Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
File: f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft (raw, json)
Hash identifier: d+ai4iVH8059Ua2IhCDMJ1HCNrTSI2jikMaFShe5acM=
Subject key identifier: E0:7A:3A:42:78:FD:CE:DE:54:71:BC:61:28:80:D5:19:F7:82:5C:8E
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Certificate issuer: /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial: 019D265ED6CF18E9500969D57187E2B21B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:00:42 +0000
Manifest this update: Wed 25 Mar 2026 19:00:42 +0000
Manifest next update: Thu 26 Mar 2026 19:00:42 +0000
Files and hashes: 1: BJI09oTntpyA_R-i8tfSB2MFaSE.roa (hash: BZK3sECoqLCGouNoMBVSC4IiRqublRHBZMNuAsbtmxY=)
2: f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl (hash: GJMYs1lJs2ASXdFXCj5NzvDKSXcSdhs/KEiWV8JFSEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:d6:cf:18:e9:50:09:69:d5:71:87:e2:b2:1b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Validity
Not Before: Mar 25 19:00:42 2026 GMT
Not After : Mar 26 19:00:42 2026 GMT
Subject: CN=e07a3a4278fdcede5471bc612880d519f7825c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:7e:a1:ac:5b:d8:e4:ab:b4:ea:8b:8a:4e:
76:9b:62:f5:bd:2b:30:e3:6f:00:3f:dd:2d:02:06:
98:0f:78:b8:8d:41:77:c7:2e:5c:06:91:34:1c:e6:
b2:67:49:94:ab:21:6d:46:fe:bb:c0:7e:d0:60:14:
ea:59:11:77:3e:b3:39:dd:85:b6:55:d1:55:8c:ad:
8d:8a:e8:ca:c0:c3:f7:8b:ba:83:2e:91:ea:3b:39:
87:15:27:f8:11:1f:5a:6a:e5:8c:78:11:5b:34:92:
0a:5a:16:cf:5b:f3:c3:bf:14:35:44:5e:4b:28:8f:
46:e6:ee:fc:4a:87:cf:c4:c5:81:d7:dc:de:dc:cf:
e6:29:2b:a4:93:cd:59:cb:a1:9b:23:f1:c7:f3:57:
5a:b7:25:b3:a2:23:33:a7:cf:46:c0:9e:78:88:ec:
ea:01:fb:c8:d7:3e:45:ba:fc:ee:db:3a:cf:72:c2:
3c:35:b8:e8:c5:fe:d2:ba:e1:5b:05:57:72:d4:6c:
a1:d2:17:da:12:0c:4e:4c:5d:44:80:60:97:74:cc:
09:86:0d:a2:10:4f:c1:8f:5d:b3:6b:28:fd:29:d5:
0e:fd:4f:3d:22:53:1a:d6:29:bd:e9:46:db:2d:69:
7f:32:c9:f8:6a:72:8b:64:22:2b:8f:e2:13:a5:67:
ba:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7A:3A:42:78:FD:CE:DE:54:71:BC:61:28:80:D5:19:F7:82:5C:8E
X509v3 Authority Key Identifier:
keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:59:1b:fc:cd:1c:6a:c0:01:d2:5e:33:86:f4:36:35:3e:96:
9c:fc:93:aa:c2:e0:db:2d:52:a4:17:20:b8:74:db:18:7d:43:
39:31:e6:f3:49:ec:3d:02:f8:73:d6:89:2c:b9:54:ab:f2:d4:
ed:ce:8e:0d:d3:b6:2b:2b:ab:b3:b8:fc:40:98:b9:51:6b:14:
bb:6b:e5:81:15:81:a2:7b:86:8f:ea:c0:39:bd:09:1a:c4:4a:
bd:69:77:31:7a:4e:06:c6:61:d6:9f:4f:4d:c6:69:1f:86:ee:
be:3c:97:3b:b5:2a:e9:0a:3b:83:66:21:33:c6:e6:6a:29:39:
37:84:14:77:7a:5c:03:90:7b:13:b4:4f:85:7a:91:a8:87:c2:
84:7d:b9:17:70:04:b0:b9:91:44:b1:3c:79:b2:bd:01:79:5a:
b3:16:9f:aa:bf:67:0c:1a:d5:6b:5b:c4:68:74:a9:bd:61:90:
ad:ff:11:ae:95:89:60:4b:f8:f5:15:28:29:f7:99:59:68:32:
99:ca:a6:88:ee:2f:36:57:ae:f3:1b:e6:23:f1:67:cd:38:22:
55:c6:8b:a3:ab:c2:7d:41:89:fe:83:29:90:a6:07:94:13:5a:
68:53:f0:0c:a9:1f:83:a0:1c:e9:7a:2e:27:35:9c:32:70:68:
00:52:eb:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXtbPGOlQCWnVcYfishtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTY4OWRlNGE3Y2U3NjhiZjNhYjVkOWY4NTQ2ZTg1NmNj
YjE5MzYwHhcNMjYwMzI1MTkwMDQyWhcNMjYwMzI2MTkwMDQyWjAzMTEwLwYDVQQD
EyhlMDdhM2E0Mjc4ZmRjZWRlNTQ3MWJjNjEyODgwZDUxOWY3ODI1YzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdh+oaxb2OSrtOqLik52m2L1vSsw
428AP90tAgaYD3i4jUF3xy5cBpE0HOayZ0mUqyFtRv67wH7QYBTqWRF3PrM53YW2
VdFVjK2NiujKwMP3i7qDLpHqOzmHFSf4ER9aauWMeBFbNJIKWhbPW/PDvxQ1RF5L
KI9G5u78SofPxMWB19ze3M/mKSukk81Zy6GbI/HH81datyWzoiMzp89GwJ54iOzq
AfvI1z5Fuvzu2zrPcsI8Nbjoxf7SuuFbBVdy1Gyh0hfaEgxOTF1EgGCXdMwJhg2i
EE/Bj12zayj9KdUO/U89IlMa1im96UbbLWl/Msn4anKLZCIrj+ITpWe6vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOB6OkJ4/c7eVHG8YSiA1Rn3glyOMB8GA1UdIwQY
MBaAFH9Wid5KfOdovzq12fhUboVsyxk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUt
OGI1MzcyNTg0YWNkLzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUtOGI1MzcyNTg0YWNk
LzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlkb/M0c
asAB0l4zhvQ2NT6WnPyTqsLg2y1SpBcguHTbGH1DOTHm80nsPQL4c9aJLLlUq/LU
7c6ODdO2Kyurs7j8QJi5UWsUu2vlgRWBonuGj+rAOb0JGsRKvWl3MXpOBsZh1p9P
TcZpH4buvjyXO7Uq6Qo7g2YhM8bmaik5N4QUd3pcA5B7E7RPhXqRqIfChH25F3AE
sLmRRLE8ebK9AXlasxafqr9nDBrVa1vEaHSpvWGQrf8RrpWJYEv49RUoKfeZWWgy
mcqmiO4vNleu8xvmI/FnzTgiVcaLo6vCfUGJ/oMpkKYHlBNaaFPwDKkfg6Ac6Xou
JzWcMnBoAFLrww==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:39 2026 by rpki-client