Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
File: fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft (raw, json)
Hash identifier: 5AQoqGiTAf891H8htG3KzmOK7BlFV18iblPGOhfBHKQ=
Subject key identifier: C7:52:8E:14:C6:67:1A:66:60:81:9D:1D:37:5F:00:4C:69:66:49:3F
Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
Certificate issuer: /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Certificate serial: 019D2515A8241A8C625AD8A0D78F02C7E4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
Manifest number: AD
Signing time: Wed 25 Mar 2026 13:01:09 +0000
Manifest this update: Wed 25 Mar 2026 13:01:09 +0000
Manifest next update: Thu 26 Mar 2026 13:01:09 +0000
Files and hashes: 1: F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa (hash: O9ss77MomSSt907FsLWzdFo2wbDsc9Vaw/c7NY0bUPI=)
2: Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa (hash: kAeb16gDeMymOsy5vSRtUWw4R89UmFmfcQyy8hoRkQs=)
3: a6ILxs7AfRiz-iaAF-l64QD3g3c.asa (hash: 7o07rC7UvT5It+u+RtYxdmApc9D4ts/fYHhAKB3o4vs=)
4: fl-aO37XXQmTdf9bFQvR4sML3I8.asa (hash: 095zE2TxY8ZX1/zGISHc5yzKNCHD1HSK1z5BPh0SZNU=)
5: fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl (hash: 6pXK4AQEAGnpLZ4smzGQzJt9gvuZW4r5dTK6L3OjyqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:a8:24:1a:8c:62:5a:d8:a0:d7:8f:02:c7:e4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Validity
Not Before: Mar 25 13:01:09 2026 GMT
Not After : Mar 26 13:01:09 2026 GMT
Subject: CN=c7528e14c6671a6660819d1d375f004c6966493f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:4b:1c:a8:51:2c:23:98:53:9e:c9:84:be:
8b:e6:de:fb:73:84:82:66:45:6e:6b:cc:a2:65:b4:
aa:3f:e6:78:4b:21:fa:1b:63:df:8f:61:3a:6b:50:
eb:7c:9b:64:ff:4d:6c:9e:13:05:16:6b:e8:c2:b2:
6b:d9:d0:5a:91:f2:80:2f:67:3c:db:5e:7a:ea:c4:
d8:b9:13:e4:f5:cc:9a:41:66:46:ec:ae:6f:97:a3:
d9:9a:e6:53:93:d3:7a:6f:b8:38:32:62:21:3f:f7:
de:92:7a:4e:bd:41:66:58:15:7f:07:43:76:17:4e:
6d:10:e9:e6:b5:91:96:66:fe:83:02:76:95:8e:eb:
73:51:ba:02:38:64:ef:82:11:32:fd:30:5f:ac:ff:
55:5b:b1:1b:e6:cc:f0:b1:4b:0c:cc:ee:7f:f2:bd:
78:95:2f:2d:30:53:e6:1f:22:b7:2d:6e:57:a4:7b:
97:65:df:96:b3:a6:68:3b:0c:ee:3a:3d:4b:61:3c:
c9:54:d6:d1:63:29:22:43:4c:ff:c1:45:4a:e3:c3:
b0:1d:b7:36:29:bd:f2:7c:79:0a:2e:53:e7:e9:1d:
76:e8:d4:4c:01:9b:9c:aa:9b:2e:42:03:dc:49:19:
cb:f3:be:46:ae:14:df:0b:68:d9:94:8c:7a:49:42:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:52:8E:14:C6:67:1A:66:60:81:9D:1D:37:5F:00:4C:69:66:49:3F
X509v3 Authority Key Identifier:
keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d1:91:d3:45:9e:da:f1:61:fd:2e:d5:0e:76:8b:a1:bd:f9:
db:63:8e:76:c4:8c:04:0f:c6:28:3a:eb:9d:ff:80:51:e2:e2:
15:80:06:04:0f:2e:96:d7:2c:29:69:0a:47:5c:a0:38:e1:36:
7c:90:48:fb:c9:e3:0d:8c:30:c0:c3:b0:3a:3b:c1:1c:62:8f:
eb:09:7b:75:52:71:79:5d:2f:d0:8f:7e:74:fb:9b:b0:84:e9:
43:74:54:72:fc:f6:23:89:e4:59:3a:27:bf:07:ab:2b:0d:79:
ad:a8:1d:23:5f:55:20:54:87:35:23:df:3c:a0:20:81:00:f0:
04:91:f2:3b:b2:d0:99:f3:13:d0:c1:88:94:0e:e3:c4:05:70:
2c:7f:21:84:4d:36:a9:47:8f:51:7b:24:b9:0f:74:3e:72:69:
0c:1f:a1:43:e4:e0:7b:f3:dc:be:a5:a9:d3:25:d3:a9:7f:41:
d3:05:8c:0b:df:12:48:4e:fa:73:de:db:5e:7c:96:15:c3:07:
66:f0:cd:cd:3b:69:03:ef:c0:b0:f9:d9:f5:19:8d:70:86:de:
1a:91:0d:e4:1e:eb:51:04:70:b8:fb:13:2d:87:96:cd:2e:9d:
85:9c:1b:16:6e:2c:ff:7e:5f:04:fa:14:2e:76:51:f7:46:2d:
6e:f9:ff:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lFagkGoxiWtig148Cx+TvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOGUwOTcyNGY0NzJlNzY2ODljNjFkY2E2MGE3YzY0MWYy
YWM4ZjkwHhcNMjYwMzI1MTMwMTA5WhcNMjYwMzI2MTMwMTA5WjAzMTEwLwYDVQQD
EyhjNzUyOGUxNGM2NjcxYTY2NjA4MTlkMWQzNzVmMDA0YzY5NjY0OTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqZLHKhRLCOYU57JhL6L5t77c4SC
ZkVua8yiZbSqP+Z4SyH6G2Pfj2E6a1DrfJtk/01snhMFFmvowrJr2dBakfKAL2c8
21566sTYuRPk9cyaQWZG7K5vl6PZmuZTk9N6b7g4MmIhP/feknpOvUFmWBV/B0N2
F05tEOnmtZGWZv6DAnaVjutzUboCOGTvghEy/TBfrP9VW7Eb5szwsUsMzO5/8r14
lS8tMFPmHyK3LW5XpHuXZd+Ws6ZoOwzuOj1LYTzJVNbRYykiQ0z/wUVK48OwHbc2
Kb3yfHkKLlPn6R126NRMAZucqpsuQgPcSRnL875GrhTfC2jZlIx6SUKccQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdSjhTGZxpmYIGdHTdfAExpZkk/MB8GA1UdIwQY
MBaAFH6OCXJPRy52aJxh3KYKfGQfKsj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kZGMyN2MtNzkzNy00NTYwLWJlMjIt
ZGNiNWZiMzNjMTc4LzEvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kZGMyN2MtNzkzNy00NTYwLWJlMjItZGNiNWZiMzNjMTc4
LzEvZm80SmNrOUhMblpvbkdIY3BncDhaQjhxeVBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutGR00We
2vFh/S7VDnaLob3522OOdsSMBA/GKDrrnf+AUeLiFYAGBA8ultcsKWkKR1ygOOE2
fJBI+8njDYwwwMOwOjvBHGKP6wl7dVJxeV0v0I9+dPubsITpQ3RUcvz2I4nkWTon
vwerKw15ragdI19VIFSHNSPfPKAggQDwBJHyO7LQmfMT0MGIlA7jxAVwLH8hhE02
qUePUXskuQ90PnJpDB+hQ+Tge/PcvqWp0yXTqX9B0wWMC98SSE76c97bXnyWFcMH
ZvDNzTtpA+/AsPnZ9RmNcIbeGpEN5B7rUQRwuPsTLYeWzS6dhZwbFm4s/35fBPoU
LnZR90Ytbvn/FA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:46 2026 by rpki-client