Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
File: FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json)
Hash identifier: BL05/IVJvDblDNWjXEmBNoW6VRsDdtMuPLe5u17wjsw=
Subject key identifier: 40:9F:F5:BD:02:36:DB:95:36:55:28:53:80:FF:45:DF:19:D8:CA:FE
Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
Certificate issuer: /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Certificate serial: 019D27E01159FA734DFEB6E6E36C1ACA0FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
Manifest number: 1797
Signing time: Thu 26 Mar 2026 02:01:28 +0000
Manifest this update: Thu 26 Mar 2026 02:01:28 +0000
Manifest next update: Fri 27 Mar 2026 02:01:28 +0000
Files and hashes: 1: 9XBEdkFqQL4X8XkiTZpFyp4JlA0.roa (hash: st4zcKMZ4W6edf6bOgVfYzaLlJOVCKMK+IcIcZ7zIME=)
2: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: KFEeQlapyRRSpE34Ihk/TI5irDZvjcfxplHU+3azV98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:11:59:fa:73:4d:fe:b6:e6:e3:6c:1a:ca:0f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Validity
Not Before: Mar 26 02:01:28 2026 GMT
Not After : Mar 27 02:01:28 2026 GMT
Subject: CN=409ff5bd0236db953655285380ff45df19d8cafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:48:df:32:b1:19:30:df:5e:97:fa:dd:d9:
e5:bf:8c:c2:89:5c:79:60:0f:ad:19:9a:b1:bc:70:
30:5b:d3:2a:06:f8:07:78:75:a8:a4:25:1f:52:04:
04:bf:28:76:42:2e:0a:ad:1e:39:1b:aa:d9:26:17:
d1:a5:86:78:e1:ef:bf:c5:e6:9e:9f:dc:ee:f8:6e:
57:81:8b:92:8c:00:4e:02:3f:9d:f7:2c:1c:03:07:
81:27:ef:2f:fd:60:2e:67:d5:b3:4d:bd:74:a4:1c:
dd:3e:65:5b:97:cf:38:4e:4e:01:12:4b:48:11:b1:
d0:0a:b0:e6:af:af:97:e5:ac:b4:a2:8f:45:48:3a:
7a:60:be:28:36:8c:b3:79:99:6c:81:50:fe:83:0c:
b4:c4:1c:e0:44:d7:cb:8c:78:ae:9b:12:52:a5:2e:
f6:f6:b5:3e:fa:7d:b0:da:3a:ec:72:83:98:30:1a:
0a:ab:82:99:58:3e:c2:19:69:b2:09:39:3b:dd:a0:
3d:16:3d:86:03:cb:fb:f3:6a:10:72:f1:c2:70:d7:
b1:01:75:24:f9:ce:b9:35:d9:3d:3d:dc:73:28:c8:
d3:62:5b:86:b9:3c:10:e8:96:51:80:0b:c6:59:4e:
1a:65:bc:20:f1:aa:af:a3:98:27:bb:8c:57:bd:52:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9F:F5:BD:02:36:DB:95:36:55:28:53:80:FF:45:DF:19:D8:CA:FE
X509v3 Authority Key Identifier:
keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b9:76:f0:57:4c:1a:90:e3:da:e6:1a:4f:bd:bb:68:06:64:
fe:42:ca:4f:d3:46:42:ce:d4:96:1d:bb:97:49:54:5a:22:d8:
12:55:f9:86:c9:5e:24:a7:ef:8f:e1:5d:46:3b:e7:3c:43:df:
1d:e4:7c:75:dd:88:ff:89:17:69:9a:37:6f:93:1c:d5:ed:bd:
7a:8c:51:f8:1e:7a:a0:0e:79:4c:5d:0d:76:42:3d:23:1f:79:
1b:ed:5f:a5:a7:d2:7d:6e:9d:9e:9a:43:41:53:b0:fc:c9:8d:
06:4e:e9:dd:91:cf:fa:f6:79:a6:f0:b7:2c:8e:01:ed:39:68:
e7:cc:53:fa:dc:ec:1e:9a:dc:f0:cf:f1:3e:42:32:c5:fc:85:
d8:df:f9:65:e6:a6:92:04:64:33:56:9d:a8:e4:73:37:7e:39:
44:5a:c2:c3:57:b2:04:39:f2:98:b0:86:15:13:bb:e7:30:fc:
e6:ba:1d:c6:71:52:fe:d1:09:25:fa:6d:73:ae:b9:df:40:89:
cb:98:ed:c6:45:4c:42:be:a7:ce:67:2d:a0:5a:8e:5e:05:9a:
9f:79:47:c7:4a:ed:32:b3:8d:eb:50:42:20:60:34:39:bc:16:
7f:e1:40:98:ac:d8:c8:ec:55:43:5c:ce:83:7f:51:90:3d:24:
b9:9e:cb:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4BFZ+nNN/rbm42wayg/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NzFmMTU3YzNhNWJkNWNmZjVkMWE0N2Q0MTk2NDhhMjdl
MzVhOWIwHhcNMjYwMzI2MDIwMTI4WhcNMjYwMzI3MDIwMTI4WjAzMTEwLwYDVQQD
Eyg0MDlmZjViZDAyMzZkYjk1MzY1NTI4NTM4MGZmNDVkZjE5ZDhjYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRNI3zKxGTDfXpf63dnlv4zCiVx5
YA+tGZqxvHAwW9MqBvgHeHWopCUfUgQEvyh2Qi4KrR45G6rZJhfRpYZ44e+/xeae
n9zu+G5XgYuSjABOAj+d9ywcAweBJ+8v/WAuZ9WzTb10pBzdPmVbl884Tk4BEktI
EbHQCrDmr6+X5ay0oo9FSDp6YL4oNoyzeZlsgVD+gwy0xBzgRNfLjHiumxJSpS72
9rU++n2w2jrscoOYMBoKq4KZWD7CGWmyCTk73aA9Fj2GA8v782oQcvHCcNexAXUk
+c65Ndk9PdxzKMjTYluGuTwQ6JZRgAvGWU4aZbwg8aqvo5gnu4xXvVI+vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECf9b0CNtuVNlUoU4D/Rd8Z2Mr+MB8GA1UdIwQY
MBaAFBVx8VfDpb1c/10aR9QZZIon41qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhIeFY4T2x2VnpfWFJwSDFCbGtpaWZqV3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80NjI0ZDItNDg0Yi00YmIyLWFhZDIt
MDJkZGNkNmJkYTkyLzEvRlhIeFY4T2x2VnpfWFJwSDFCbGtpaWZqV3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80NjI0ZDItNDg0Yi00YmIyLWFhZDItMDJkZGNkNmJkYTky
LzEvRlhIeFY4T2x2VnpfWFJwSDFCbGtpaWZqV3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbl28FdM
GpDj2uYaT727aAZk/kLKT9NGQs7Ulh27l0lUWiLYElX5hsleJKfvj+FdRjvnPEPf
HeR8dd2I/4kXaZo3b5Mc1e29eoxR+B56oA55TF0NdkI9Ix95G+1fpafSfW6dnppD
QVOw/MmNBk7p3ZHP+vZ5pvC3LI4B7Tlo58xT+tzsHprc8M/xPkIyxfyF2N/5Zeam
kgRkM1adqORzN345RFrCw1eyBDnymLCGFRO75zD85rodxnFS/tEJJfptc66530CJ
y5jtxkVMQr6nzmctoFqOXgWan3lHx0rtMrON61BCIGA0ObwWf+FAmKzYyOxVQ1zO
g39RkD0kuZ7LHQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:00 2026 by rpki-client