Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
File: FAa0-f1RaOt3gegksUU-mfXmVTw.mft (raw, json)
Hash identifier: L9xJDly7g0Vchz1kGrNu6MmqqIq1/oF5N8lwuVELd+8=
Subject key identifier: A6:37:23:8E:5F:2D:27:DB:26:16:E1:7D:D4:08:21:53:68:22:8C:A5
Authority key identifier: 14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
Certificate issuer: /CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Certificate serial: 019D2583C9B8CE160C9F89A4EDAA397BD62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 15:01:26 +0000
Manifest this update: Wed 25 Mar 2026 15:01:26 +0000
Manifest next update: Thu 26 Mar 2026 15:01:26 +0000
Files and hashes: 1: FAa0-f1RaOt3gegksUU-mfXmVTw.crl (hash: OV7+pYImxbQv/mezKzsZXU8SQMBepe+Puh1W0OKpvsY=)
2: R8GC6AMTH-Hxqzb_tHLOqN1Dy-4.roa (hash: sjpipeUhURBvNL7hQYR9otIU9f5zXHfGn1dPphfh+uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c9:b8:ce:16:0c:9f:89:a4:ed:aa:39:7b:d6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c
Validity
Not Before: Mar 25 15:01:26 2026 GMT
Not After : Mar 26 15:01:26 2026 GMT
Subject: CN=a637238e5f2d27db2616e17dd408215368228ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6a:1b:b5:3a:90:06:89:00:2e:35:6c:56:f2:
43:c4:46:3c:75:6b:15:bd:ae:ab:54:0c:7c:e0:30:
b5:cc:57:9b:5f:48:80:12:0b:7e:b8:49:40:7a:26:
ca:11:a5:65:e1:38:91:e7:43:c6:03:28:4d:f7:0c:
a4:5c:93:d8:7c:a6:62:f7:c2:a2:f0:44:8b:f4:b9:
76:c6:d1:b9:01:0f:6a:81:14:38:bc:5e:0a:b0:e6:
37:8f:6c:40:25:bd:df:dc:30:74:3e:0a:5d:c0:74:
03:0b:03:04:ea:d7:93:dd:9f:07:07:23:54:97:7a:
0b:1d:d7:55:2b:6b:72:33:71:9a:a4:8a:5f:d8:c2:
d4:05:21:c5:ce:ef:5b:65:1b:2f:3c:43:20:92:fb:
ea:28:37:13:fe:05:78:ce:81:21:92:21:02:75:02:
d0:be:3e:bb:76:03:c2:a2:b1:6b:8f:1c:bd:56:fd:
a4:e7:75:5c:eb:27:be:b1:d1:a9:f3:d5:1f:c0:15:
47:41:dd:5d:26:77:2e:7b:78:ec:21:55:bb:01:f3:
45:c9:ef:e9:88:78:53:f5:89:fd:6f:75:df:2c:7d:
24:a4:47:80:fc:ef:ab:0a:51:67:08:9a:98:79:6a:
72:84:12:eb:fb:ed:ed:9d:e2:ae:64:20:0c:d6:a2:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:37:23:8E:5F:2D:27:DB:26:16:E1:7D:D4:08:21:53:68:22:8C:A5
X509v3 Authority Key Identifier:
keyid:14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c6:66:c1:fe:3e:0d:cd:90:2c:73:ed:1f:de:36:36:4f:25:
75:08:21:3f:d6:8b:05:2f:8f:6a:38:c8:60:75:8a:76:f8:57:
1d:7a:ce:39:94:c3:34:c3:95:92:f6:5d:f1:17:cf:0d:43:98:
d0:62:91:58:36:05:11:ab:91:2c:82:ca:72:e6:d2:30:f4:68:
21:ab:d5:c3:1e:89:5f:7f:7a:b4:f8:9a:15:9d:2b:bd:14:18:
f4:e4:87:e7:76:9e:88:65:bd:57:8b:8e:af:11:23:d3:a4:9c:
e7:ce:b6:2d:a0:c4:7f:72:62:4b:4d:a2:26:e8:a0:7b:33:ea:
65:a9:3d:54:5a:5b:ff:37:33:5b:32:3e:ad:4a:15:ac:9e:58:
94:46:9c:64:30:2f:3f:3a:df:21:a0:d9:3b:d9:de:3a:23:78:
bd:b5:fe:11:51:b4:72:3a:eb:04:03:69:81:b8:55:56:4a:34:
da:3d:3a:a6:9d:c4:1e:ed:d6:ed:6c:6f:51:5c:1e:c8:40:78:
5c:e6:89:fa:2d:c3:11:3b:d2:ab:93:ee:a4:3a:da:52:a0:64:
ba:9c:58:93:de:e9:82:01:b7:e2:38:e2:07:2c:e9:0e:83:4c:
50:61:62:6a:79:a2:a8:61:a7:4d:8e:88:ff:82:1f:71:d4:8c:
a5:4e:18:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg8m4zhYMn4mk7ao5e9YrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MDZiNGY5ZmQ1MTY4ZWI3NzgxZTgyNGIxNDUzZTk5ZjVl
NjU1M2MwHhcNMjYwMzI1MTUwMTI2WhcNMjYwMzI2MTUwMTI2WjAzMTEwLwYDVQQD
EyhhNjM3MjM4ZTVmMmQyN2RiMjYxNmUxN2RkNDA4MjE1MzY4MjI4Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GobtTqQBokALjVsVvJDxEY8dWsV
va6rVAx84DC1zFebX0iAEgt+uElAeibKEaVl4TiR50PGAyhN9wykXJPYfKZi98Ki
8ESL9Ll2xtG5AQ9qgRQ4vF4KsOY3j2xAJb3f3DB0PgpdwHQDCwME6teT3Z8HByNU
l3oLHddVK2tyM3GapIpf2MLUBSHFzu9bZRsvPEMgkvvqKDcT/gV4zoEhkiECdQLQ
vj67dgPCorFrjxy9Vv2k53Vc6ye+sdGp89UfwBVHQd1dJncue3jsIVW7AfNFye/p
iHhT9Yn9b3XfLH0kpEeA/O+rClFnCJqYeWpyhBLr++3tneKuZCAM1qIo3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY3I45fLSfbJhbhfdQIIVNoIoylMB8GA1UdIwQY
MBaAFBQGtPn9UWjrd4HoJLFFPpn15lU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkFhMC1mMVJhT3QzZ2Vna3NVVS1tZlhtVlR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84NmQ1MTItNDk5Yi00MThlLWE0MjAt
YzE2MTI0NmM4MjVhLzEvRkFhMC1mMVJhT3QzZ2Vna3NVVS1tZlhtVlR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84NmQ1MTItNDk5Yi00MThlLWE0MjAtYzE2MTI0NmM4MjVh
LzEvRkFhMC1mMVJhT3QzZ2Vna3NVVS1tZlhtVlR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcZmwf4+
Dc2QLHPtH942Nk8ldQghP9aLBS+PajjIYHWKdvhXHXrOOZTDNMOVkvZd8RfPDUOY
0GKRWDYFEauRLILKcubSMPRoIavVwx6JX396tPiaFZ0rvRQY9OSH53aeiGW9V4uO
rxEj06Sc5862LaDEf3JiS02iJuigezPqZak9VFpb/zczWzI+rUoVrJ5YlEacZDAv
PzrfIaDZO9neOiN4vbX+EVG0cjrrBANpgbhVVko02j06pp3EHu3W7WxvUVweyEB4
XOaJ+i3DETvSq5PupDraUqBkupxYk97pggG34jjiByzpDoNMUGFianmiqGGnTY6I
/4IfcdSMpU4Yjg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:33 2026 by rpki-client