Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json)
Hash identifier: wNhS3dG2y6ykfx2nTSgzFw65LyFg6sg36yommpkMAso=
Subject key identifier: A1:15:2F:68:F6:10:09:9A:8A:99:F4:27:16:74:74:BC:19:06:F8:D1
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial: 019D2884B0052F6415EA26CB4F892A7DAF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 05:01:17 +0000
Manifest this update: Thu 26 Mar 2026 05:01:17 +0000
Manifest next update: Fri 27 Mar 2026 05:01:17 +0000
Files and hashes: 1: 6EIMxUGXsynPo9rEQzJnVPG98WI.roa (hash: VbFvYrwcCtKMyImGiFiN8H8Az5Dp2KBcZOXOTXrbmhw=)
2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: PfA6CLrud49Jp1oFe4u2PrnGqPT3gN3+5Vxwku9CnAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b0:05:2f:64:15:ea:26:cb:4f:89:2a:7d:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Validity
Not Before: Mar 26 05:01:17 2026 GMT
Not After : Mar 27 05:01:17 2026 GMT
Subject: CN=a1152f68f610099a8a99f427167474bc1906f8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:4b:56:6e:42:b1:61:ad:58:75:a6:c7:6c:
fd:ac:12:d6:36:65:25:75:2a:31:f2:30:1e:3d:b8:
ff:7d:57:12:9c:ff:d6:e3:c3:38:95:93:a9:9a:18:
73:05:13:31:42:40:45:97:a0:35:56:bd:c2:44:5a:
cb:59:5d:d8:cb:77:73:34:96:3e:2d:e0:08:a8:ef:
64:68:70:3e:13:fb:c5:87:f7:7c:3b:1a:9f:04:65:
b8:73:48:bd:d4:ea:5d:99:ce:b8:0c:ef:c7:4e:40:
f1:69:5a:79:7f:f7:b2:58:68:4a:79:65:a7:8c:ee:
98:08:b8:ae:8a:f6:a5:10:d2:5c:2c:fb:f6:56:a7:
ce:37:92:5c:4f:d6:9f:65:c0:ec:e7:00:fd:cd:31:
30:4b:4d:1c:86:6c:e4:9f:cc:50:84:1f:92:45:c3:
56:ff:c8:8f:49:c0:b9:f6:95:eb:46:47:4e:df:bd:
2f:70:b1:39:13:d6:2e:d5:cf:72:51:14:ac:e0:2f:
3c:96:12:6d:9f:46:86:9a:6a:a9:a4:35:51:19:e8:
af:70:eb:16:09:c2:07:cd:72:82:f0:d3:0a:07:13:
3a:be:39:f7:0f:92:aa:8c:a5:10:08:3e:b4:22:5a:
f3:ab:13:c0:e4:14:15:4b:b9:ce:ea:d4:36:ac:e5:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:15:2F:68:F6:10:09:9A:8A:99:F4:27:16:74:74:BC:19:06:F8:D1
X509v3 Authority Key Identifier:
keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a2:b2:d7:74:b2:b7:2d:f6:3f:db:fb:cb:21:82:32:2b:36:
c2:ed:99:3e:17:48:dc:a0:65:a3:63:3d:30:37:87:a6:90:69:
9b:58:4b:f0:1b:9e:f8:b8:4d:0a:0d:44:65:f7:11:c5:98:dc:
12:16:c9:6f:7d:f8:35:92:e5:3f:18:91:f1:43:cb:1e:b9:34:
a8:4a:10:c3:f3:0c:56:70:6c:56:a6:78:ad:8f:84:95:d0:54:
c5:ea:b4:e1:00:c8:be:a6:06:5b:db:3d:91:62:72:b8:bc:59:
ca:69:f1:43:05:ca:7e:69:67:c4:1b:04:f2:48:5b:72:2b:98:
cf:9f:33:05:2a:b3:68:db:9d:7d:21:88:db:08:fc:3a:a8:d6:
ef:df:e2:55:6d:e6:6e:72:b8:a4:b2:8c:cf:8f:4e:41:1b:46:
40:73:72:68:a4:34:fb:be:b7:34:75:ce:66:24:c6:c6:e8:17:
12:37:24:4c:6b:1a:1c:8e:0c:49:e0:4e:06:7a:a0:99:c8:f4:
ec:64:a6:0a:01:61:af:89:f5:c9:7c:cc:01:01:08:63:2b:57:
a8:b0:e1:4b:ae:b0:9b:7d:95:a3:8b:52:f4:d4:a6:75:ba:a6:
63:9c:0a:f4:5b:84:88:87:7f:48:2a:e5:75:93:57:02:03:4a:
f4:bb:4f:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohLAFL2QV6ibLT4kqfa8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzYxMGQyMTVkMzg5MTM0MmJjMzI4NzJhNTBmNGQwY2Zh
OWRjOWYwHhcNMjYwMzI2MDUwMTE3WhcNMjYwMzI3MDUwMTE3WjAzMTEwLwYDVQQD
EyhhMTE1MmY2OGY2MTAwOTlhOGE5OWY0MjcxNjc0NzRiYzE5MDZmOGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTZLVm5CsWGtWHWmx2z9rBLWNmUl
dSox8jAePbj/fVcSnP/W48M4lZOpmhhzBRMxQkBFl6A1Vr3CRFrLWV3Yy3dzNJY+
LeAIqO9kaHA+E/vFh/d8OxqfBGW4c0i91Opdmc64DO/HTkDxaVp5f/eyWGhKeWWn
jO6YCLiuivalENJcLPv2VqfON5JcT9afZcDs5wD9zTEwS00chmzkn8xQhB+SRcNW
/8iPScC59pXrRkdO370vcLE5E9Yu1c9yURSs4C88lhJtn0aGmmqppDVRGeivcOsW
CcIHzXKC8NMKBxM6vjn3D5KqjKUQCD60IlrzqxPA5BQVS7nO6tQ2rOXt9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEVL2j2EAmaipn0JxZ0dLwZBvjRMB8GA1UdIwQY
MBaAFH7GENIV04kTQrwyhypQ9NDPqdyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yMjkxMWMtY2U1MS00MzhiLTg2Y2Yt
ZTg1NjYxM2QyYjEwLzEvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8yMjkxMWMtY2U1MS00MzhiLTg2Y2YtZTg1NjYxM2QyYjEw
LzEvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6Ky13Sy
ty32P9v7yyGCMis2wu2ZPhdI3KBlo2M9MDeHppBpm1hL8Bue+LhNCg1EZfcRxZjc
EhbJb334NZLlPxiR8UPLHrk0qEoQw/MMVnBsVqZ4rY+EldBUxeq04QDIvqYGW9s9
kWJyuLxZymnxQwXKfmlnxBsE8khbciuYz58zBSqzaNudfSGI2wj8OqjW79/iVW3m
bnK4pLKMz49OQRtGQHNyaKQ0+763NHXOZiTGxugXEjckTGsaHI4MSeBOBnqgmcj0
7GSmCgFhr4n1yXzMAQEIYytXqLDhS66wm32Vo4tS9NSmdbqmY5wK9FuEiId/SCrl
dZNXAgNK9LtPfQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:15 2026 by rpki-client