Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: ciBxwRH3Ixs0XbBmKpdQqndLYZakiDvIRa5IezCuT3Q=
Subject key identifier: A5:5F:85:FA:21:16:D3:0E:DA:08:96:09:72:CC:2D:D3:5D:01:F2:DE
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 019D27DFEAD467DCCCCE64E2941F01B7E768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 02:01:19 +0000
Manifest this update: Thu 26 Mar 2026 02:01:19 +0000
Manifest next update: Fri 27 Mar 2026 02:01:19 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: B9ufTMU1HWpou6j+tMstljJeOpIcihsQEiEIq1Ez6eg=)
2: P1yj3gjDhxChJcFO8Skm9pkXt48.roa (hash: xfZq4sva3XVYvdr878z0V/BBEkb+f01RPeig0MyhrEo=)
3: ocI1Tj5xjc77HCxaih4HTT8zJWQ.roa (hash: 7GTm6dNpL+1aKtBHlqS15Lk5zVrRS8hQJ81O+NY5Eh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ea:d4:67:dc:cc:ce:64:e2:94:1f:01:b7:e7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Mar 26 02:01:19 2026 GMT
Not After : Mar 27 02:01:19 2026 GMT
Subject: CN=a55f85fa2116d30eda08960972cc2dd35d01f2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:da:00:48:68:09:6b:4f:56:81:cd:a9:94:
b4:5a:8a:12:ca:cd:ff:87:35:78:dc:c3:19:c7:ca:
08:08:e1:13:a2:35:2d:0a:9b:16:ac:a8:01:f5:d8:
f6:16:dd:c7:5e:34:7f:b1:4a:ef:ca:ad:9e:d8:46:
e3:0e:32:a6:f5:89:4f:0f:1c:b0:20:e3:70:e1:9c:
d5:99:75:28:7d:53:30:ac:db:04:7e:55:91:3e:10:
41:ab:31:c0:e3:0b:65:a6:56:08:6b:48:89:6c:ed:
a8:f9:98:65:22:ff:7d:54:7c:0c:92:0b:a0:51:f4:
21:c9:bb:08:92:64:54:97:b9:b5:b8:df:c3:00:c5:
62:f4:2d:91:61:14:89:53:21:61:96:5c:65:f6:93:
d4:41:42:a8:de:45:cc:a1:d9:d3:75:83:b7:87:1c:
b6:45:ad:8e:4b:6f:99:70:81:59:ca:d2:50:5d:0f:
0f:1d:74:07:2c:2c:ed:21:8b:66:37:1c:99:bd:d0:
5c:8b:9e:fc:b1:2a:28:31:99:da:55:ef:c2:2b:d1:
40:82:f9:76:74:4f:fa:dc:c1:ff:68:bb:55:e5:39:
2e:cb:66:e8:a8:92:25:7d:5e:68:fb:08:8b:99:71:
5e:18:7a:14:a2:b5:76:9b:ca:73:55:22:17:54:92:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5F:85:FA:21:16:D3:0E:DA:08:96:09:72:CC:2D:D3:5D:01:F2:DE
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d0:79:9e:c5:32:28:d0:af:dd:0f:a5:f1:8b:2a:fd:e1:21:
b4:2e:c0:5c:1c:5c:ee:da:7b:6c:d6:a2:b9:f6:6c:8e:2c:d5:
84:91:8f:e2:b8:57:33:21:28:39:22:46:a5:d4:2c:5c:98:d5:
99:f5:de:c2:bd:c8:58:48:43:d4:b4:f0:14:34:4d:53:6c:00:
85:db:fc:da:9e:85:7b:8b:e9:3a:8e:a4:24:14:ba:4d:25:b9:
4b:73:57:8a:5c:9a:e6:74:11:af:38:94:fd:67:66:96:d2:eb:
43:98:26:f1:2c:22:4f:2a:a5:03:94:b2:e3:aa:89:c6:d2:54:
06:dd:16:0f:71:fc:7b:85:96:62:55:f2:d3:fa:a4:f2:80:7e:
1a:4f:25:62:1c:2d:06:d1:ea:18:69:a3:1d:d1:86:1c:63:8d:
57:e0:1e:d6:1c:41:8b:7e:51:4c:23:4e:af:4b:23:e9:78:64:
92:b3:11:3e:8a:15:5c:20:17:91:94:51:d8:0c:e9:d2:cf:b2:
bb:46:40:f6:10:8c:d2:32:06:03:5f:87:0f:06:ed:0f:4c:ca:
23:7b:96:c1:8e:86:58:7a:09:9f:a5:46:85:74:59:3b:03:1b:
e1:13:bc:06:5d:3e:df:21:7b:e6:c1:0b:4a:41:a4:b3:19:b3:
0e:f2:4a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n3+rUZ9zMzmTilB8Bt+doMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDJhZjcxM2UzNmU1MmM3MTg2NmM4YTllYmRhY2YzZDg2
MjliNjgwHhcNMjYwMzI2MDIwMTE5WhcNMjYwMzI3MDIwMTE5WjAzMTEwLwYDVQQD
EyhhNTVmODVmYTIxMTZkMzBlZGEwODk2MDk3MmNjMmRkMzVkMDFmMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCTaAEhoCWtPVoHNqZS0WooSys3/
hzV43MMZx8oICOETojUtCpsWrKgB9dj2Ft3HXjR/sUrvyq2e2EbjDjKm9YlPDxyw
IONw4ZzVmXUofVMwrNsEflWRPhBBqzHA4wtlplYIa0iJbO2o+ZhlIv99VHwMkgug
UfQhybsIkmRUl7m1uN/DAMVi9C2RYRSJUyFhllxl9pPUQUKo3kXModnTdYO3hxy2
Ra2OS2+ZcIFZytJQXQ8PHXQHLCztIYtmNxyZvdBci578sSooMZnaVe/CK9FAgvl2
dE/63MH/aLtV5Tkuy2boqJIlfV5o+wiLmXFeGHoUorV2m8pzVSIXVJKmLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVfhfohFtMO2giWCXLMLdNdAfLeMB8GA1UdIwQY
MBaAFBUCr3E+NuUscYZsip69rPPYYptoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDkt
NWE4MjMwZTc2NDNhLzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDktNWE4MjMwZTc2NDNh
LzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdB5nsUy
KNCv3Q+l8Ysq/eEhtC7AXBxc7tp7bNaiufZsjizVhJGP4rhXMyEoOSJGpdQsXJjV
mfXewr3IWEhD1LTwFDRNU2wAhdv82p6Fe4vpOo6kJBS6TSW5S3NXilya5nQRrziU
/WdmltLrQ5gm8SwiTyqlA5Sy46qJxtJUBt0WD3H8e4WWYlXy0/qk8oB+Gk8lYhwt
BtHqGGmjHdGGHGONV+Ae1hxBi35RTCNOr0sj6XhkkrMRPooVXCAXkZRR2Azp0s+y
u0ZA9hCM0jIGA1+HDwbtD0zKI3uWwY6GWHoJn6VGhXRZOwMb4RO8Bl0+3yF75sEL
SkGksxmzDvJK5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:03:34 2026 by rpki-client