Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
File: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft (raw, json)
Hash identifier: DSSCrKaiFoXswjhnJalryPMAS2c5Lgz6zO78j6t1mns=
Subject key identifier: B6:B1:4F:11:F7:00:47:7F:FA:B2:98:88:4A:33:EE:C7:08:DB:03:0E
Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
Certificate issuer: /CN=7e9360205b48af4954566314230e6b1296d9aec4
Certificate serial: 019D26CCDA3DE43030F1B32A91F3EEF1583A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
Manifest number: 0745
Signing time: Wed 25 Mar 2026 21:00:52 +0000
Manifest this update: Wed 25 Mar 2026 21:00:52 +0000
Manifest next update: Thu 26 Mar 2026 21:00:52 +0000
Files and hashes: 1: 96LYOeOZrfhBfF0aYpvHmgR3_EI.roa (hash: cZrj9IEY9V0hY5ejfic9+qWXj8uAu/BE+c5uGfFzBJY=)
2: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl (hash: hSW+goAf9Osh5kOdqHoqJWrJ0/tJt5dkj99XHi6tLak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:da:3d:e4:30:30:f1:b3:2a:91:f3:ee:f1:58:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4
Validity
Not Before: Mar 25 21:00:52 2026 GMT
Not After : Mar 26 21:00:52 2026 GMT
Subject: CN=b6b14f11f700477ffab298884a33eec708db030e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:b8:96:a0:bc:77:13:72:31:ac:b9:03:ef:
12:8d:67:b3:2d:8e:24:3e:04:85:f7:c2:8b:1c:b0:
54:ff:f5:67:73:7f:f9:13:c7:d4:c1:d5:ab:ed:d8:
b7:d4:55:40:26:36:a1:0c:86:75:49:dd:8c:ab:81:
80:e8:13:ba:2d:6e:60:77:29:8a:12:dc:1f:27:4c:
e8:c3:4c:05:53:6b:8a:15:b1:26:a0:65:f6:61:f6:
04:ad:09:b4:13:59:80:36:fb:f4:32:81:45:f0:d7:
7f:8a:4a:4a:9b:ce:83:aa:79:00:b6:74:00:5a:b7:
f7:b3:60:1c:f1:8d:15:b7:b6:5f:49:4f:60:49:0e:
1a:ca:25:3b:7c:b2:9b:ee:60:49:cb:e9:d2:04:3b:
29:2d:c6:d5:b9:84:af:04:89:88:f0:36:a0:3d:ba:
2f:b7:c1:be:1a:a7:c0:93:9b:09:34:9c:5c:d8:cb:
24:81:86:69:70:81:8b:1c:e4:0f:e2:c9:c1:94:33:
ca:32:5d:3f:37:ea:5d:78:75:cb:f7:ad:d1:bc:2c:
1c:5f:b3:b9:15:85:df:e3:b0:c2:6d:c8:36:58:88:
97:86:05:70:ad:8b:db:72:be:31:3e:f8:56:e4:66:
1b:5a:13:7c:5c:6f:2e:7e:80:65:16:32:ef:d6:49:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B1:4F:11:F7:00:47:7F:FA:B2:98:88:4A:33:EE:C7:08:DB:03:0E
X509v3 Authority Key Identifier:
keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:45:43:ae:e3:08:ea:37:b2:c3:23:aa:d5:d5:62:7f:ce:f8:
ec:2f:bc:1b:06:6f:67:2d:be:0b:97:fe:d8:59:45:65:c0:37:
01:dd:73:4d:67:6b:34:32:d4:58:0a:c5:04:26:f5:2b:a4:da:
e8:1d:2d:a2:cb:ad:8c:2f:53:de:52:04:b0:22:b0:0f:37:d9:
82:ac:96:34:43:e8:f9:d6:a3:3e:ec:15:d3:52:a3:28:19:ee:
57:eb:17:c9:f0:67:b9:35:fa:1b:84:fe:a4:ef:3b:04:b5:85:
dd:a7:26:6c:36:0a:60:f7:7b:be:4b:30:fe:ba:ee:6e:64:71:
c1:21:53:f4:a4:dc:e6:54:46:75:bd:98:14:e9:d8:af:f0:46:
66:99:4d:f5:d7:75:31:b8:37:e7:b7:05:73:32:8e:27:e5:60:
46:94:2b:80:d4:a4:e1:0e:7e:95:2f:ff:64:6c:60:d2:e9:21:
b4:79:ed:81:33:ac:fc:71:7a:94:15:34:a8:24:34:ba:60:4a:
fe:ba:e9:5e:74:30:4b:77:f1:c6:c1:81:2a:c7:36:a2:cc:c8:
d0:8e:f5:a3:c2:cb:57:1a:20:56:15:a1:f4:73:fc:00:af:3a:
25:05:e2:7a:c5:a0:d3:94:72:71:16:62:6f:2b:fd:f1:7d:60:
04:f4:06:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzNo95DAw8bMqkfPu8Vg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTM2MDIwNWI0OGFmNDk1NDU2NjMxNDIzMGU2YjEyOTZk
OWFlYzQwHhcNMjYwMzI1MjEwMDUyWhcNMjYwMzI2MjEwMDUyWjAzMTEwLwYDVQQD
EyhiNmIxNGYxMWY3MDA0NzdmZmFiMjk4ODg0YTMzZWVjNzA4ZGIwMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuai4lqC8dxNyMay5A+8SjWezLY4k
PgSF98KLHLBU//Vnc3/5E8fUwdWr7di31FVAJjahDIZ1Sd2Mq4GA6BO6LW5gdymK
EtwfJ0zow0wFU2uKFbEmoGX2YfYErQm0E1mANvv0MoFF8Nd/ikpKm86DqnkAtnQA
Wrf3s2Ac8Y0Vt7ZfSU9gSQ4ayiU7fLKb7mBJy+nSBDspLcbVuYSvBImI8DagPbov
t8G+GqfAk5sJNJxc2MskgYZpcIGLHOQP4snBlDPKMl0/N+pdeHXL963RvCwcX7O5
FYXf47DCbcg2WIiXhgVwrYvbcr4xPvhW5GYbWhN8XG8ufoBlFjLv1knWBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaxTxH3AEd/+rKYiEoz7scI2wMOMB8GA1UdIwQY
MBaAFH6TYCBbSK9JVFZjFCMOaxKW2a7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84YTIyZjEtZTRmZi00NDY5LTgyZWIt
ZDMwZWE5NjhiZmE3LzEvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84YTIyZjEtZTRmZi00NDY5LTgyZWItZDMwZWE5NjhiZmE3
LzEvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUVDruMI
6jeywyOq1dVif8747C+8GwZvZy2+C5f+2FlFZcA3Ad1zTWdrNDLUWArFBCb1K6Ta
6B0tosutjC9T3lIEsCKwDzfZgqyWNEPo+dajPuwV01KjKBnuV+sXyfBnuTX6G4T+
pO87BLWF3acmbDYKYPd7vksw/rrubmRxwSFT9KTc5lRGdb2YFOnYr/BGZplN9dd1
Mbg357cFczKOJ+VgRpQrgNSk4Q5+lS//ZGxg0ukhtHntgTOs/HF6lBU0qCQ0umBK
/rrpXnQwS3fxxsGBKsc2oszI0I71o8LLVxogVhWh9HP8AK86JQXiesWg05RycRZi
byv98X1gBPQGpg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:45 2026 by rpki-client