Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File: fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier: 61p44IyU/W/H0p6kO9kIkZZVLHantbuUvIpJgJYS754=
Subject key identifier: 14:88:7C:58:6A:63:F4:94:38:3D:71:97:C1:4A:02:16:3D:D6:13:1B
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial: 019D25833253F9FE9EBAE96BF552243411E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 15:00:48 +0000
Manifest this update: Wed 25 Mar 2026 15:00:48 +0000
Manifest next update: Thu 26 Mar 2026 15:00:48 +0000
Files and hashes: 1: BMUh6giJ2NjrKl7YKu0d2xZtEZc.roa (hash: bjj+EiIZMtUCLQ7A849Yk7cP7W1t0jST2f2u4ZKj78g=)
2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: yOpSyQZiRJDNTkGM4MXDzhS9cnc2g5q2bIjElFwZUDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:32:53:f9:fe:9e:ba:e9:6b:f5:52:24:34:11:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Validity
Not Before: Mar 25 15:00:48 2026 GMT
Not After : Mar 26 15:00:48 2026 GMT
Subject: CN=14887c586a63f494383d7197c14a02163dd6131b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:bb:89:a1:ce:bb:fc:ae:2e:50:96:e5:60:
25:89:f0:02:87:77:6f:4d:71:f8:61:c8:6f:ab:2b:
9d:66:7d:67:77:38:7e:94:03:71:1a:1f:98:e4:b6:
d8:62:cc:b4:33:c9:5a:fa:e3:22:04:74:ae:68:68:
0f:29:d2:42:9b:f4:4f:8a:ec:09:52:41:a5:6f:9d:
31:57:43:48:71:89:1d:25:9f:84:af:6e:74:5c:62:
6d:22:d1:43:1a:bd:37:35:21:36:b6:cb:51:6f:6c:
d8:12:56:79:b4:88:e1:07:88:fd:97:ce:79:a8:e7:
c8:6f:e7:14:3c:1a:89:a8:60:05:10:fd:cd:2a:1b:
49:4e:27:97:34:ec:81:69:51:38:58:d9:c9:a9:c6:
b5:aa:28:70:3c:f2:c4:12:23:3d:41:9b:fa:b8:cd:
e4:34:de:b4:3c:28:53:3e:91:d2:6b:98:ea:c3:db:
af:a0:e7:62:65:c2:51:65:b2:20:c2:4f:73:ec:73:
4d:1b:e2:c9:37:9f:0e:a6:d6:12:a0:4d:cf:08:a8:
8f:66:e3:d5:14:4d:31:6f:ba:90:94:8b:75:e6:af:
9e:6e:c5:2a:c9:8a:52:5c:b3:cf:71:8a:fb:a2:d5:
46:f3:0a:a4:eb:94:e1:90:a8:27:0d:50:ea:a9:ff:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:88:7C:58:6A:63:F4:94:38:3D:71:97:C1:4A:02:16:3D:D6:13:1B
X509v3 Authority Key Identifier:
keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:04:d6:99:08:c4:08:2c:06:98:ec:12:2b:9a:99:44:32:75:
01:b8:01:8d:a3:02:86:a1:63:0e:00:d6:64:6e:5f:ca:73:6b:
83:8b:0e:68:dd:27:73:18:83:79:9c:b1:f8:80:7d:4f:72:16:
2d:9c:aa:6c:94:5c:29:dc:9b:40:eb:4d:1a:9b:cc:ca:83:5b:
b0:c9:94:d6:f5:57:08:54:e7:4f:51:1c:75:d9:5e:db:73:ef:
44:75:b8:62:de:c5:8e:6f:55:ed:00:4a:a4:da:97:62:77:a6:
1a:c1:0e:12:fd:df:ab:d6:c0:e3:0b:49:0b:57:34:3f:46:ba:
fd:a1:d8:1d:b5:75:99:45:1d:70:2c:16:f2:78:20:71:7c:38:
66:46:2e:04:46:78:10:83:15:a0:44:95:ac:d7:90:3f:13:52:
a6:9b:e6:c8:4b:05:df:be:91:15:fa:ee:0a:ce:28:05:8f:be:
d3:55:1f:1e:d9:61:11:b5:06:1b:67:fd:81:bf:e9:6f:d5:b0:
2b:61:5b:15:bf:b9:8e:2c:51:2d:07:98:f6:ab:3d:13:7a:e9:
77:78:20:32:cc:d2:c0:f2:c7:21:c0:90:c8:06:3c:2b:aa:37:
d0:33:3e:76:8f:20:4e:e2:dd:2e:c1:cc:0f:88:f9:04:c0:5c:
36:b4:90:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lgzJT+f6euulr9VIkNBHmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzgxZGUyZGEyZjBhNWFhYjQxODI2MTRiYmNjNWU0MTNk
NTUyMWIwHhcNMjYwMzI1MTUwMDQ4WhcNMjYwMzI2MTUwMDQ4WjAzMTEwLwYDVQQD
EygxNDg4N2M1ODZhNjNmNDk0MzgzZDcxOTdjMTRhMDIxNjNkZDYxMzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquq7iaHOu/yuLlCW5WAlifACh3dv
TXH4YchvqyudZn1ndzh+lANxGh+Y5LbYYsy0M8la+uMiBHSuaGgPKdJCm/RPiuwJ
UkGlb50xV0NIcYkdJZ+Er250XGJtItFDGr03NSE2tstRb2zYElZ5tIjhB4j9l855
qOfIb+cUPBqJqGAFEP3NKhtJTieXNOyBaVE4WNnJqca1qihwPPLEEiM9QZv6uM3k
NN60PChTPpHSa5jqw9uvoOdiZcJRZbIgwk9z7HNNG+LJN58OptYSoE3PCKiPZuPV
FE0xb7qQlIt15q+ebsUqyYpSXLPPcYr7otVG8wqk65ThkKgnDVDqqf/dXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSIfFhqY/SUOD1xl8FKAhY91hMbMB8GA1UdIwQY
MBaAFH7IHeLaLwpaq0GCYUu8xeQT1VIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYt
YmQ5MWU5MmFjYTkwLzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYtYmQ5MWU5MmFjYTkw
LzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwTWmQjE
CCwGmOwSK5qZRDJ1AbgBjaMChqFjDgDWZG5fynNrg4sOaN0ncxiDeZyx+IB9T3IW
LZyqbJRcKdybQOtNGpvMyoNbsMmU1vVXCFTnT1Ecddle23PvRHW4Yt7Fjm9V7QBK
pNqXYnemGsEOEv3fq9bA4wtJC1c0P0a6/aHYHbV1mUUdcCwW8nggcXw4ZkYuBEZ4
EIMVoESVrNeQPxNSppvmyEsF376RFfruCs4oBY++01UfHtlhEbUGG2f9gb/pb9Ww
K2FbFb+5jixRLQeY9qs9E3rpd3ggMszSwPLHIcCQyAY8K6o30DM+do8gTuLdLsHM
D4j5BMBcNrSQWg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:12 2026 by rpki-client