Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/776d4e-e057-47a3-9267-4d17d3b34ba3/1/fPhK-JCe-v-fzztwEa3ujgaH2Hc.mft
File: fPhK-JCe-v-fzztwEa3ujgaH2Hc.mft (raw, json)
Hash identifier: X7T527REzEyyiySwoEE6EqTfAlcJAlLrxXf9nAjLkbU=
Subject key identifier: FB:6F:7F:8E:B0:35:7D:4F:24:83:46:29:23:A8:F3:91:0A:AE:A8:20
Authority key identifier: 7C:F8:4A:F8:90:9E:FA:FF:9F:CF:3B:70:11:AD:EE:8E:06:87:D8:77
Certificate issuer: /CN=7cf84af8909efaff9fcf3b7011adee8e0687d877
Certificate serial: 019D341ABDB0B3C76529A39E658F4A9452DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPhK-JCe-v-fzztwEa3ujgaH2Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/776d4e-e057-47a3-9267-4d17d3b34ba3/1/fPhK-JCe-v-fzztwEa3ujgaH2Hc.mft
Manifest number: 8F
Signing time: Sat 28 Mar 2026 11:01:00 +0000
Manifest this update: Sat 28 Mar 2026 11:01:00 +0000
Manifest next update: Sun 29 Mar 2026 11:01:00 +0000
Files and hashes: 1: fPhK-JCe-v-fzztwEa3ujgaH2Hc.crl (hash: EWdypS5uBmLgat1Bt5UApUAhCDuLYTcct36vV6ry5hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/776d4e-e057-47a3-9267-4d17d3b34ba3/1/fPhK-JCe-v-fzztwEa3ujgaH2Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/776d4e-e057-47a3-9267-4d17d3b34ba3/1/fPhK-JCe-v-fzztwEa3ujgaH2Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPhK-JCe-v-fzztwEa3ujgaH2Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:bd:b0:b3:c7:65:29:a3:9e:65:8f:4a:94:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf84af8909efaff9fcf3b7011adee8e0687d877
Validity
Not Before: Mar 28 11:01:00 2026 GMT
Not After : Mar 29 11:01:00 2026 GMT
Subject: CN=fb6f7f8eb0357d4f2483462923a8f3910aaea820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:2b:79:a3:f5:79:85:a4:e9:28:d0:d7:58:
b2:09:6b:a1:e6:b0:a2:b5:77:c4:93:63:6f:36:2e:
81:f5:70:de:33:76:cb:61:e8:38:10:69:51:ba:96:
1c:6e:a6:58:81:91:9a:74:6d:84:35:f4:6f:ac:6e:
5f:6d:ce:94:1c:92:a7:2c:59:d9:27:ae:af:2f:8d:
77:3c:0a:1d:a4:57:9a:5a:32:d0:94:e2:9e:51:93:
dd:7a:e0:8e:bb:9d:57:5d:14:ce:57:7d:00:69:91:
40:f2:52:98:35:dd:12:0a:19:38:f9:f9:6e:e1:32:
1a:c4:b2:76:6b:86:ad:f6:cd:d1:d5:ce:bb:4f:d6:
e1:e4:b1:18:98:8d:17:27:f1:ba:77:6e:02:4e:2d:
40:36:d8:3d:77:4a:c3:37:49:23:44:69:76:ea:54:
bd:e3:94:e0:38:21:3b:6e:fe:75:fc:5a:d6:b1:f2:
26:60:88:ac:0d:d3:4b:88:06:2e:11:22:72:72:a8:
ea:2f:c6:02:3c:a1:27:41:84:6e:4b:d0:3d:27:d0:
eb:95:f5:7a:ca:4b:1a:e7:9b:39:4b:65:73:52:8c:
54:12:31:0b:4f:00:bf:e0:d6:43:c1:85:e8:71:52:
7c:29:0d:5d:5b:84:0f:8c:2c:e5:92:ba:f3:42:6a:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6F:7F:8E:B0:35:7D:4F:24:83:46:29:23:A8:F3:91:0A:AE:A8:20
X509v3 Authority Key Identifier:
keyid:7C:F8:4A:F8:90:9E:FA:FF:9F:CF:3B:70:11:AD:EE:8E:06:87:D8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPhK-JCe-v-fzztwEa3ujgaH2Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/776d4e-e057-47a3-9267-4d17d3b34ba3/1/fPhK-JCe-v-fzztwEa3ujgaH2Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/776d4e-e057-47a3-9267-4d17d3b34ba3/1/fPhK-JCe-v-fzztwEa3ujgaH2Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a7:77:4c:87:0b:5e:60:34:74:78:66:1e:af:af:b3:65:e3:
db:8c:1c:7f:05:03:8f:92:de:1a:1b:c8:37:4c:aa:76:ee:bd:
ee:43:5a:59:f5:6f:c3:93:f8:85:57:82:7e:37:cd:6c:be:0b:
62:94:c6:aa:11:d9:c9:5b:7b:6f:fe:2d:6f:96:a1:20:57:ad:
28:10:65:75:94:5b:a3:0c:48:db:78:c2:ca:c3:86:7b:9c:11:
85:cc:ed:72:9f:22:ed:92:7b:6f:6a:85:0b:1b:0d:04:2a:c3:
ee:03:67:e2:07:ac:9a:22:41:27:40:5a:dd:91:65:db:f3:79:
18:9e:6e:1c:7d:09:c7:a6:60:86:d6:fb:b1:7d:b3:e6:01:cb:
85:26:e9:35:41:bf:c2:72:ca:6d:13:e8:9f:60:be:b2:d2:8a:
6d:88:36:06:b1:50:41:22:bd:29:ab:d8:1f:5a:18:3e:ad:c6:
fb:3f:d0:c8:fd:ef:f5:6d:25:ff:82:a9:55:c1:57:d0:18:fb:
93:91:63:38:6f:2a:8b:0b:03:84:65:1e:26:9c:32:81:35:56:
72:d0:c8:f0:74:fc:84:d3:d1:0a:1a:04:b3:0f:1d:ff:54:a8:
74:f0:86:22:9b:30:fc:a6:d3:60:02:19:8b:39:bb:50:1a:53:
9f:0c:ab:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00Gr2ws8dlKaOeZY9KlFLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZjg0YWY4OTA5ZWZhZmY5ZmNmM2I3MDExYWRlZThlMDY4
N2Q4NzcwHhcNMjYwMzI4MTEwMTAwWhcNMjYwMzI5MTEwMTAwWjAzMTEwLwYDVQQD
EyhmYjZmN2Y4ZWIwMzU3ZDRmMjQ4MzQ2MjkyM2E4ZjM5MTBhYWVhODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yEreaP1eYWk6SjQ11iyCWuh5rCi
tXfEk2NvNi6B9XDeM3bLYeg4EGlRupYcbqZYgZGadG2ENfRvrG5fbc6UHJKnLFnZ
J66vL413PAodpFeaWjLQlOKeUZPdeuCOu51XXRTOV30AaZFA8lKYNd0SChk4+flu
4TIaxLJ2a4at9s3R1c67T9bh5LEYmI0XJ/G6d24CTi1ANtg9d0rDN0kjRGl26lS9
45TgOCE7bv51/FrWsfImYIisDdNLiAYuESJycqjqL8YCPKEnQYRuS9A9J9DrlfV6
yksa55s5S2VzUoxUEjELTwC/4NZDwYXocVJ8KQ1dW4QPjCzlkrrzQmoESwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtvf46wNX1PJINGKSOo85EKrqggMB8GA1UdIwQY
MBaAFHz4SviQnvr/n887cBGt7o4Gh9h3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlBoSy1KQ2Utdi1menp0d0VhM3VqZ2FIMkhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC83NzZkNGUtZTA1Ny00N2EzLTkyNjct
NGQxN2QzYjM0YmEzLzEvZlBoSy1KQ2Utdi1menp0d0VhM3VqZ2FIMkhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC83NzZkNGUtZTA1Ny00N2EzLTkyNjctNGQxN2QzYjM0YmEz
LzEvZlBoSy1KQ2Utdi1menp0d0VhM3VqZ2FIMkhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu6d3TIcL
XmA0dHhmHq+vs2Xj24wcfwUDj5LeGhvIN0yqdu697kNaWfVvw5P4hVeCfjfNbL4L
YpTGqhHZyVt7b/4tb5ahIFetKBBldZRbowxI23jCysOGe5wRhcztcp8i7ZJ7b2qF
CxsNBCrD7gNn4gesmiJBJ0Ba3ZFl2/N5GJ5uHH0Jx6Zghtb7sX2z5gHLhSbpNUG/
wnLKbRPon2C+stKKbYg2BrFQQSK9KavYH1oYPq3G+z/QyP3v9W0l/4KpVcFX0Bj7
k5FjOG8qiwsDhGUeJpwygTVWctDI8HT8hNPRChoEsw8d/1SodPCGIpsw/KbTYAIZ
izm7UBpTnwyr0Q==
-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:55 2026 by rpki-client