Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: 6uIoC7By0gedZbxEzLN0AFKFkYYBHFcKPJAGHEHX3oc=
Subject key identifier: 3F:DF:C7:03:98:74:A8:F2:3D:21:A0:F5:2D:02:3E:19:11:0F:E4:F1
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 019D2771E0E0D60FDA8E2F8F546B9A3F5511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 0464
Signing time: Thu 26 Mar 2026 00:01:07 +0000
Manifest this update: Thu 26 Mar 2026 00:01:07 +0000
Manifest next update: Fri 27 Mar 2026 00:01:07 +0000
Files and hashes: 1: 7CcrAdktIbmIWLIGRKt4XmzFkcg.roa (hash: iem2l37ZP4AP5T+ke2deoIOETFCnj1X7HBG1zJalTyg=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: p6XYbmUiAFJxmtCmpPWRYYHkzdY5LqWALAfOjs8lROw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e0:e0:d6:0f:da:8e:2f:8f:54:6b:9a:3f:55:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Mar 26 00:01:07 2026 GMT
Not After : Mar 27 00:01:07 2026 GMT
Subject: CN=3fdfc7039874a8f23d21a0f52d023e19110fe4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:6d:e2:66:3f:88:1d:65:e2:a8:76:5f:bd:
89:19:d0:15:36:5a:b9:98:d0:04:6d:df:e9:27:b1:
70:a4:f5:3c:0a:b0:76:ed:f5:d4:06:2d:fd:5b:e3:
28:04:3f:64:2a:a7:23:e7:76:c9:00:65:bf:2e:aa:
97:84:cf:c7:5a:7b:5d:73:a8:d0:17:87:0b:fc:4b:
8d:1f:6d:ff:55:30:77:08:08:36:ce:53:9b:90:d3:
42:99:97:31:b5:e8:57:a9:19:42:ea:c1:01:49:a4:
62:36:53:74:ea:c2:28:18:2e:57:18:bb:fd:df:77:
26:b7:41:ad:a8:57:6b:5a:f6:02:ec:5c:50:bc:b2:
44:b1:9a:f9:6f:29:6f:fc:dc:b4:1f:97:51:d5:13:
4c:4d:fe:8e:a4:c0:08:9a:23:3e:9d:56:13:87:32:
97:3a:79:8d:f6:69:83:b6:56:70:4e:a3:65:0b:44:
02:28:3b:d8:92:e8:77:6a:8d:8c:ba:87:08:2c:17:
c8:91:fc:b4:68:95:9a:cb:b3:b0:82:10:ae:7d:83:
75:e9:0f:89:c8:6c:8c:1f:a6:9b:9a:e5:c6:6b:cc:
d2:c7:9a:33:a5:3d:2d:99:d3:d5:0c:e4:8a:ef:17:
8a:43:2c:19:47:9c:79:41:c7:27:3c:b1:e6:db:7c:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:C7:03:98:74:A8:F2:3D:21:A0:F5:2D:02:3E:19:11:0F:E4:F1
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ab:a5:81:4f:41:92:b9:c8:11:93:91:3e:c7:0b:2b:69:a2:
41:e2:4d:38:60:68:48:41:97:f3:f4:96:39:8a:6e:87:ef:15:
3d:72:27:ec:14:68:4f:45:10:f6:65:a7:9e:ed:b9:95:22:53:
e5:c8:23:b5:86:e4:89:32:f7:70:f6:11:b0:d7:8f:be:09:9c:
12:56:2d:40:c3:2b:0b:3b:5e:6c:87:e3:72:f4:5f:b8:63:35:
bd:5f:cd:0d:3a:13:3c:be:ad:df:48:70:41:f5:34:70:ca:dc:
3e:12:58:af:5e:ba:b1:ca:51:19:f0:c6:7b:f0:40:91:a1:b3:
89:cb:e3:9b:45:f2:a6:bc:69:10:2e:3a:45:15:4a:c0:f5:0d:
9c:cc:0c:de:13:d0:ab:70:20:24:33:45:47:9c:bf:81:4e:1b:
20:4d:9f:b0:f8:25:7f:d1:3a:f0:5d:f5:bc:b2:d7:6d:4a:1f:
c7:0e:b3:ea:17:17:04:8a:f1:ed:ac:ce:f8:49:3d:87:76:49:
01:3b:cc:08:02:92:92:ca:e1:ae:60:11:44:d8:3a:92:ea:3b:
14:2d:b6:57:57:33:df:cb:27:67:15:ee:4f:3f:b1:0f:9b:97:
47:a9:73:aa:22:68:3d:8f:64:f5:29:69:9b:71:60:6f:a8:fc:
55:19:34:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nceDg1g/aji+PVGuaP1URMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYTk2MmIzYjE3ZWVmMDY5ZTNhYmEyMTI4OGJiMmM2NDIy
MWJmZWQwHhcNMjYwMzI2MDAwMTA3WhcNMjYwMzI3MDAwMTA3WjAzMTEwLwYDVQQD
EygzZmRmYzcwMzk4NzRhOGYyM2QyMWEwZjUyZDAyM2UxOTExMGZlNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oZt4mY/iB1l4qh2X72JGdAVNlq5
mNAEbd/pJ7FwpPU8CrB27fXUBi39W+MoBD9kKqcj53bJAGW/LqqXhM/HWntdc6jQ
F4cL/EuNH23/VTB3CAg2zlObkNNCmZcxtehXqRlC6sEBSaRiNlN06sIoGC5XGLv9
33cmt0GtqFdrWvYC7FxQvLJEsZr5bylv/Ny0H5dR1RNMTf6OpMAImiM+nVYThzKX
OnmN9mmDtlZwTqNlC0QCKDvYkuh3ao2MuocILBfIkfy0aJWay7OwghCufYN16Q+J
yGyMH6abmuXGa8zSx5ozpT0tmdPVDOSK7xeKQywZR5x5QccnPLHm23wnJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/fxwOYdKjyPSGg9S0CPhkRD+TxMB8GA1UdIwQY
MBaAFHypYrOxfu8Gnjq6ISiLssZCIb/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMDE3ZGYtMGQwZi00YTM2LWFjMjUt
NDk2OGFhYWZjNTliLzEvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mMDE3ZGYtMGQwZi00YTM2LWFjMjUtNDk2OGFhYWZjNTli
LzEvZktsaXM3Ri03d2FlT3JvaEtJdXl4a0lodi0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaulgU9B
krnIEZORPscLK2miQeJNOGBoSEGX8/SWOYpuh+8VPXIn7BRoT0UQ9mWnnu25lSJT
5cgjtYbkiTL3cPYRsNePvgmcElYtQMMrCztebIfjcvRfuGM1vV/NDToTPL6t30hw
QfU0cMrcPhJYr166scpRGfDGe/BAkaGzicvjm0XyprxpEC46RRVKwPUNnMwM3hPQ
q3AgJDNFR5y/gU4bIE2fsPglf9E68F31vLLXbUofxw6z6hcXBIrx7azO+Ek9h3ZJ
ATvMCAKSksrhrmARRNg6kuo7FC22V1cz38snZxXuTz+xD5uXR6lzqiJoPY9k9Slp
m3Fgb6j8VRk0Cw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:32:13 2026 by rpki-client