Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier: vbVwsJnV8+rG90LHaj+vFOIXKHUzPgH11FlfonHWP2c=
Subject key identifier: 6D:8F:86:98:77:77:7F:D1:51:CA:F4:FA:4A:26:CF:5F:54:2C:58:3F
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial: 019D28BB6AF76DFAB7E43CBADE805504128A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number: 0833
Signing time: Thu 26 Mar 2026 06:01:04 +0000
Manifest this update: Thu 26 Mar 2026 06:01:04 +0000
Manifest next update: Fri 27 Mar 2026 06:01:04 +0000
Files and hashes: 1: 7oxbulzY2boNaAxovnlWeEdnhvk.roa (hash: uX0ykLCKBF2SBolWYgvfJLXxPgVn9j68zHuR3GSzDLo=)
2: ImYdN1r7SuqmH4KCOghmFfGT43A.roa (hash: C3iHTDptRbcDAgsUC9QRyc1MkBmaJjNlKZ93XUJOKLw=)
3: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: wN+0XAnFrFAis8qQX1Aipgjq63kyJ3cBab/5EsAHZrs=)
4: mmK4BcjEIajvATTw8BCsnASXF-E.roa (hash: n3pCENYT8mZdK4x4Xmug43GNcd+EWFtMNaK1ThGL1zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:6a:f7:6d:fa:b7:e4:3c:ba:de:80:55:04:12:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Validity
Not Before: Mar 26 06:01:04 2026 GMT
Not After : Mar 27 06:01:04 2026 GMT
Subject: CN=6d8f869877777fd151caf4fa4a26cf5f542c583f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:1b:ed:70:f3:ca:38:65:9b:96:dc:3d:7d:
e1:84:5d:ba:cc:43:07:75:c8:fc:0a:56:f8:8f:6d:
71:ce:3d:05:f1:3f:07:8e:95:56:2f:a0:73:35:23:
9e:b3:e8:5c:7c:d4:0b:28:a4:eb:8f:d5:7b:d5:10:
50:80:4f:20:43:c2:a7:eb:41:bb:1e:b8:e9:48:8b:
30:40:ce:c1:e5:6f:21:09:db:32:b2:66:a5:a4:30:
6d:c1:fb:7b:b0:90:e8:40:5f:1b:80:88:61:30:d4:
3a:b6:27:c8:a0:d1:ed:8d:a0:8c:44:81:19:2e:2e:
ad:19:88:d3:45:b1:e5:71:2b:48:ca:47:a7:a5:8d:
50:c1:52:11:b0:1e:3f:d7:1e:92:ae:0c:a0:60:9e:
47:c0:83:4c:64:b1:3a:cf:7a:72:67:7d:cb:cb:c8:
d0:8b:d2:fd:74:d0:14:f7:63:42:ca:96:99:d6:7f:
6f:df:96:ae:a5:9e:70:4d:cd:e3:42:9e:de:8b:9f:
bc:a5:43:09:ed:74:26:b5:f7:ca:21:6f:7a:a4:08:
52:77:10:f0:b1:65:16:2a:5d:d3:a8:43:bb:93:e2:
25:99:53:4b:35:02:11:db:b8:40:ab:3e:c5:5a:c8:
d5:71:57:6d:d5:c1:ce:39:b1:6d:1f:99:56:24:64:
f3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8F:86:98:77:77:7F:D1:51:CA:F4:FA:4A:26:CF:5F:54:2C:58:3F
X509v3 Authority Key Identifier:
keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f4:53:a5:5b:cf:24:36:74:bf:24:2e:ab:ef:b6:2a:c4:4c:
df:03:c9:a8:a5:28:ed:c1:ab:c0:fe:e1:ae:5a:87:65:be:b0:
09:56:15:a5:b2:f7:9a:c0:bd:0b:39:5a:9b:ff:a1:27:e5:fb:
89:d0:b3:fe:78:92:7c:95:8d:5d:16:c0:d3:90:cc:72:54:00:
1f:78:9e:01:cd:e5:09:c7:15:fa:aa:77:0c:36:0d:9f:5c:97:
64:04:a0:01:3d:5d:68:b2:b3:a1:f4:82:3b:65:41:c5:b1:3b:
e0:c2:8a:82:12:6a:1b:86:2a:b4:b3:cf:b2:5a:a1:04:34:a4:
0c:b8:65:86:a9:5b:77:6b:c3:ac:e9:01:eb:17:61:6f:e5:70:
e1:ff:34:d8:20:85:53:a0:5d:59:53:f5:ab:2c:3a:5c:7d:21:
f5:80:20:1c:2c:7c:22:f3:4d:97:c4:80:a9:a8:b7:18:0d:4d:
8e:b0:15:7d:76:28:40:ae:8c:47:c4:80:e0:5c:71:ea:d4:54:
cf:0a:e2:14:6e:aa:07:f3:da:25:ee:9d:63:84:4c:17:88:e2:
84:d7:1d:c6:02:c0:bc:ae:92:96:96:af:e4:9c:e1:e2:30:70:
69:27:94:0a:af:41:a9:dd:4f:f2:a3:e2:05:a4:c5:f4:f8:55:
b3:29:94:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou2r3bfq35Dy63oBVBBKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMjljMmY1NzIzZjI5ZWM1ZTBlNzkzZTczYWI1NWI4YTFj
ODZiYTkwHhcNMjYwMzI2MDYwMTA0WhcNMjYwMzI3MDYwMTA0WjAzMTEwLwYDVQQD
Eyg2ZDhmODY5ODc3Nzc3ZmQxNTFjYWY0ZmE0YTI2Y2Y1ZjU0MmM1ODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nkb7XDzyjhlm5bcPX3hhF26zEMH
dcj8Clb4j21xzj0F8T8HjpVWL6BzNSOes+hcfNQLKKTrj9V71RBQgE8gQ8Kn60G7
HrjpSIswQM7B5W8hCdsysmalpDBtwft7sJDoQF8bgIhhMNQ6tifIoNHtjaCMRIEZ
Li6tGYjTRbHlcStIykenpY1QwVIRsB4/1x6SrgygYJ5HwINMZLE6z3pyZ33Ly8jQ
i9L9dNAU92NCypaZ1n9v35aupZ5wTc3jQp7ei5+8pUMJ7XQmtffKIW96pAhSdxDw
sWUWKl3TqEO7k+IlmVNLNQIR27hAqz7FWsjVcVdt1cHOObFtH5lWJGTzrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2Phph3d3/RUcr0+komz19ULFg/MB8GA1UdIwQY
MBaAFHwpwvVyPynsXg55PnOrVbihyGupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUt
ZjE5NTIyM2QwM2IzLzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUtZjE5NTIyM2QwM2Iz
LzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPRTpVvP
JDZ0vyQuq++2KsRM3wPJqKUo7cGrwP7hrlqHZb6wCVYVpbL3msC9Czlam/+hJ+X7
idCz/niSfJWNXRbA05DMclQAH3ieAc3lCccV+qp3DDYNn1yXZASgAT1daLKzofSC
O2VBxbE74MKKghJqG4YqtLPPslqhBDSkDLhlhqlbd2vDrOkB6xdhb+Vw4f802CCF
U6BdWVP1qyw6XH0h9YAgHCx8IvNNl8SAqai3GA1NjrAVfXYoQK6MR8SA4Fxx6tRU
zwriFG6qB/PaJe6dY4RMF4jihNcdxgLAvK6Slpav5Jzh4jBwaSeUCq9Bqd1P8qPi
BaTF9PhVsymUMg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:52 2026 by rpki-client