Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File: fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier: 8CAsPei0sYvY+qgZ6e3Lljr3tjm2oItuw1cFmtXpZYw=
Subject key identifier: 03:3B:C5:B9:C6:54:E3:E9:41:B9:66:85:C7:CF:01:10:F3:4A:4F:BE
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer: /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial: 019D29CE874C4748B843CC13D44D787D8A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number: 18B2
Signing time: Thu 26 Mar 2026 11:01:34 +0000
Manifest this update: Thu 26 Mar 2026 11:01:34 +0000
Manifest next update: Fri 27 Mar 2026 11:01:34 +0000
Files and hashes: 1: c6SA4ELuvQVyR9kqQbJTsDZRqHQ.roa (hash: ezdtKJHH/isz/wjoYibJVODc5GKSAIgaQT3pgWHH64M=)
2: cA7qo8b7Nox5Eg3ETDI0GHB8bQo.roa (hash: hqs/XnPjGsbh3NQlfcv5MT/Lsf4omMXxdpDxcmlIJnY=)
3: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: 6+1kGndfKlaPPmU3gwTu2ZqwTzpk+Yv6F+oktOMyTt0=)
4: szVJW4BISgtYuolAiNZFY_y2rbI.roa (hash: eLZ4AaO5OF9gS2a9pYE4naluJAqNXcxUNGLK/HZPDBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:87:4c:47:48:b8:43:cc:13:d4:4d:78:7d:8a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Validity
Not Before: Mar 26 11:01:34 2026 GMT
Not After : Mar 27 11:01:34 2026 GMT
Subject: CN=033bc5b9c654e3e941b96685c7cf0110f34a4fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:8f:2a:f1:47:1d:56:cf:6b:66:0d:2f:73:
77:6f:1b:aa:70:f0:6a:93:30:11:d2:29:f9:a9:3d:
7d:0f:ff:25:88:fa:fc:6a:d8:b6:85:f7:ac:06:ec:
bf:12:d9:23:1d:58:1c:e8:d5:9c:d6:60:6e:3e:ce:
c2:d7:19:76:64:91:1b:1c:db:b3:d0:a9:37:21:b3:
85:d2:4d:aa:eb:f2:c4:ea:b8:d5:46:56:57:33:88:
9f:ee:c4:a6:46:c1:ea:ee:16:9b:a8:e7:a7:bb:4b:
11:f8:19:c5:51:7e:1f:29:ed:77:b2:e9:2b:d0:99:
c5:7e:16:5b:da:0e:99:21:0e:e7:70:9b:da:a8:84:
4b:43:09:dc:f8:ca:9c:ed:25:39:f8:04:98:42:a6:
e7:1a:ae:ea:fa:5c:60:9d:ed:98:95:5a:2e:e8:cc:
eb:9e:de:a0:d7:d5:6c:28:0d:93:2f:be:61:70:80:
e1:c8:9b:e2:96:00:16:77:1a:45:5c:a0:d4:16:9a:
08:da:1f:f6:68:ca:91:15:3f:c2:c3:d0:c7:b2:55:
58:25:a8:f9:34:12:3b:a7:e2:40:2e:65:a9:69:04:
9e:4c:36:c0:22:66:ad:d0:8d:ea:d5:c5:f2:2f:8c:
1e:db:6e:a3:4d:32:51:6d:80:ea:4f:59:d2:0f:86:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3B:C5:B9:C6:54:E3:E9:41:B9:66:85:C7:CF:01:10:F3:4A:4F:BE
X509v3 Authority Key Identifier:
keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:35:c7:c4:a7:69:ae:bd:8d:53:f5:68:c5:94:7e:bb:fc:3e:
8a:28:61:fa:38:9b:e6:40:a1:7d:97:5a:30:c5:26:90:10:15:
ee:49:52:77:ff:05:c4:df:bf:21:1d:a1:0d:24:db:13:9c:da:
49:d7:59:cc:3c:7b:90:52:07:72:87:ab:02:0d:8e:b5:a2:de:
4c:38:cc:33:eb:3e:cd:9b:fc:db:b9:76:98:3b:c5:35:9a:82:
e4:d5:3a:a5:b8:c0:f4:eb:fb:43:c8:f3:ef:62:a1:66:62:53:
24:37:8e:cd:3e:a0:cf:eb:52:91:6e:dc:a1:6e:bd:f4:32:f4:
7c:ca:2d:f2:76:5a:22:c7:71:6c:2a:fa:f2:36:b0:7e:2f:36:
54:d9:57:9d:7c:84:ef:f1:2a:77:90:34:fa:c5:86:15:4e:9a:
c9:c8:e6:ce:15:fb:97:64:e0:2f:39:7a:4e:66:3f:5d:cb:fa:
35:24:6b:6c:89:16:a4:ff:94:1e:a7:5a:50:3c:79:8c:b2:32:
f7:5c:02:1a:1c:e2:98:bb:2b:ea:66:1d:45:99:ce:74:98:41:
ca:11:ac:bd:f8:de:03:df:8d:a2:8e:d3:3c:f9:19:cd:38:fe:
a7:33:46:3a:88:0b:2b:5b:9e:70:3a:53:37:f9:f9:74:9c:d7:
2a:10:92:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzodMR0i4Q8wT1E14fYqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzY1YTFkY2Y4MjI1ZTdmMTBiZTIwZGRkZTFlMjE2ZTgw
MGI2N2MwHhcNMjYwMzI2MTEwMTM0WhcNMjYwMzI3MTEwMTM0WjAzMTEwLwYDVQQD
EygwMzNiYzViOWM2NTRlM2U5NDFiOTY2ODVjN2NmMDExMGYzNGE0ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/CPKvFHHVbPa2YNL3N3bxuqcPBq
kzAR0in5qT19D/8liPr8ati2hfesBuy/EtkjHVgc6NWc1mBuPs7C1xl2ZJEbHNuz
0Kk3IbOF0k2q6/LE6rjVRlZXM4if7sSmRsHq7habqOenu0sR+BnFUX4fKe13sukr
0JnFfhZb2g6ZIQ7ncJvaqIRLQwnc+Mqc7SU5+ASYQqbnGq7q+lxgne2YlVou6Mzr
nt6g19VsKA2TL75hcIDhyJvilgAWdxpFXKDUFpoI2h/2aMqRFT/Cw9DHslVYJaj5
NBI7p+JALmWpaQSeTDbAImat0I3q1cXyL4we226jTTJRbYDqT1nSD4ZR9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAM7xbnGVOPpQblmhcfPARDzSk++MB8GA1UdIwQY
MBaAFH7GWh3PgiXn8QviDd3h4hboALZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84ZTc3ODUtOTQ1MS00NmZiLWIyNDQt
N2Q5YjgyMzA1MzdlLzEvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84ZTc3ODUtOTQ1MS00NmZiLWIyNDQtN2Q5YjgyMzA1Mzdl
LzEvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjXHxKdp
rr2NU/VoxZR+u/w+iihh+jib5kChfZdaMMUmkBAV7klSd/8FxN+/IR2hDSTbE5za
SddZzDx7kFIHcoerAg2OtaLeTDjMM+s+zZv827l2mDvFNZqC5NU6pbjA9Ov7Q8jz
72KhZmJTJDeOzT6gz+tSkW7coW699DL0fMot8nZaIsdxbCr68jawfi82VNlXnXyE
7/Eqd5A0+sWGFU6aycjmzhX7l2TgLzl6TmY/Xcv6NSRrbIkWpP+UHqdaUDx5jLIy
91wCGhzimLsr6mYdRZnOdJhByhGsvfjeA9+Noo7TPPkZzTj+pzNGOogLK1uecDpT
N/n5dJzXKhCSZQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:36 2026 by rpki-client