:32:
90:1e:4f:c7:04:8b:c2:d4:ad:9f:40:87:c7:18:66:
79:b3:e7:57:66:20:f7:b2:99:51:32:22:4a:8b:ec:
01:29:1c:0d:41:20:b9:b8:6a:ef:c7:37:f6:35:aa:
3a:cc:88:92:1a:56:15:4c:a9:eb:2b:21:bd:b2:7b:
2d:66:82:55:88:f8:76:c2:db:f2:24:78:4f:23:30:
db:34:98:81:40:b9:24:b5:39:d3:18:1b:4d:84:0d:
59:81:b8:60:08:90:e6:87:05:07:80:72:06:84:c3:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:86:21:2C:8D:84:B7:14:74:D5:19:CB:4A:81:99:75:03:68:B7:4C
X509v3 Authority Key Identifier:
keyid:7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9a:47:ca:1e:54:50:a7:e3:8b:49:2d:33:ba:2c:86:68:e5:
b4:18:fd:49:88:af:1a:e3:20:27:57:45:be:8c:70:58:69:a0:
a6:53:fb:73:d0:17:4d:5f:eb:8a:34:b6:fb:07:2a:c8:7a:15:
ef:94:0b:6f:52:a9:78:fb:2b:c8:28:a7:52:94:90:0b:fa:60:
73:92:bd:36:39:aa:e4:0e:c8:ba:3d:59:32:2a:f8:f0:fd:3d:
03:ad:dd:ce:36:df:f4:33:9e:b7:3c:06:df:86:f6:17:1c:e9:
cb:55:5d:e8:0b:31:fc:ae:a3:23:ce:ef:a7:4a:bc:7a:55:27:
41:48:2e:63:17:c4:a5:a7:ff:66:a7:6c:4c:3c:cb:c6:72:65:
57:4e:5d:55:3c:49:88:d9:5a:f6:e8:75:50:ad:bf:6c:d4:74:
5a:43:92:17:90:36:2d:7d:9e:e7:88:f8:68:89:5b:59:ea:85:
a7:2a:8e:83:3a:81:f6:58:ce:ba:a9:0a:37:8b:85:f9:99:ee:
e5:01:c8:ee:00:c2:58:cb:78:55:d6:61:36:b8:22:b3:86:a9:
a0:64:cc:06:ca:ba:29:8d:37:8d:4c:8b:45:d3:72:99:21:37:
3d:1e:ab:79:92:55:07:85:21:97:d6:eb:3d:ba:04:70:bc:94:
47:1a:6e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffrrI2q/RnvyRnDaXa/pdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjOTkwMTZhZjc0OGE0OGZjZTg0ZjYzZjVlM2E4OTMzMTQy
N2RkOGMwHhcNMjYwNTEzMDQwMDU5WhcNMjYwNTE0MDQwMDU5WjAzMTEwLwYDVQQD
Eyg3MTg2MjEyYzhkODRiNzE0NzRkNTE5Y2I0YTgxOTk3NTAzNjhiNzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPwg4kK1Wu8ZfXSrile9gJVH1BHs
01P8pEqvj5GTgqz900gpL2LisaONN7kPsJ1fODsENPPdSTvH3LTBI+l3dLzK78VV
eqDNOVLCA3RafH6CJHjgMdHzEY7AwCJBfMYTA4apFl9reIuz/U0a73012moj3qS4
uLC6AO0Dk8LAaZRhzb681f7dzEustJIlYEVu+DjUPjKQHk/HBIvC1K2fQIfHGGZ5
s+dXZiD3splRMiJKi+wBKRwNQSC5uGrvxzf2Nao6zIiSGlYVTKnrKyG9snstZoJV
iPh2wtvyJHhPIzDbNJiBQLkktTnTGBtNhA1ZgbhgCJDmhwUHgHIGhMOiOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGGISyNhLcUdNUZy0qBmXUDaLdMMB8GA1UdIwQY
MBaAFHyZAWr3SKSPzoT2P146iTMUJ92MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkprQmF2ZElwSV9PaFBZX1hqcUpNeFFuM1l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zZjcyZDctYjViNS00ZGMyLTlmMDIt
MTU1NGYxZDNiOWI2LzEvZkprQmF2ZElwSV9PaFBZX1hqcUpNeFFuM1l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8zZjcyZDctYjViNS00ZGMyLTlmMDItMTU1NGYxZDNiOWI2
LzEvZkprQmF2ZElwSV9PaFBZX1hqcUpNeFFuM1l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZpHyh5U
UKfji0ktM7oshmjltBj9SYivGuMgJ1dFvoxwWGmgplP7c9AXTV/rijS2+wcqyHoV
75QLb1KpePsryCinUpSQC/pgc5K9Njmq5A7Iuj1ZMir48P09A63dzjbf9DOetzwG
34b2Fxzpy1Vd6Asx/K6jI87vp0q8elUnQUguYxfEpaf/ZqdsTDzLxnJlV05dVTxJ
iNla9uh1UK2/bNR0WkOSF5A2LX2e54j4aIlbWeqFpyqOgzqB9ljOuqkKN4uF+Znu
5QHI7gDCWMt4VdZhNrgis4apoGTMBsq6KY03jUyLRdNymSE3PR6reZJVB4Uhl9br
PboEcLyURxpulg==
-----END CERTIFICATE-----
Generated at Wed May 13 09:10:53 2026 by rpki-client