Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
File: fG9Mjzo3f0bFUiAJZ4841hVxxso.mft (raw, json)
Hash identifier: S7pV1jNB17B6KPu1UswWnALgVQh3p0N6TzM1E0cFDgM=
Subject key identifier: 71:1A:66:8B:A9:D8:D7:E0:2B:FA:32:64:89:5F:52:35:EB:D6:A6:F6
Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
Certificate issuer: /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Certificate serial: 019D27A8B6B425EC74B7C321810A601E2B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
Manifest number: 0CFD
Signing time: Thu 26 Mar 2026 01:01:01 +0000
Manifest this update: Thu 26 Mar 2026 01:01:01 +0000
Manifest next update: Fri 27 Mar 2026 01:01:01 +0000
Files and hashes: 1: Dro43UswDXgv1T5j_BRPwIsOV10.roa (hash: oIkm99AZjkjz6X4ghJ78sK9ulOao8b5MSKTe16jyBVE=)
2: fG9Mjzo3f0bFUiAJZ4841hVxxso.crl (hash: RqOYjJc78q0QXazuSYc9HHkQPirkc3QLXW2IGrwkcSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b6:b4:25:ec:74:b7:c3:21:81:0a:60:1e:2b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Validity
Not Before: Mar 26 01:01:01 2026 GMT
Not After : Mar 27 01:01:01 2026 GMT
Subject: CN=711a668ba9d8d7e02bfa3264895f5235ebd6a6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:64:57:5a:5a:83:25:aa:3a:23:aa:4c:02:
53:71:08:b7:e9:f8:f3:72:c1:8c:c0:54:7f:f1:18:
bc:ea:97:14:13:ff:d6:36:fb:9f:2e:eb:92:64:3e:
86:55:e7:60:17:19:57:a1:24:49:08:eb:8e:4a:97:
bd:dc:af:0d:da:2f:f2:a3:ae:2f:61:02:86:22:aa:
2c:07:f6:07:6f:c2:66:a6:58:5a:04:18:04:a2:85:
5a:0c:bf:c7:22:e3:39:81:3c:7b:4e:1b:6f:c8:af:
12:1e:38:cd:d7:7f:f3:d3:f8:1c:8c:05:30:cf:28:
79:8d:98:d7:ae:ec:7e:90:76:f1:a6:9b:c8:69:81:
5d:56:42:05:a0:fb:a3:fd:e8:83:c6:00:a2:82:45:
f4:0f:33:b3:34:0f:aa:1c:a2:38:b6:6e:db:2e:59:
5a:3f:c3:1b:cb:6c:a9:90:3e:a4:bd:e4:fe:9f:4c:
5b:ff:df:58:b8:a7:49:f1:98:cb:35:50:2c:41:df:
a3:54:c3:46:7e:3d:61:60:5b:5f:79:db:09:8a:e9:
c4:9c:81:5a:d0:52:2b:e5:d0:a6:9f:e3:6d:39:c7:
e5:ac:e1:97:ff:d8:b1:e7:30:f2:df:69:bc:e4:b7:
b7:d0:ae:74:9b:34:7a:9a:ba:56:d1:65:b2:3f:4d:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1A:66:8B:A9:D8:D7:E0:2B:FA:32:64:89:5F:52:35:EB:D6:A6:F6
X509v3 Authority Key Identifier:
keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b3:96:70:58:31:e7:0f:9f:f6:08:ba:51:bf:53:2c:76:ef:
ae:cf:d1:c3:3c:d7:0a:78:d0:61:3b:04:3b:c0:1f:7a:fd:6d:
ca:4b:72:0a:63:63:8e:c5:79:d9:3a:99:0e:f2:c9:9c:b8:6a:
1f:d3:5f:0b:39:de:f0:c6:6b:6a:51:87:41:0e:8f:84:c7:72:
5f:c0:7b:f3:97:00:96:23:81:13:70:e0:0c:ea:65:40:bc:6a:
44:f8:9e:aa:b0:c2:c4:f5:69:6a:a9:a2:5a:f5:80:2c:73:8e:
3f:77:1f:d6:1c:f3:16:40:c8:ee:71:63:30:a2:67:88:c0:68:
e3:b3:06:fa:08:78:b4:38:13:59:e8:03:4e:4c:95:6d:8d:db:
0e:72:fa:06:f5:52:93:ce:e4:09:56:1c:c3:5b:3e:df:10:ba:
02:82:79:21:0f:15:9a:98:a4:6b:94:da:0a:1d:8a:64:36:42:
3b:0a:8c:04:de:f7:45:ca:12:f1:08:bf:80:15:1d:b6:8b:31:
ec:a2:ea:07:ba:57:88:35:f9:00:4f:ff:64:04:70:cd:c3:cb:
ba:18:b2:2e:5c:36:13:0e:15:c2:7d:73:6b:1c:68:07:f7:74:
f1:75:17:54:b8:85:39:2b:68:a9:78:e6:82:3f:49:a8:7c:cf:
72:2e:4b:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqLa0Jex0t8MhgQpgHiuWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNmY0YzhmM2EzNzdmNDZjNTUyMjAwOTY3OGYzOGQ2MTU3
MWM2Y2EwHhcNMjYwMzI2MDEwMTAxWhcNMjYwMzI3MDEwMTAxWjAzMTEwLwYDVQQD
Eyg3MTFhNjY4YmE5ZDhkN2UwMmJmYTMyNjQ4OTVmNTIzNWViZDZhNmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkpkV1pagyWqOiOqTAJTcQi36fjz
csGMwFR/8Ri86pcUE//WNvufLuuSZD6GVedgFxlXoSRJCOuOSpe93K8N2i/yo64v
YQKGIqosB/YHb8JmplhaBBgEooVaDL/HIuM5gTx7ThtvyK8SHjjN13/z0/gcjAUw
zyh5jZjXrux+kHbxppvIaYFdVkIFoPuj/eiDxgCigkX0DzOzNA+qHKI4tm7bLlla
P8Mby2ypkD6kveT+n0xb/99YuKdJ8ZjLNVAsQd+jVMNGfj1hYFtfedsJiunEnIFa
0FIr5dCmn+NtOcflrOGX/9ix5zDy32m85Le30K50mzR6mrpW0WWyP03NWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEaZoup2NfgK/oyZIlfUjXr1qb2MB8GA1UdIwQY
MBaAFHxvTI86N39GxVIgCWePONYVccbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkc5TWp6bzNmMGJGVWlBSlo0ODQxaFZ4eHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81YzZjOWYtNjkxZi00Mjg0LWI4NGQt
MWQzNjdhNWY4NmQ0LzEvZkc5TWp6bzNmMGJGVWlBSlo0ODQxaFZ4eHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy81YzZjOWYtNjkxZi00Mjg0LWI4NGQtMWQzNjdhNWY4NmQ0
LzEvZkc5TWp6bzNmMGJGVWlBSlo0ODQxaFZ4eHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbOWcFgx
5w+f9gi6Ub9TLHbvrs/RwzzXCnjQYTsEO8Afev1tyktyCmNjjsV52TqZDvLJnLhq
H9NfCzne8MZralGHQQ6PhMdyX8B785cAliOBE3DgDOplQLxqRPieqrDCxPVpaqmi
WvWALHOOP3cf1hzzFkDI7nFjMKJniMBo47MG+gh4tDgTWegDTkyVbY3bDnL6BvVS
k87kCVYcw1s+3xC6AoJ5IQ8Vmpika5TaCh2KZDZCOwqMBN73RcoS8Qi/gBUdtosx
7KLqB7pXiDX5AE//ZARwzcPLuhiyLlw2Ew4Vwn1zaxxoB/d08XUXVLiFOStoqXjm
gj9JqHzPci5LKw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:58 2026 by rpki-client