Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
File: fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json)
Hash identifier: Px4U35a+5/yTRkGmV8ktv6tpKoLlJone0/IjXRy/wC4=
Subject key identifier: 11:45:2D:87:AF:DA:EE:C7:FA:B5:BB:CD:76:17:DB:FD:FC:B3:2C:82
Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
Certificate issuer: /CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Certificate serial: 019D28BB7CBD32BF50CCA5AEA255CE542ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
Manifest number: 0F9B
Signing time: Thu 26 Mar 2026 06:01:08 +0000
Manifest this update: Thu 26 Mar 2026 06:01:08 +0000
Manifest next update: Fri 27 Mar 2026 06:01:08 +0000
Files and hashes: 1: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: cAlgidcoJ4mbokyI0+MJ0XxNkq+dHwOBfTjb+7i7yiQ=)
2: oBjKq8D7YtanGgUooThZNZJBCfY.roa (hash: Q8Mc9EtbMAXUED7OkrFkGjXFG36weOz2FmafoAYIkKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:7c:bd:32:bf:50:cc:a5:ae:a2:55:ce:54:2e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70
Validity
Not Before: Mar 26 06:01:08 2026 GMT
Not After : Mar 27 06:01:08 2026 GMT
Subject: CN=11452d87afdaeec7fab5bbcd7617dbfdfcb32c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:08:64:15:9a:50:26:e7:4a:d3:f2:2b:0e:
5e:9e:4d:be:97:aa:56:53:08:d6:aa:49:ac:8d:17:
04:53:0f:37:e0:ab:41:23:32:d9:75:42:9a:7d:84:
17:00:87:09:e4:3e:c3:23:95:f7:21:0a:6b:4a:d7:
0d:95:e8:45:45:6a:20:da:03:67:04:a6:ae:9a:b1:
1a:af:75:89:fc:04:98:c1:97:8d:7d:17:9c:c2:73:
9e:88:8c:38:db:dc:53:f9:f4:80:24:9b:9b:03:8c:
4e:3c:9a:2b:af:e4:32:9e:33:e9:a8:66:e6:56:81:
62:c4:68:bc:6b:9a:87:ef:06:f4:24:5f:0f:59:ae:
c6:a0:71:f6:a4:c2:83:83:e1:0c:05:5f:51:c3:23:
4d:e9:3f:df:ae:bd:fc:39:2b:90:07:b6:8d:9a:37:
e5:dc:fe:c7:45:e5:55:c7:a6:29:06:2a:e5:e5:94:
6b:69:34:eb:02:ab:8b:b4:49:41:f0:72:79:14:87:
c0:bf:6c:46:bd:46:ef:41:c5:f3:79:1a:77:96:e0:
1a:59:0b:72:13:fb:85:b4:83:f9:1f:3b:a0:48:91:
bb:ca:42:e5:2a:d7:b0:aa:84:c7:4f:e7:d8:25:91:
35:5d:28:08:8c:8c:bc:23:ef:e5:f5:ea:ee:26:53:
e9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:45:2D:87:AF:DA:EE:C7:FA:B5:BB:CD:76:17:DB:FD:FC:B3:2C:82
X509v3 Authority Key Identifier:
keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:81:70:77:c6:7e:ae:c1:df:1e:ab:20:49:b9:a7:14:a4:2c:
62:1f:9f:a2:3c:88:5d:c1:a0:94:51:4b:1c:ee:b2:27:21:22:
a6:e9:61:44:da:da:51:00:16:19:9d:04:4f:63:8b:81:99:fc:
f9:ad:44:6d:c3:74:14:b5:4b:18:2b:0c:a0:e3:90:d5:82:7f:
64:d3:4f:cb:a8:48:47:62:1f:8f:57:39:5c:ac:28:fa:74:df:
ea:06:fa:6a:af:50:9b:91:e5:c5:ba:01:ef:6e:d5:5f:b5:9c:
3c:75:5e:34:b6:c8:cf:4f:e8:f5:4f:77:89:d7:7a:ab:25:fc:
a7:a0:43:ec:29:db:af:a0:ea:44:bd:35:fb:1f:1f:61:47:7e:
48:de:44:45:43:c5:15:2b:8f:05:46:2f:71:86:ed:f6:62:1c:
a6:95:31:44:f4:e2:70:c4:c1:5d:36:da:b7:82:d7:7c:c4:f4:
38:1d:29:5b:0d:a9:d6:8d:24:be:34:a2:bd:60:ea:f3:27:5a:
36:0b:b4:c1:2e:66:e8:7e:d3:34:d1:7c:35:cf:2b:f8:86:de:
e2:da:67:82:29:f0:98:55:d7:49:bf:ea:8b:2b:37:af:08:a6:
f1:de:14:1a:e0:6a:86:92:4c:25:53:25:31:a8:77:91:fd:24:
d9:84:48:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou3y9Mr9QzKWuolXOVC7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzY2Njc3MmQ3OWJkN2JiMjExOTlhMmFiZGFmZTIyMDI1
MTFjNzAwHhcNMjYwMzI2MDYwMTA4WhcNMjYwMzI3MDYwMTA4WjAzMTEwLwYDVQQD
EygxMTQ1MmQ4N2FmZGFlZWM3ZmFiNWJiY2Q3NjE3ZGJmZGZjYjMyYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF8IZBWaUCbnStPyKw5enk2+l6pW
UwjWqkmsjRcEUw834KtBIzLZdUKafYQXAIcJ5D7DI5X3IQprStcNlehFRWog2gNn
BKaumrEar3WJ/ASYwZeNfRecwnOeiIw429xT+fSAJJubA4xOPJorr+QynjPpqGbm
VoFixGi8a5qH7wb0JF8PWa7GoHH2pMKDg+EMBV9RwyNN6T/frr38OSuQB7aNmjfl
3P7HReVVx6YpBirl5ZRraTTrAquLtElB8HJ5FIfAv2xGvUbvQcXzeRp3luAaWQty
E/uFtIP5HzugSJG7ykLlKtewqoTHT+fYJZE1XSgIjIy8I+/l9eruJlPp4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFFLYev2u7H+rW7zXYX2/38syyCMB8GA1UdIwQY
MBaAFH7GZncteb17shGZoqva/iICURxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hNmQ2NjAtYjFiOC00MjVlLWJiODIt
OTE2NTFkOWI4NTZhLzEvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9hNmQ2NjAtYjFiOC00MjVlLWJiODItOTE2NTFkOWI4NTZh
LzEvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYFwd8Z+
rsHfHqsgSbmnFKQsYh+fojyIXcGglFFLHO6yJyEipulhRNraUQAWGZ0ET2OLgZn8
+a1EbcN0FLVLGCsMoOOQ1YJ/ZNNPy6hIR2Ifj1c5XKwo+nTf6gb6aq9Qm5HlxboB
727VX7WcPHVeNLbIz0/o9U93idd6qyX8p6BD7Cnbr6DqRL01+x8fYUd+SN5ERUPF
FSuPBUYvcYbt9mIcppUxRPTicMTBXTbat4LXfMT0OB0pWw2p1o0kvjSivWDq8yda
Ngu0wS5m6H7TNNF8Nc8r+Ibe4tpnginwmFXXSb/qiys3rwim8d4UGuBqhpJMJVMl
Mah3kf0k2YRIXQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:03 2026 by rpki-client