Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier: dW5U8SBNeUkCZP7JOmV2gpHIcd7+8KJwlZ3XtNe9bgE=
Subject key identifier: 7C:64:B9:17:8D:15:6E:5C:EE:52:AE:2B:48:73:5A:EE:EA:5A:2E:FB
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 019D24717A200C0C73425681D5708BABA302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number: 0FAE
Signing time: Wed 25 Mar 2026 10:01:49 +0000
Manifest this update: Wed 25 Mar 2026 10:01:49 +0000
Manifest next update: Thu 26 Mar 2026 10:01:49 +0000
Files and hashes: 1: Q69BGamqP9_WoNnMCdnt1bm0Zuk.asa (hash: vaww5N01JjWWsrnL1Alu05fhe0e30iMVsw9GtNm8F+s=)
2: ecJkAb9L5BLrJG4sRdndteYMNv8.roa (hash: wE2gGvfsffXq2etxDqbfTLucpqrE1NBT6xi3whuXMTQ=)
3: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: NkPlga9QXv9ducrAZlv+yPEwC2ElrNBwXFSRnMU+MRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:71:7a:20:0c:0c:73:42:56:81:d5:70:8b:ab:a3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Mar 25 10:01:49 2026 GMT
Not After : Mar 26 10:01:49 2026 GMT
Subject: CN=7c64b9178d156e5cee52ae2b48735aeeea5a2efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:16:77:03:2a:b0:90:32:bd:b3:00:ae:22:
9a:30:2f:ef:c8:bf:47:f9:d3:3f:26:ec:ad:22:8b:
17:b0:94:9b:46:1e:a4:76:cd:ba:b2:f2:68:2a:af:
b3:96:44:80:27:05:e8:b5:b4:36:cd:a6:bc:95:7b:
0f:ba:73:ea:11:13:32:b3:03:70:f3:27:d6:9f:a7:
b2:26:8e:0a:44:9e:26:a8:bf:9d:83:9e:d3:df:91:
85:27:64:38:9c:ec:49:9f:fb:de:9e:e0:50:9c:f6:
b4:73:80:bd:19:da:c9:72:3f:9c:c8:17:c5:02:3f:
09:ef:09:02:00:07:83:6d:54:9b:a4:51:47:95:0b:
cf:0b:1b:93:c5:8c:7f:15:9c:80:62:0b:8e:af:c5:
ea:bd:93:54:49:af:dc:78:4b:98:14:9d:0b:dc:9d:
76:1a:6a:a2:d5:d7:7f:64:6d:ec:9d:96:54:4c:2e:
3f:68:6d:c5:a3:fa:9a:ae:8f:5c:14:79:1c:73:fd:
cf:a6:f8:ea:c8:b7:16:bf:58:88:1c:92:c8:2d:27:
58:42:a3:30:bb:da:1b:51:0f:e8:ba:fb:21:78:43:
20:11:36:66:73:a8:01:6e:32:1f:46:cc:10:d4:c6:
7e:dc:33:39:e1:6c:29:c1:c6:26:5d:17:13:5d:ad:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:64:B9:17:8D:15:6E:5C:EE:52:AE:2B:48:73:5A:EE:EA:5A:2E:FB
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a1:ae:ff:9f:d3:a6:3a:1f:d2:e9:d0:87:53:87:b2:a6:eb:
09:f0:78:fc:eb:31:cc:c3:d4:3d:f6:59:80:21:e5:7b:95:70:
5d:0d:e3:86:b2:d7:1e:f6:7a:53:ae:bd:15:c1:44:c7:ba:8e:
d2:cf:f7:67:55:bf:26:30:c6:e1:72:49:8a:d5:a8:7b:31:4b:
91:f3:db:a3:ee:3f:51:52:c0:58:3c:6b:78:92:1e:bc:19:d3:
21:08:77:df:50:d4:b2:2b:35:f2:26:4e:0d:2d:21:0c:b7:2f:
83:12:bf:94:fe:af:e7:fc:61:1f:54:c7:45:ba:ce:04:01:a7:
b7:b8:fd:af:e0:45:97:4d:19:8e:e3:40:84:70:e7:b6:02:75:
4e:ff:a1:34:1a:b7:2f:cf:bf:07:5a:65:fc:b2:07:d1:a8:e7:
7c:8c:13:72:46:84:94:3d:50:cb:7d:f8:e1:a4:74:c1:b9:dd:
7d:87:72:33:3d:8e:78:df:ac:12:b6:9c:27:8c:15:c1:8a:5b:
71:4d:70:97:30:48:13:e5:15:ac:79:e4:4a:60:f2:a2:20:8b:
7f:23:f3:b6:fe:c0:d7:5c:e0:6b:b2:05:4b:ce:64:6d:30:f2:
e5:86:c0:28:16:45:07:51:21:72:fd:b6:bb:bb:89:33:33:28:
1c:89:87:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0kcXogDAxzQlaB1XCLq6MCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOTJiNjc0NzUyNzA3NTUxMzZhOGEzY2E4MDJjYTEyYzhh
YzdlNzcwHhcNMjYwMzI1MTAwMTQ5WhcNMjYwMzI2MTAwMTQ5WjAzMTEwLwYDVQQD
Eyg3YzY0YjkxNzhkMTU2ZTVjZWU1MmFlMmI0ODczNWFlZWVhNWEyZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAposWdwMqsJAyvbMAriKaMC/vyL9H
+dM/JuytIosXsJSbRh6kds26svJoKq+zlkSAJwXotbQ2zaa8lXsPunPqERMyswNw
8yfWn6eyJo4KRJ4mqL+dg57T35GFJ2Q4nOxJn/venuBQnPa0c4C9GdrJcj+cyBfF
Aj8J7wkCAAeDbVSbpFFHlQvPCxuTxYx/FZyAYguOr8XqvZNUSa/ceEuYFJ0L3J12
Gmqi1dd/ZG3snZZUTC4/aG3Fo/qaro9cFHkcc/3PpvjqyLcWv1iIHJLILSdYQqMw
u9obUQ/ouvsheEMgETZmc6gBbjIfRswQ1MZ+3DM54WwpwcYmXRcTXa06MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxkuReNFW5c7lKuK0hzWu7qWi77MB8GA1UdIwQY
MBaAFH2StnR1JwdVE2qKPKgCyhLIrH53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlpLMmRIVW5CMVVUYW9vOHFBTEtFc2lzZm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wNWU4MTQtY2FjNC00MWE4LTg3NWUt
NDEwYzY3MWU3NTc3LzEvZlpLMmRIVW5CMVVUYW9vOHFBTEtFc2lzZm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8wNWU4MTQtY2FjNC00MWE4LTg3NWUtNDEwYzY3MWU3NTc3
LzEvZlpLMmRIVW5CMVVUYW9vOHFBTEtFc2lzZm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKGu/5/T
pjof0unQh1OHsqbrCfB4/OsxzMPUPfZZgCHle5VwXQ3jhrLXHvZ6U669FcFEx7qO
0s/3Z1W/JjDG4XJJitWoezFLkfPbo+4/UVLAWDxreJIevBnTIQh331DUsis18iZO
DS0hDLcvgxK/lP6v5/xhH1THRbrOBAGnt7j9r+BFl00ZjuNAhHDntgJ1Tv+hNBq3
L8+/B1pl/LIH0ajnfIwTckaElD1Qy3344aR0wbndfYdyMz2OeN+sEracJ4wVwYpb
cU1wlzBIE+UVrHnkSmDyoiCLfyPztv7A11zga7IFS85kbTDy5YbAKBZFB1Ehcv22
u7uJMzMoHImHVQ==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:49 2026 by rpki-client