Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.mft
File: fQdOnuMuCxDIMNykdj65zGUkb6o.mft (raw, json)
Hash identifier: VXg+z1q6KOlUD8BqTQ6FVwMIXDlZVlXn8/hudsSeGuc=
Subject key identifier: B5:E9:A5:47:22:C2:59:3D:4D:7B:8A:3D:B5:10:61:0F:52:CC:0F:FD
Authority key identifier: 7D:07:4E:9E:E3:2E:0B:10:C8:30:DC:A4:76:3E:B9:CC:65:24:6F:AA
Certificate issuer: /CN=7d074e9ee32e0b10c830dca4763eb9cc65246faa
Certificate serial: 019D28BB35FADBA88B9B7649A52CE02B874C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQdOnuMuCxDIMNykdj65zGUkb6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.mft
Manifest number: 01A7
Signing time: Thu 26 Mar 2026 06:00:50 +0000
Manifest this update: Thu 26 Mar 2026 06:00:50 +0000
Manifest next update: Fri 27 Mar 2026 06:00:50 +0000
Files and hashes: 1: 1-j7BW7Gsi7Bx1sLah-0rOSnTE50.roa (hash: E7bMvDHjIYbl5UUctsjT4E0zLMA1mzICPsYNWVA/uLc=)
2: fQdOnuMuCxDIMNykdj65zGUkb6o.crl (hash: ivRHyAM8Al8DwFWYgBBCVHPppattje0O5COBYORu6yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQdOnuMuCxDIMNykdj65zGUkb6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:35:fa:db:a8:8b:9b:76:49:a5:2c:e0:2b:87:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d074e9ee32e0b10c830dca4763eb9cc65246faa
Validity
Not Before: Mar 26 06:00:50 2026 GMT
Not After : Mar 27 06:00:50 2026 GMT
Subject: CN=b5e9a54722c2593d4d7b8a3db510610f52cc0ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:f8:5e:47:cd:c5:f0:ed:4b:25:5f:45:6c:
17:e7:30:67:fa:cc:71:5b:75:7e:5d:5c:9d:b9:b9:
27:74:f3:86:31:e6:bb:5e:98:57:46:99:08:2e:1a:
0e:27:99:41:74:1d:b7:f7:91:93:6d:59:a3:2c:db:
30:5c:e8:3a:d0:79:8b:d7:7d:1b:63:b7:47:0f:26:
cd:cb:d8:41:92:90:8b:dd:a6:18:40:b5:62:3e:8f:
ba:c3:c3:5e:4d:34:7d:f0:6f:83:8d:d5:48:6d:f0:
8b:e8:af:84:83:fe:ce:c7:c2:47:57:e0:fe:8b:b4:
99:49:4a:7f:8f:7c:d5:10:de:35:9f:e2:ab:32:85:
fd:17:4d:9c:d9:4a:7d:a1:06:9d:41:b9:34:5e:97:
ab:c6:cf:05:cb:41:47:7e:ee:b1:95:58:46:aa:8b:
e2:1e:4f:4c:06:ee:07:64:6c:f7:6d:16:81:3d:1b:
b5:ef:4e:dc:f1:37:08:5f:71:d2:f5:65:b2:be:28:
97:8c:e5:0a:ca:94:63:17:ae:f6:16:37:1d:98:bd:
b4:96:1e:8f:41:6f:61:34:53:ee:3e:67:62:62:4f:
c3:6e:c8:24:01:a6:81:15:48:26:4e:90:83:b8:1d:
d9:4a:b0:12:49:cc:94:c8:0b:5c:98:2d:46:1a:fe:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E9:A5:47:22:C2:59:3D:4D:7B:8A:3D:B5:10:61:0F:52:CC:0F:FD
X509v3 Authority Key Identifier:
keyid:7D:07:4E:9E:E3:2E:0B:10:C8:30:DC:A4:76:3E:B9:CC:65:24:6F:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQdOnuMuCxDIMNykdj65zGUkb6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3c:cc:60:da:cb:b2:d9:57:1e:2f:0a:d2:89:02:b4:e2:65:
22:40:b4:f0:2d:76:0f:8b:a3:53:a0:3a:58:e9:86:70:80:e1:
59:30:8a:42:91:6d:d4:dd:61:7a:e0:a1:3a:60:2f:da:6c:c9:
fe:a6:4b:22:7a:dd:5e:05:80:ff:e0:44:18:e7:d8:81:df:9f:
d3:9a:97:b7:e2:97:dd:c5:5a:62:9d:95:11:52:a5:4e:39:6f:
2d:83:ea:b6:6c:32:03:96:59:3c:7c:40:0a:e9:88:e7:6c:b7:
c1:3b:76:c0:a5:af:7d:72:92:92:5d:5e:02:35:ab:4a:a4:a2:
c8:e5:46:56:63:13:f3:ed:9f:ae:5c:1a:5b:f0:86:b9:aa:19:
c4:d2:b6:22:21:12:b0:5f:aa:5c:ad:fc:da:4f:38:18:65:f1:
5c:e2:8e:bd:4c:8c:18:ac:02:b9:01:40:96:29:09:ee:f8:cb:
a1:ef:f8:e8:2e:38:85:00:78:76:97:21:7c:f7:05:3c:83:a2:
bb:59:9f:a1:4e:55:1f:7a:62:5a:9e:e5:81:98:28:55:ef:e6:
6d:a7:8a:e5:54:45:8a:df:23:43:f6:56:66:d9:a4:32:d2:52:
6f:59:ab:6a:c3:30:31:4a:33:8c:95:0d:05:0b:ac:2e:fd:97:
4e:f3:b2:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouzX626iLm3ZJpSzgK4dMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDc0ZTllZTMyZTBiMTBjODMwZGNhNDc2M2ViOWNjNjUy
NDZmYWEwHhcNMjYwMzI2MDYwMDUwWhcNMjYwMzI3MDYwMDUwWjAzMTEwLwYDVQQD
EyhiNWU5YTU0NzIyYzI1OTNkNGQ3YjhhM2RiNTEwNjEwZjUyY2MwZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxb4XkfNxfDtSyVfRWwX5zBn+sxx
W3V+XVydubkndPOGMea7XphXRpkILhoOJ5lBdB2395GTbVmjLNswXOg60HmL130b
Y7dHDybNy9hBkpCL3aYYQLViPo+6w8NeTTR98G+DjdVIbfCL6K+Eg/7Ox8JHV+D+
i7SZSUp/j3zVEN41n+KrMoX9F02c2Up9oQadQbk0Xperxs8Fy0FHfu6xlVhGqovi
Hk9MBu4HZGz3bRaBPRu1707c8TcIX3HS9WWyviiXjOUKypRjF672FjcdmL20lh6P
QW9hNFPuPmdiYk/DbsgkAaaBFUgmTpCDuB3ZSrASScyUyAtcmC1GGv5CJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXppUciwlk9TXuKPbUQYQ9SzA/9MB8GA1UdIwQY
MBaAFH0HTp7jLgsQyDDcpHY+ucxlJG+qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFkT251TXVDeERJTU55a2RqNjV6R1VrYjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mOGZkYWUtYTUzZi00M2MxLTk2MTIt
MTIwZmMxOTIzNmM5LzEvZlFkT251TXVDeERJTU55a2RqNjV6R1VrYjZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9mOGZkYWUtYTUzZi00M2MxLTk2MTItMTIwZmMxOTIzNmM5
LzEvZlFkT251TXVDeERJTU55a2RqNjV6R1VrYjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzzMYNrL
stlXHi8K0okCtOJlIkC08C12D4ujU6A6WOmGcIDhWTCKQpFt1N1heuChOmAv2mzJ
/qZLInrdXgWA/+BEGOfYgd+f05qXt+KX3cVaYp2VEVKlTjlvLYPqtmwyA5ZZPHxA
CumI52y3wTt2wKWvfXKSkl1eAjWrSqSiyOVGVmMT8+2frlwaW/CGuaoZxNK2IiES
sF+qXK382k84GGXxXOKOvUyMGKwCuQFAlikJ7vjLoe/46C44hQB4dpchfPcFPIOi
u1mfoU5VH3piWp7lgZgoVe/mbaeK5VRFit8jQ/ZWZtmkMtJSb1mrasMwMUozjJUN
BQusLv2XTvOyYw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:05 2026 by rpki-client