Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: nRlZeYjpwNtrPyz8yjx8dx7YKTCiBuTr7EA0onQg7+E=
Subject key identifier: D3:42:1B:CE:28:55:D5:DF:3A:55:E2:67:76:53:46:BE:1D:C2:2F:1A
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 019D269655BF5F8B9FB80D04D9C69AED4BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 20:01:19 +0000
Manifest this update: Wed 25 Mar 2026 20:01:19 +0000
Manifest next update: Thu 26 Mar 2026 20:01:19 +0000
Files and hashes: 1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: PHnyz2L2pzjRUV9298G0kAmfdySdkhC+T+q4Gv82WBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:55:bf:5f:8b:9f:b8:0d:04:d9:c6:9a:ed:4b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Mar 25 20:01:19 2026 GMT
Not After : Mar 26 20:01:19 2026 GMT
Subject: CN=d3421bce2855d5df3a55e267765346be1dc22f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:35:26:31:f1:2c:b7:d1:dd:cd:ab:07:15:
8e:d0:b7:a5:79:43:33:d9:f5:08:26:9f:84:e0:3b:
59:03:ac:68:4e:98:0b:04:28:9c:8c:83:15:f0:09:
ed:16:70:45:e8:e7:aa:c0:d7:34:a4:f9:4f:ea:37:
82:5d:cc:a0:cb:26:a6:ee:2e:0d:48:78:b9:67:b7:
df:a2:fd:ed:a1:28:9a:38:af:f9:6f:8d:17:46:b5:
92:b5:18:be:43:14:af:93:6c:79:12:bd:18:19:08:
c8:26:fd:a5:58:1c:8c:b8:b5:77:80:30:b2:8f:43:
1c:7d:79:c5:28:19:63:77:04:61:61:52:f7:68:1b:
00:0e:d9:33:d7:fd:5a:0e:68:06:f6:e3:f5:12:62:
27:ed:79:ed:e1:09:23:cf:f5:5c:82:80:dc:f8:3f:
a3:f7:83:13:6f:c3:b9:53:90:c8:c2:67:7f:ae:9c:
8c:f4:bf:7b:cc:50:07:3e:8f:8f:bf:26:b5:1c:fe:
b9:69:d6:b7:57:88:3b:54:b1:6b:cd:7a:0b:6e:06:
7d:1c:ed:be:35:08:66:1d:f7:6d:ca:95:c8:6f:46:
a6:fb:8b:a2:39:2f:58:e8:3e:66:0e:69:ea:7b:f9:
ec:d0:41:f2:ba:47:00:7c:a9:ad:98:9c:88:27:93:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:42:1B:CE:28:55:D5:DF:3A:55:E2:67:76:53:46:BE:1D:C2:2F:1A
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b3:2a:a4:a5:dd:39:a9:24:44:e9:3f:be:de:2b:9c:56:5e:
97:41:06:30:37:69:b9:a5:ec:1f:d2:4b:1b:17:fe:e2:a8:db:
ae:58:ab:c2:20:ce:b8:d8:52:8b:ef:23:79:e4:79:c0:2f:b7:
2e:7d:ec:b7:d1:93:88:51:e9:23:b6:8b:7d:79:24:98:18:c2:
89:cb:1e:45:32:0c:79:ba:1f:f1:bd:84:8f:b4:9d:a8:bb:1a:
9b:5b:03:a1:83:5b:bd:64:f4:65:c7:79:0d:ab:25:aa:11:6f:
32:ae:e8:d2:be:75:76:05:59:af:8e:91:30:35:5c:7c:6c:c8:
44:72:18:65:ad:fb:20:db:59:5e:0a:59:05:86:83:bf:1b:e4:
7b:4c:4e:88:ff:e5:6a:74:19:46:36:26:c7:1d:86:46:8a:84:
9a:e6:c7:69:12:49:5b:44:6e:21:c1:3b:80:96:59:6a:da:a5:
ea:75:0a:1f:ab:6d:61:a1:48:50:53:15:b2:cc:d9:02:5d:41:
86:2d:06:e9:ba:8b:a6:36:ca:62:ef:af:0d:ea:2f:1d:b5:53:
c1:66:cf:31:ea:6e:21:e8:e2:f8:76:22:93:5c:d4:17:02:1e:
c3:13:97:93:86:a0:ff:28:0f:9a:46:2e:c0:db:63:97:2f:2d:
41:50:41:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mllW/X4ufuA0E2caa7UveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMWQ1OGQ2MmRkZDdlNDdhZjIxOTZmZDc1NGJiM2ZmMjY3
OTg5MmEwHhcNMjYwMzI1MjAwMTE5WhcNMjYwMzI2MjAwMTE5WjAzMTEwLwYDVQQD
EyhkMzQyMWJjZTI4NTVkNWRmM2E1NWUyNjc3NjUzNDZiZTFkYzIyZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AU1JjHxLLfR3c2rBxWO0LeleUMz
2fUIJp+E4DtZA6xoTpgLBCicjIMV8AntFnBF6OeqwNc0pPlP6jeCXcygyyam7i4N
SHi5Z7ffov3toSiaOK/5b40XRrWStRi+QxSvk2x5Er0YGQjIJv2lWByMuLV3gDCy
j0McfXnFKBljdwRhYVL3aBsADtkz1/1aDmgG9uP1EmIn7Xnt4Qkjz/VcgoDc+D+j
94MTb8O5U5DIwmd/rpyM9L97zFAHPo+Pvya1HP65ada3V4g7VLFrzXoLbgZ9HO2+
NQhmHfdtypXIb0am+4uiOS9Y6D5mDmnqe/ns0EHyukcAfKmtmJyIJ5MItwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNCG84oVdXfOlXiZ3ZTRr4dwi8aMB8GA1UdIwQY
MBaAFH8dWNYt3X5HryGW/XVLs/8meYkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQt
ZTNiOWUwYmFlNmFiLzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQtZTNiOWUwYmFlNmFi
LzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrMqpKXd
OakkROk/vt4rnFZel0EGMDdpuaXsH9JLGxf+4qjbrlirwiDOuNhSi+8jeeR5wC+3
Ln3st9GTiFHpI7aLfXkkmBjCicseRTIMebof8b2Ej7SdqLsam1sDoYNbvWT0Zcd5
DaslqhFvMq7o0r51dgVZr46RMDVcfGzIRHIYZa37INtZXgpZBYaDvxvke0xOiP/l
anQZRjYmxx2GRoqEmubHaRJJW0RuIcE7gJZZatql6nUKH6ttYaFIUFMVsszZAl1B
hi0G6bqLpjbKYu+vDeovHbVTwWbPMepuIeji+HYik1zUFwIewxOXk4ag/ygPmkYu
wNtjly8tQVBB8g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:07 2026 by rpki-client