Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: OXXIVcw91FzjBkpgfrfh3dCeZ5Qh83KlWC+N5mgLyA8=
Subject key identifier: 34:08:CB:05:E4:A1:11:C7:91:EA:62:0E:B8:3A:D9:C5:E6:F8:A3:AE
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 019D28F250421C3164DE8CDC9B6613203716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 10CF
Signing time: Thu 26 Mar 2026 07:01:02 +0000
Manifest this update: Thu 26 Mar 2026 07:01:02 +0000
Manifest next update: Fri 27 Mar 2026 07:01:02 +0000
Files and hashes: 1: _chBVEiIFGC5r20fIYTsPORg6rk.roa (hash: x/qbcI8zbCXOFAC/IalZJH/FotXUoS1HPt4P46/aRNU=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: bTerB2yy2e6Cs981N8Ju9M8jY4yLuOaNAoVd0LcNXFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:50:42:1c:31:64:de:8c:dc:9b:66:13:20:37:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Mar 26 07:01:02 2026 GMT
Not After : Mar 27 07:01:02 2026 GMT
Subject: CN=3408cb05e4a111c791ea620eb83ad9c5e6f8a3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:d4:ce:34:41:0d:b5:5c:0f:d3:e7:82:6b:
93:c7:23:93:e5:d1:58:aa:19:74:97:e7:c3:c5:84:
d7:3e:17:8f:08:42:49:c9:43:76:46:f9:a6:3b:fe:
5b:7e:07:44:be:ab:e7:95:d7:4e:bc:ed:a6:85:c3:
9c:a4:b8:57:b9:f7:59:58:79:37:c5:90:f3:5f:11:
ed:20:8c:d0:69:c9:f0:f7:9b:a5:5b:20:bc:e3:0f:
24:fa:f9:45:b9:08:03:ec:5e:1a:07:76:4a:50:da:
42:33:f9:c0:93:6a:ae:19:42:ad:b6:2f:cf:27:1d:
cf:57:b1:65:f8:96:2d:b1:e5:dc:5a:02:91:95:3b:
ae:26:5f:9a:9a:86:88:af:74:01:14:a3:03:42:b6:
03:40:a3:d4:3d:ab:94:a9:32:b8:20:a6:5c:01:84:
bf:f5:cf:6b:b9:8c:3d:ed:d5:e2:31:ed:c7:b9:0b:
24:b0:2c:e7:50:e4:43:e8:ce:7f:eb:8a:42:b8:19:
cc:47:c4:c4:f1:c4:7d:29:da:96:da:02:e5:be:86:
ba:88:6a:ae:af:4a:41:77:47:ad:ef:d0:d4:2f:c2:
64:45:9f:fa:40:1f:3e:66:da:a6:75:03:f7:87:e0:
e9:f1:e9:92:01:1e:39:76:e8:94:79:7c:11:bc:b6:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:08:CB:05:E4:A1:11:C7:91:EA:62:0E:B8:3A:D9:C5:E6:F8:A3:AE
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fc:e8:d0:8f:0b:60:d8:08:58:c3:b3:8a:ac:c9:8c:27:e3:
63:bc:a3:a6:12:28:ce:87:b9:50:9b:59:e7:83:2c:58:3a:e8:
00:ce:5d:03:a4:f1:86:c5:f9:14:a2:83:ad:1c:fe:f6:21:d5:
7d:17:28:0c:0b:87:09:99:4a:08:00:21:63:84:aa:f3:a4:a1:
77:b1:b0:84:1a:72:5e:78:df:30:51:a0:d7:75:f3:6e:4b:5e:
8b:b1:a5:98:68:db:12:7a:ae:e8:58:5e:b9:0c:b0:d8:e3:cc:
36:06:f8:13:52:16:c9:62:17:07:9a:31:96:b4:a9:d1:2f:4d:
4c:0d:dc:32:67:12:77:60:c1:12:61:dc:30:ab:51:96:98:11:
c7:ce:27:9d:cd:b4:ee:61:16:a8:d8:a2:0c:6d:63:3e:f2:25:
5f:0d:67:8c:82:fa:73:e7:26:a0:07:5d:27:0e:1d:b2:c3:47:
ff:2b:01:f6:bb:af:1b:63:98:e9:ac:b6:1b:d8:9e:da:cf:57:
4e:31:76:ce:6c:20:bc:fc:13:40:88:62:11:25:98:71:4d:12:
3b:ee:e0:9a:3d:7b:75:d4:5d:79:eb:a6:59:f6:cc:08:ab:45:
00:4b:2d:1e:2f:28:4a:b1:14:b9:6c:6c:e3:2f:95:c1:63:25:
17:4b:63:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8lBCHDFk3ozcm2YTIDcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlODZkY2RlNzExZDU0NTM1Mzk3NGIzMzk1NTEwOGQ5ZGY0
MGI2ZTkwHhcNMjYwMzI2MDcwMTAyWhcNMjYwMzI3MDcwMTAyWjAzMTEwLwYDVQQD
EygzNDA4Y2IwNWU0YTExMWM3OTFlYTYyMGViODNhZDljNWU2ZjhhM2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthvUzjRBDbVcD9PngmuTxyOT5dFY
qhl0l+fDxYTXPhePCEJJyUN2RvmmO/5bfgdEvqvnlddOvO2mhcOcpLhXufdZWHk3
xZDzXxHtIIzQacnw95ulWyC84w8k+vlFuQgD7F4aB3ZKUNpCM/nAk2quGUKtti/P
Jx3PV7Fl+JYtseXcWgKRlTuuJl+amoaIr3QBFKMDQrYDQKPUPauUqTK4IKZcAYS/
9c9ruYw97dXiMe3HuQsksCznUORD6M5/64pCuBnMR8TE8cR9KdqW2gLlvoa6iGqu
r0pBd0et79DUL8JkRZ/6QB8+ZtqmdQP3h+Dp8emSAR45duiUeXwRvLZY/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQIywXkoRHHkepiDrg62cXm+KOuMB8GA1UdIwQY
MBaAFH6G3N5xHVRTU5dLM5VRCNnfQLbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82M2U0MTMtMzVjYS00OWUwLTgyODUt
MzVmMWE5MDg4YjQyLzEvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82M2U0MTMtMzVjYS00OWUwLTgyODUtMzVmMWE5MDg4YjQy
LzEvZm9iYzNuRWRWRk5UbDBzemxWRUkyZDlBdHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPzo0I8L
YNgIWMOziqzJjCfjY7yjphIozoe5UJtZ54MsWDroAM5dA6TxhsX5FKKDrRz+9iHV
fRcoDAuHCZlKCAAhY4Sq86Shd7GwhBpyXnjfMFGg13Xzbktei7GlmGjbEnqu6Fhe
uQyw2OPMNgb4E1IWyWIXB5oxlrSp0S9NTA3cMmcSd2DBEmHcMKtRlpgRx84nnc20
7mEWqNiiDG1jPvIlXw1njIL6c+cmoAddJw4dssNH/ysB9ruvG2OY6ay2G9ie2s9X
TjF2zmwgvPwTQIhiESWYcU0SO+7gmj17ddRdeeumWfbMCKtFAEstHi8oSrEUuWxs
4y+VwWMlF0tjMg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:12 2026 by rpki-client