Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
File: fciWyziZxbZIjRxGU_ruSyMVHx8.mft (raw, json)
Hash identifier: oKoMfbsKyP14cJCRx2je5m3Q/v45b5G3XCpnVNt2Daw=
Subject key identifier: 9E:2D:4D:DF:13:D2:05:22:FF:20:E2:0E:A7:CB:69:10:F3:F4:7B:F5
Authority key identifier: 7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
Certificate issuer: /CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Certificate serial: 019D2CCF7D442DDEC635C130980BDA48CEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
Manifest number: 1888
Signing time: Fri 27 Mar 2026 01:01:28 +0000
Manifest this update: Fri 27 Mar 2026 01:01:28 +0000
Manifest next update: Sat 28 Mar 2026 01:01:28 +0000
Files and hashes: 1: YKjCiOvrHZHwAoOhLiE4km3LhaQ.roa (hash: XRdYFOkY6v4wv3ww26grBfJ07o8ReOtA69DPcgVZ2KA=)
2: fciWyziZxbZIjRxGU_ruSyMVHx8.crl (hash: NsQPHGZaY9BMktlhIId9x2rG6Ve1xRdmS5JScBYu1vk=)
3: yF060uWUoglc46_9aiek0Wif5nI.roa (hash: cEbgERmtvG6ESk2oyjnDw4pe0X2ApYpPhYt51QTI0uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:cf:7d:44:2d:de:c6:35:c1:30:98:0b:da:48:ce:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Validity
Not Before: Mar 27 01:01:28 2026 GMT
Not After : Mar 28 01:01:28 2026 GMT
Subject: CN=9e2d4ddf13d20522ff20e20ea7cb6910f3f47bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:6e:1c:49:e6:a2:d2:9c:e8:8c:46:e6:59:
37:75:42:53:de:04:aa:b8:f1:4a:15:bd:4f:8b:00:
11:98:e0:a1:6f:6f:59:c1:96:02:c0:98:eb:ec:e3:
66:0b:7d:1d:70:bd:80:b7:6d:86:ca:17:98:01:87:
0d:da:e6:37:c9:d1:18:67:a1:62:f1:7e:42:f7:84:
b8:1b:c3:ab:d1:7f:b0:b9:f2:09:ce:df:58:38:d3:
e7:14:9b:44:5a:fc:ed:b2:f0:4e:04:45:91:d9:05:
b9:cf:e2:22:17:35:ce:33:bd:f8:cb:2d:bc:5b:07:
3d:83:00:a2:9f:db:3b:38:16:cc:6b:70:de:d8:4f:
10:56:04:9a:d2:85:fd:38:85:17:4f:f3:87:e7:52:
d6:a1:dc:82:dd:7e:87:5a:2f:94:a1:49:d8:f1:f0:
8c:df:56:e4:c7:10:7a:84:0f:36:5e:47:86:33:2d:
71:42:b1:99:13:ea:08:05:94:26:3a:b2:df:dc:fc:
45:83:42:d9:f3:e0:88:9f:87:c1:37:c0:2f:b7:f4:
a6:99:77:f9:52:51:ae:c8:08:9a:97:52:a6:ed:10:
bf:16:ae:e1:ff:22:4a:c4:3e:a8:3f:2f:7b:65:ba:
a8:0d:fc:86:73:83:99:bc:4d:bc:5b:2b:2c:a0:56:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2D:4D:DF:13:D2:05:22:FF:20:E2:0E:A7:CB:69:10:F3:F4:7B:F5
X509v3 Authority Key Identifier:
keyid:7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c8:88:42:5f:92:e2:6f:13:c8:71:06:f6:79:db:dd:5b:59:
e0:45:af:cb:05:eb:d7:13:92:93:18:90:53:1b:9b:49:19:67:
3f:ff:0b:29:1e:b5:37:46:85:5a:f7:1a:4a:2e:01:63:da:29:
02:4d:00:1b:f2:cf:d4:2f:c7:33:c2:f3:4a:d0:2b:38:8d:0d:
ae:6d:5e:a1:6e:2c:b5:66:a8:90:ee:88:bf:1a:cf:34:80:28:
ec:5f:ab:ae:62:3e:79:84:30:9f:37:2e:44:5c:b2:37:88:45:
e6:bd:20:e0:4b:7f:b1:65:b9:74:4b:df:be:15:09:44:6c:4c:
d2:11:ee:e0:46:dc:90:63:8d:4a:c3:c2:14:b0:5d:df:a2:79:
5e:0b:94:55:e2:ab:12:00:b4:0a:1d:13:5e:c3:6d:03:6d:1d:
12:ad:ce:72:30:3a:48:5a:ef:35:35:31:ee:55:1d:2f:1a:da:
cb:3d:eb:6e:0e:fb:98:fc:d0:e0:1d:9a:a2:51:9a:b2:e5:28:
48:c3:01:02:5a:54:34:a5:8e:47:7c:2c:d9:c1:72:d7:9b:e4:
26:c1:84:4c:b9:cb:7c:8e:52:f4:d7:08:75:db:17:11:84:67:
17:04:86:d0:c2:0d:9d:a0:a6:f3:7d:53:8e:cf:2c:01:87:e8:
13:7e:f8:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sz31ELd7GNcEwmAvaSM6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYzg5NmNiMzg5OWM1YjY0ODhkMWM0NjUzZmFlZTRiMjMx
NTFmMWYwHhcNMjYwMzI3MDEwMTI4WhcNMjYwMzI4MDEwMTI4WjAzMTEwLwYDVQQD
Eyg5ZTJkNGRkZjEzZDIwNTIyZmYyMGUyMGVhN2NiNjkxMGYzZjQ3YmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IFuHEnmotKc6IxG5lk3dUJT3gSq
uPFKFb1PiwARmOChb29ZwZYCwJjr7ONmC30dcL2At22GyheYAYcN2uY3ydEYZ6Fi
8X5C94S4G8Or0X+wufIJzt9YONPnFJtEWvztsvBOBEWR2QW5z+IiFzXOM734yy28
Wwc9gwCin9s7OBbMa3De2E8QVgSa0oX9OIUXT/OH51LWodyC3X6HWi+UoUnY8fCM
31bkxxB6hA82XkeGMy1xQrGZE+oIBZQmOrLf3PxFg0LZ8+CIn4fBN8Avt/SmmXf5
UlGuyAial1Km7RC/Fq7h/yJKxD6oPy97ZbqoDfyGc4OZvE28WyssoFY7rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4tTd8T0gUi/yDiDqfLaRDz9Hv1MB8GA1UdIwQY
MBaAFH3Ilss4mcW2SI0cRlP67ksjFR8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmNpV3l6aVp4YlpJalJ4R1VfcnVTeU1WSHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iNTkyZGQtYzcxMS00MzAxLTliZTUt
YWVmM2ZjYmI3ODg0LzEvZmNpV3l6aVp4YlpJalJ4R1VfcnVTeU1WSHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iNTkyZGQtYzcxMS00MzAxLTliZTUtYWVmM2ZjYmI3ODg0
LzEvZmNpV3l6aVp4YlpJalJ4R1VfcnVTeU1WSHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmciIQl+S
4m8TyHEG9nnb3VtZ4EWvywXr1xOSkxiQUxubSRlnP/8LKR61N0aFWvcaSi4BY9op
Ak0AG/LP1C/HM8LzStArOI0Nrm1eoW4stWaokO6IvxrPNIAo7F+rrmI+eYQwnzcu
RFyyN4hF5r0g4Et/sWW5dEvfvhUJRGxM0hHu4EbckGONSsPCFLBd36J5XguUVeKr
EgC0Ch0TXsNtA20dEq3OcjA6SFrvNTUx7lUdLxrayz3rbg77mPzQ4B2aolGasuUo
SMMBAlpUNKWOR3ws2cFy15vkJsGETLnLfI5S9NcIddsXEYRnFwSG0MINnaCm831T
js8sAYfoE374zQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:59:19 2026 by rpki-client