Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: Jw/6euy3ZVG0R18h34hCKWmYyq/DtT1Emk8qxihg8bI=
Subject key identifier: C5:84:0D:D8:C3:80:32:B5:D0:FF:13:9D:D5:F8:0B:3E:81:B1:9B:79
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 019D2AE0626529F7C16F6BE519BAEDD34F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0C81
Signing time: Thu 26 Mar 2026 16:00:41 +0000
Manifest this update: Thu 26 Mar 2026 16:00:41 +0000
Manifest next update: Fri 27 Mar 2026 16:00:41 +0000
Files and hashes: 1: 1-WOlFKgJ5fyuJ0mK_WXzxZSjJZ8.roa (hash: mA5SaPX5hOKD8NX3Hv1/uNqyTzg2PYZjKEyCT2Stnms=)
2: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: meLcevthv50EzqN+5dMZScy+0Lesy/IL6XXWjkejliY=)
3: qCla3aYy8lmkCd9GDBwAGdRopPY.roa (hash: yq0d/UWqcKfbvqZVTTAHu+E8rSvKS7DJ77n7pL88Lw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:62:65:29:f7:c1:6f:6b:e5:19:ba:ed:d3:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Mar 26 16:00:41 2026 GMT
Not After : Mar 27 16:00:41 2026 GMT
Subject: CN=c5840dd8c38032b5d0ff139dd5f80b3e81b19b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:c7:f8:ab:c0:04:99:8a:a6:e7:8d:8a:ca:
6e:22:0e:c3:91:bb:4d:b8:80:2a:e6:09:01:2d:d8:
73:22:64:15:9d:df:90:87:9d:80:5c:e6:6b:d6:bd:
39:7d:c5:e1:ae:1b:11:90:b0:83:30:0e:47:8c:40:
9a:22:86:4d:69:66:6b:b1:31:f2:34:63:14:fd:fb:
09:f4:a6:96:13:a9:67:64:8a:b3:2e:66:30:91:44:
ff:20:87:a4:97:6f:8b:5d:87:4a:1b:d5:0c:12:c2:
33:ae:fe:83:e4:4e:7f:48:64:b7:ef:6f:30:a9:07:
e7:83:65:83:71:bf:fa:8f:2b:1e:84:70:73:a8:cc:
49:3e:53:80:48:b1:3f:39:03:f2:18:63:3d:66:d6:
62:a2:77:a0:6f:f2:f6:ec:23:62:f6:5d:30:c0:5f:
69:b8:db:34:94:d7:06:2c:2d:8e:f3:e3:41:f9:ef:
6b:60:60:20:b7:8d:5c:4f:23:f5:ac:c5:29:0c:c7:
92:61:e9:d5:ae:9a:9a:aa:7c:23:e0:74:1b:64:b9:
ad:cb:9d:f8:5f:4d:35:4e:93:06:0a:a7:02:28:54:
3d:98:32:c3:03:87:5b:2e:e1:11:a7:d2:d3:3b:2f:
9e:57:56:f8:ca:a1:56:cc:26:a6:49:75:11:8e:4d:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:84:0D:D8:C3:80:32:B5:D0:FF:13:9D:D5:F8:0B:3E:81:B1:9B:79
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:43:63:ec:0c:1e:f4:18:a5:81:ea:bd:9a:88:4c:85:12:ab:
80:08:24:3d:d4:2f:54:b7:d3:bd:5d:63:2e:f4:ed:23:23:ba:
78:a9:f2:de:f0:80:8c:f2:21:e8:d3:e7:5d:b7:7b:bf:e9:ec:
2e:63:f9:66:e2:e9:28:9e:62:fa:1e:3f:7a:d5:86:d6:41:65:
2c:eb:5b:30:0f:15:2a:7a:6a:c0:62:18:19:ee:86:5b:8d:23:
f6:4b:d6:35:6c:8b:3d:3b:50:28:d9:5f:21:8f:96:76:0f:cf:
9f:9a:d5:53:5c:54:46:fd:e6:bf:3c:26:91:82:85:af:fd:8c:
86:78:8b:72:9c:4d:6b:04:78:af:12:f2:ca:23:dd:a0:bd:0c:
b4:42:c1:0e:ff:cd:64:94:5c:32:ce:1e:26:cc:34:e7:72:96:
2b:37:a9:2d:bc:dc:09:6f:e0:58:c0:68:96:f9:b4:76:b9:92:
79:25:85:f4:d4:c1:fe:e3:cf:9d:08:6f:b3:11:a7:04:da:15:
fb:aa:6a:85:9e:3c:5b:18:33:f1:b4:58:3a:f7:d6:d0:46:aa:
37:f8:1c:9c:dd:91:96:5e:ea:47:0e:3b:e9:d6:b1:e9:9b:07:
be:f1:2b:f1:d9:79:2a:18:9c:e6:f6:eb:73:16:94:40:32:97:
33:89:05:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4GJlKffBb2vlGbrt009AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNTM4Y2RjYWY5ZjkyNDY0OTdkYzdhZTQ1ODQ1Mzc5ZmU2
YTcxNzQwHhcNMjYwMzI2MTYwMDQxWhcNMjYwMzI3MTYwMDQxWjAzMTEwLwYDVQQD
EyhjNTg0MGRkOGMzODAzMmI1ZDBmZjEzOWRkNWY4MGIzZTgxYjE5Yjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQzH+KvABJmKpueNispuIg7DkbtN
uIAq5gkBLdhzImQVnd+Qh52AXOZr1r05fcXhrhsRkLCDMA5HjECaIoZNaWZrsTHy
NGMU/fsJ9KaWE6lnZIqzLmYwkUT/IIekl2+LXYdKG9UMEsIzrv6D5E5/SGS3728w
qQfng2WDcb/6jysehHBzqMxJPlOASLE/OQPyGGM9ZtZionegb/L27CNi9l0wwF9p
uNs0lNcGLC2O8+NB+e9rYGAgt41cTyP1rMUpDMeSYenVrpqaqnwj4HQbZLmty534
X001TpMGCqcCKFQ9mDLDA4dbLuERp9LTOy+eV1b4yqFWzCamSXURjk0LjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWEDdjDgDK10P8TndX4Cz6BsZt5MB8GA1UdIwQY
MBaAFOxTjNyvn5JGSX3HrkWEU3n+anF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEt
YzA2YzYyYWY5ZGE1LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEtYzA2YzYyYWY5ZGE1
LzEvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZENj7Awe
9Bilgeq9mohMhRKrgAgkPdQvVLfTvV1jLvTtIyO6eKny3vCAjPIh6NPnXbd7v+ns
LmP5ZuLpKJ5i+h4/etWG1kFlLOtbMA8VKnpqwGIYGe6GW40j9kvWNWyLPTtQKNlf
IY+Wdg/Pn5rVU1xURv3mvzwmkYKFr/2MhniLcpxNawR4rxLyyiPdoL0MtELBDv/N
ZJRcMs4eJsw053KWKzepLbzcCW/gWMBolvm0drmSeSWF9NTB/uPPnQhvsxGnBNoV
+6pqhZ48Wxgz8bRYOvfW0EaqN/gcnN2Rll7qRw476dax6ZsHvvEr8dl5Khic5vbr
cxaUQDKXM4kFjw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:45 2026 by rpki-client