Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json)
Hash identifier: 82jCLFKITb4Ctwe8aOqWG5psPGoq2eeymsZKm7RArUM=
Subject key identifier: 03:6A:53:55:3C:DA:CF:CD:1F:A5:C0:35:41:06:CD:E5:58:59:BA:1F
Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362
Certificate serial: 019D2771F14B986307BA0A6B712A3FFA1F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
Manifest number: 0131
Signing time: Thu 26 Mar 2026 00:01:11 +0000
Manifest this update: Thu 26 Mar 2026 00:01:11 +0000
Manifest next update: Fri 27 Mar 2026 00:01:11 +0000
Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: 7Ohz8UtzksqFltplk8T2SfqQRN0cvr5JDQ+sHzXTDG4=)
2: Jv84iN2B8ANANDflC9HEXw5LA8Y.roa (hash: qNF0F5ELDvVzv6IS3eSh9XZM4TiIIZIYRSv7YJ85pZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f1:4b:98:63:07:ba:0a:6b:71:2a:3f:fa:1f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362
Validity
Not Before: Mar 26 00:01:11 2026 GMT
Not After : Mar 27 00:01:11 2026 GMT
Subject: CN=036a53553cdacfcd1fa5c0354106cde55859ba1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:68:09:ee:62:e8:b0:47:91:35:5b:61:84:
6a:d7:41:2f:a3:af:c9:ed:46:e4:60:1e:c8:90:6e:
a4:c2:a8:36:4d:fa:6f:27:6d:06:eb:75:5b:2c:9c:
40:22:49:f0:12:a3:36:73:93:ab:7d:0d:ea:e2:70:
59:1e:a4:da:46:11:57:fc:63:93:ce:d2:3a:28:f7:
f5:cc:6b:2d:2d:04:b2:37:4a:05:68:1e:77:c9:65:
1f:f1:a5:22:34:e6:5a:4b:0e:ff:be:d0:3f:dd:31:
18:78:ae:60:9b:f2:6b:ae:6e:8b:f7:d5:d5:41:9d:
f4:da:98:ab:69:fc:9f:92:c2:ef:37:44:5e:59:7f:
c9:26:01:75:0a:4d:cc:8c:e4:0c:d6:31:d4:de:72:
85:b2:cb:d3:41:78:26:81:ee:e9:cd:d1:01:e6:a4:
1f:f7:2f:a1:cc:4c:a1:ad:13:59:c6:ae:52:db:05:
2c:9b:db:8c:f0:e3:69:2b:9d:d1:59:41:5b:41:bb:
52:f3:d8:75:24:dc:d1:95:b8:77:98:9c:4a:18:4a:
76:dd:76:af:3e:b4:40:ce:c9:61:36:2f:ca:ee:6f:
54:7f:b9:94:9c:a1:d4:3f:5f:a5:70:dc:ab:b8:85:
c1:33:c7:e7:7a:e5:f6:30:81:9e:dc:b6:87:6e:61:
89:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:53:55:3C:DA:CF:CD:1F:A5:C0:35:41:06:CD:E5:58:59:BA:1F
X509v3 Authority Key Identifier:
keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4f:8d:0a:8e:d9:37:df:51:0e:0f:02:80:19:cf:06:8a:b6:
1d:7b:d6:01:57:80:4e:4a:a4:9e:1b:d1:66:2e:95:5d:c3:f3:
45:2a:5e:4b:a5:44:22:53:32:88:68:9b:51:4d:86:14:99:6f:
55:72:d7:8f:e9:27:5a:18:d6:40:02:48:b7:33:52:61:29:53:
ac:70:53:3f:29:3d:37:ce:9f:7f:21:60:45:b5:db:3f:a0:5b:
a2:f5:65:4e:b6:54:1c:a7:04:c5:41:31:35:2d:53:55:d8:16:
6b:64:ba:68:2a:e0:01:da:9d:77:2e:06:8d:7a:6f:70:c3:b5:
69:80:5c:10:89:b2:c2:2d:42:72:1b:e4:98:16:c1:ef:03:b4:
52:db:8c:25:57:f5:aa:fc:1a:2e:e4:74:b5:b5:bb:ac:e8:97:
55:6d:82:64:98:65:c0:3d:9a:fe:0f:fb:3e:1b:27:9f:f2:92:
30:0a:9f:a3:1c:9a:f6:f1:08:e4:c7:3b:ac:02:16:be:92:ac:
ca:8a:22:69:c1:42:45:9a:7d:01:88:f3:b1:24:0f:bf:fd:24:
d1:47:8c:5c:11:bf:bc:f5:ea:cb:df:b7:ee:01:12:33:6f:05:
bd:1a:19:0d:94:86:3f:cc:42:d6:cc:92:55:b8:69:3c:5b:66:
c3:15:05:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncfFLmGMHugprcSo/+h86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYjdjZGIwNTI4MmIwODliNDc2NzU5ZjY5ZWQ0YTQzNmI0
NTYzNjIwHhcNMjYwMzI2MDAwMTExWhcNMjYwMzI3MDAwMTExWjAzMTEwLwYDVQQD
EygwMzZhNTM1NTNjZGFjZmNkMWZhNWMwMzU0MTA2Y2RlNTU4NTliYTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUJoCe5i6LBHkTVbYYRq10Evo6/J
7UbkYB7IkG6kwqg2TfpvJ20G63VbLJxAIknwEqM2c5OrfQ3q4nBZHqTaRhFX/GOT
ztI6KPf1zGstLQSyN0oFaB53yWUf8aUiNOZaSw7/vtA/3TEYeK5gm/Jrrm6L99XV
QZ302pirafyfksLvN0ReWX/JJgF1Ck3MjOQM1jHU3nKFssvTQXgmge7pzdEB5qQf
9y+hzEyhrRNZxq5S2wUsm9uM8ONpK53RWUFbQbtS89h1JNzRlbh3mJxKGEp23Xav
PrRAzslhNi/K7m9Uf7mUnKHUP1+lcNyruIXBM8fneuX2MIGe3LaHbmGJiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANqU1U82s/NH6XANUEGzeVYWbofMB8GA1UdIwQY
MBaAFA+3zbBSgrCJtHZ1n2ntSkNrRWNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzkt
MDE4MzYwY2MwYmE5LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzktMDE4MzYwY2MwYmE5
LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0+NCo7Z
N99RDg8CgBnPBoq2HXvWAVeATkqknhvRZi6VXcPzRSpeS6VEIlMyiGibUU2GFJlv
VXLXj+knWhjWQAJItzNSYSlTrHBTPyk9N86ffyFgRbXbP6BbovVlTrZUHKcExUEx
NS1TVdgWa2S6aCrgAdqddy4GjXpvcMO1aYBcEImywi1CchvkmBbB7wO0UtuMJVf1
qvwaLuR0tbW7rOiXVW2CZJhlwD2a/g/7Phsnn/KSMAqfoxya9vEI5Mc7rAIWvpKs
yooiacFCRZp9AYjzsSQPv/0k0UeMXBG/vPXqy9+37gESM28FvRoZDZSGP8xC1syS
VbhpPFtmwxUF8g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:07 2026 by rpki-client