Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File: _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier: TNt6FEb5UaoBryM21kG8IvHUSvK3WJ2AB0CcL8fWEcw=
Subject key identifier: CF:12:9E:80:3F:0D:5A:1F:5F:58:2E:59:47:AB:D7:C3:F0:D0:BB:E1
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial: 019D28841D19CA828B0C7A76D022F8B1B565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number: 0921
Signing time: Thu 26 Mar 2026 05:00:39 +0000
Manifest this update: Thu 26 Mar 2026 05:00:39 +0000
Manifest next update: Fri 27 Mar 2026 05:00:39 +0000
Files and hashes: 1: Dr3OacsNKO2WTdv7Q8llg_soZvA.roa (hash: KbhoDJ9dQsBvDj3nKAtLQGpRyI1OX7thvD73xgl+H2g=)
2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: /ho/x0MUX+07pcQRqN+9srMmboH3h2fQydreWobPs7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1d:19:ca:82:8b:0c:7a:76:d0:22:f8:b1:b5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Validity
Not Before: Mar 26 05:00:39 2026 GMT
Not After : Mar 27 05:00:39 2026 GMT
Subject: CN=cf129e803f0d5a1f5f582e5947abd7c3f0d0bbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:82:71:a5:ec:0c:c7:91:fe:c2:03:0d:1a:
63:55:4c:45:d4:f7:fb:9c:4c:06:a8:01:f2:a6:5c:
9e:89:23:0b:b6:d7:a3:83:9d:b6:23:05:7f:a7:5f:
bc:13:d5:1e:e1:a8:80:64:14:8f:c3:57:33:fd:e5:
52:7f:62:f6:a6:c9:65:66:78:f1:a6:b0:27:cf:72:
5f:a1:3a:e3:86:b7:26:4c:72:bc:5b:c5:76:c3:e6:
34:a3:69:ad:e6:84:e9:31:a4:d5:9c:a1:27:6d:02:
88:dd:1a:eb:28:6e:41:3c:24:c8:ee:2e:27:3e:64:
60:a4:07:a7:68:b9:62:29:ae:8f:61:0d:11:1e:21:
10:bc:c9:11:16:87:ad:70:b2:32:8a:56:d2:39:b7:
dd:1c:1c:38:98:ec:7c:c7:1b:e1:1a:fc:86:e4:91:
bc:50:af:30:5b:19:a3:18:30:98:d9:88:2a:c0:a3:
91:28:cf:f0:41:8c:4b:5b:fa:dd:d7:1d:cb:0f:5f:
cf:28:62:67:c2:28:9c:00:68:e4:a3:4b:fa:2d:15:
57:7d:54:f5:50:d5:be:6e:7c:2d:7e:35:1e:69:45:
25:69:06:45:9f:dd:96:3d:80:3d:a1:92:34:79:9c:
26:13:cc:d8:ca:c0:b8:80:84:f0:97:8c:ad:0d:8f:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:12:9E:80:3F:0D:5A:1F:5F:58:2E:59:47:AB:D7:C3:F0:D0:BB:E1
X509v3 Authority Key Identifier:
keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e3:ef:88:fc:bc:56:51:ce:c5:55:02:e1:36:d6:c0:38:ad:
91:70:ab:29:15:d8:57:00:92:da:98:b2:61:d3:7d:a9:47:5a:
cf:cd:3a:39:60:7f:a7:a0:37:f9:be:69:ef:e8:14:96:c4:c0:
75:0a:44:e1:73:6e:97:a1:bc:68:ae:e2:6d:ce:7a:69:ce:a2:
86:a7:a9:dd:b4:62:18:15:ad:84:03:27:13:a8:6f:74:be:c0:
89:b0:5c:5f:a1:db:d1:70:74:97:2d:3b:de:48:10:ed:e4:42:
48:e1:c2:07:55:17:e4:f1:b9:a4:c6:1b:b8:c6:6d:55:4b:fc:
27:6e:a6:cc:ca:aa:9d:9f:3e:5c:97:1c:df:21:66:58:8b:bc:
50:67:fc:9c:50:1b:6e:41:32:7a:15:d1:eb:2f:1f:ad:d5:2a:
ff:6a:96:8d:31:58:b1:7e:1d:90:17:f9:91:f5:58:db:ae:ba:
30:8d:f7:fb:e2:35:cf:6b:7c:d3:18:a5:9a:cf:9b:ec:bc:82:
cb:40:5a:51:bc:12:c7:a9:90:a9:d8:af:6b:01:2b:9f:12:ce:
f3:27:c1:71:a9:49:2e:57:ee:2e:1c:2f:79:3c:d9:15:17:50:
29:62:71:bb:03:c9:38:f5:8a:3a:6b:8a:7f:d7:d6:60:e4:21:
e5:92:dd:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohB0ZyoKLDHp20CL4sbVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZWZmOTJmYzlmZTUzNTQ3YjdlM2JlMWY4MzYwODgwOWM0
NTY2YzkwHhcNMjYwMzI2MDUwMDM5WhcNMjYwMzI3MDUwMDM5WjAzMTEwLwYDVQQD
EyhjZjEyOWU4MDNmMGQ1YTFmNWY1ODJlNTk0N2FiZDdjM2YwZDBiYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgCCcaXsDMeR/sIDDRpjVUxF1Pf7
nEwGqAHyplyeiSMLttejg522IwV/p1+8E9Ue4aiAZBSPw1cz/eVSf2L2psllZnjx
prAnz3JfoTrjhrcmTHK8W8V2w+Y0o2mt5oTpMaTVnKEnbQKI3RrrKG5BPCTI7i4n
PmRgpAenaLliKa6PYQ0RHiEQvMkRFoetcLIyilbSObfdHBw4mOx8xxvhGvyG5JG8
UK8wWxmjGDCY2YgqwKORKM/wQYxLW/rd1x3LD1/PKGJnwiicAGjko0v6LRVXfVT1
UNW+bnwtfjUeaUUlaQZFn92WPYA9oZI0eZwmE8zYysC4gITwl4ytDY/MUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8SnoA/DVofX1guWUer18Pw0LvhMB8GA1UdIwQY
MBaAFP7v+S/J/lNUe3474fg2CICcRWbJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kODc3NmItMjg0YS00Zjc4LWE3MWMt
NDU3NDA2MmFlY2I1LzEvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9kODc3NmItMjg0YS00Zjc4LWE3MWMtNDU3NDA2MmFlY2I1
LzEvX3VfNUw4bi1VMVI3Zmp2aC1EWUlnSnhGWnNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsuPviPy8
VlHOxVUC4TbWwDitkXCrKRXYVwCS2piyYdN9qUdaz806OWB/p6A3+b5p7+gUlsTA
dQpE4XNul6G8aK7ibc56ac6ihqep3bRiGBWthAMnE6hvdL7AibBcX6Hb0XB0ly07
3kgQ7eRCSOHCB1UX5PG5pMYbuMZtVUv8J26mzMqqnZ8+XJcc3yFmWIu8UGf8nFAb
bkEyehXR6y8frdUq/2qWjTFYsX4dkBf5kfVY2666MI33++I1z2t80xilms+b7LyC
y0BaUbwSx6mQqdivawErnxLO8yfBcalJLlfuLhwveTzZFRdQKWJxuwPJOPWKOmuK
f9fWYOQh5ZLd3w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:46 2026 by rpki-client