Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier: sHRjHksGCEe+WctHewKdH19dt8hLKKbouE2nd/IJsgs=
Subject key identifier: 5C:B7:20:59:58:35:25:39:98:7A:52:96:10:2E:FC:F5:06:E8:90:92
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 019D288419BC639C32894E2CE859B9524C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number: 11FC
Signing time: Thu 26 Mar 2026 05:00:39 +0000
Manifest this update: Thu 26 Mar 2026 05:00:39 +0000
Manifest next update: Fri 27 Mar 2026 05:00:39 +0000
Files and hashes: 1: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: g3kClBfUqi7Z7hYW3ckXh4TdhVISl/to0d+v9p8snIQ=)
2: ZYVhpFZbN06CUe59j1pMT24apfY.roa (hash: 9KVaBH7C5jrjUC4AJ6bt9vp9SMTJAC7tn9CsEVo1BYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:19:bc:63:9c:32:89:4e:2c:e8:59:b9:52:4c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Mar 26 05:00:39 2026 GMT
Not After : Mar 27 05:00:39 2026 GMT
Subject: CN=5cb7205958352539987a5296102efcf506e89092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:f4:39:71:51:8a:95:47:f8:fb:fb:1e:3b:
46:53:4e:76:0c:c9:46:5b:b7:c3:91:aa:be:69:7f:
20:cd:76:cb:14:4c:a3:30:b5:e6:07:b4:f7:48:52:
94:d2:80:d7:fc:fa:48:92:d7:21:54:34:0b:8e:73:
11:77:3a:c5:7f:2e:d4:96:13:4c:2f:c4:f3:a6:f6:
2a:5f:4f:89:d6:98:fa:a1:61:a7:80:5d:26:15:76:
6a:d4:1e:f5:89:0a:45:46:f7:1f:7f:2c:ad:3b:2b:
83:56:71:c9:4d:8b:56:b3:2a:c3:4b:18:70:e6:3a:
7a:bb:24:45:c0:3f:0b:8a:66:70:7d:2c:a9:01:a2:
7d:5d:3d:95:e0:46:ae:40:ad:0c:13:54:d6:3a:e5:
61:bf:7b:0a:c7:97:20:d5:80:22:5f:dc:74:77:18:
04:eb:e6:dd:f5:66:76:a8:2a:68:72:6e:67:1d:18:
e1:9b:60:1e:8a:56:cf:6c:1a:c8:a5:aa:1b:c8:97:
d2:ca:29:b4:5a:48:5d:05:6a:70:51:cd:58:41:9b:
ef:33:0e:62:65:68:62:87:14:7e:db:95:fb:bc:ce:
bd:53:b4:fe:dc:bd:8b:91:48:22:5d:33:a0:9e:41:
68:42:dd:9f:cc:2b:c9:e9:b0:a4:c3:c2:63:b9:65:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B7:20:59:58:35:25:39:98:7A:52:96:10:2E:FC:F5:06:E8:90:92
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:10:08:ba:89:6b:fe:82:39:ef:cc:ca:db:e8:53:73:4e:95:
64:80:ed:d6:65:9b:ac:82:30:ec:dd:b5:6e:1b:22:13:8a:36:
78:4d:47:0f:35:5c:d7:c3:c6:f1:e1:ca:c7:82:f9:c4:e3:51:
e8:60:78:e6:15:ed:10:49:11:a8:ee:7b:e7:d2:c0:95:9a:78:
93:16:c6:d8:3f:aa:30:40:24:ca:56:a4:7e:28:95:de:ac:c2:
08:ca:a3:0c:3d:78:a8:fd:4b:8a:38:5d:90:b3:ed:a1:8d:2f:
fb:69:30:eb:f8:b8:19:d9:ea:d7:d5:62:2a:60:f8:ba:ed:e5:
14:8e:c3:be:d4:f5:c3:2d:36:ac:19:38:12:29:0e:82:d5:2a:
be:1b:98:2d:d4:9f:db:81:0f:eb:04:1f:38:4f:c9:7f:1d:7a:
2c:fa:46:bd:db:41:3a:1c:d2:a6:12:94:bb:fe:f1:74:35:d9:
3d:2c:d2:a1:ad:2a:ba:c5:6f:3c:d7:65:fa:93:23:ff:b1:f3:
f7:93:bc:6c:8a:d5:a5:82:65:d6:3e:df:53:2e:ae:a9:3e:32:
af:8c:5e:ee:f5:e5:7b:c6:9d:d6:df:49:a2:f3:54:4c:3d:1d:
4b:4c:3f:29:57:74:24:77:34:58:3d:02:96:57:aa:e2:f2:ed:
11:d7:66:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohBm8Y5wyiU4s6Fm5Ukx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NGIzMTVhZTBmMjRjODkxZmNhMTg0NTZjNjY5MTc3OTJh
ZjE2NWUwHhcNMjYwMzI2MDUwMDM5WhcNMjYwMzI3MDUwMDM5WjAzMTEwLwYDVQQD
Eyg1Y2I3MjA1OTU4MzUyNTM5OTg3YTUyOTYxMDJlZmNmNTA2ZTg5MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHn0OXFRipVH+Pv7HjtGU052DMlG
W7fDkaq+aX8gzXbLFEyjMLXmB7T3SFKU0oDX/PpIktchVDQLjnMRdzrFfy7UlhNM
L8TzpvYqX0+J1pj6oWGngF0mFXZq1B71iQpFRvcffyytOyuDVnHJTYtWsyrDSxhw
5jp6uyRFwD8LimZwfSypAaJ9XT2V4EauQK0ME1TWOuVhv3sKx5cg1YAiX9x0dxgE
6+bd9WZ2qCpocm5nHRjhm2AeilbPbBrIpaobyJfSyim0WkhdBWpwUc1YQZvvMw5i
ZWhihxR+25X7vM69U7T+3L2LkUgiXTOgnkFoQt2fzCvJ6bCkw8JjuWU3YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy3IFlYNSU5mHpSlhAu/PUG6JCSMB8GA1UdIwQY
MBaAFBRLMVrg8kyJH8oYRWxmkXeSrxZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAt
MTE4MjhlMGU0MjdiLzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAtMTE4MjhlMGU0Mjdi
LzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxAIuolr
/oI578zK2+hTc06VZIDt1mWbrIIw7N21bhsiE4o2eE1HDzVc18PG8eHKx4L5xONR
6GB45hXtEEkRqO5759LAlZp4kxbG2D+qMEAkylakfiiV3qzCCMqjDD14qP1Lijhd
kLPtoY0v+2kw6/i4Gdnq19ViKmD4uu3lFI7DvtT1wy02rBk4EikOgtUqvhuYLdSf
24EP6wQfOE/Jfx16LPpGvdtBOhzSphKUu/7xdDXZPSzSoa0qusVvPNdl+pMj/7Hz
95O8bIrVpYJl1j7fUy6uqT4yr4xe7vXle8ad1t9JovNUTD0dS0w/KVd0JHc0WD0C
lleq4vLtEddmEQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:36 2026 by rpki-client