Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.mft
File: f76kKjzOSLi-F9qZN51XHnNpCzg.mft (raw, json)
Hash identifier: wH9gBt6dwHijrdxVn9XzSg6N3HoifK1jmIt2oOAWf1M=
Subject key identifier: 4E:C8:7F:5D:82:0C:D2:73:FA:41:59:6B:C3:3A:CD:75:72:BD:14:CB
Authority key identifier: 7F:BE:A4:2A:3C:CE:48:B8:BE:17:DA:99:37:9D:57:1E:73:69:0B:38
Certificate issuer: /CN=7fbea42a3cce48b8be17da99379d571e73690b38
Certificate serial: 01A1DE70CADD8370595F3A911EB0E6A63B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f76kKjzOSLi-F9qZN51XHnNpCzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.mft
Manifest number: 37
Signing time: Sun 15 Nov 2026 09:01:36 +0000
Manifest this update: Sun 15 Nov 2026 09:01:36 +0000
Manifest next update: Mon 16 Nov 2026 09:01:36 +0000
Files and hashes: 1: TgHm2Yr6MieIjlchX0bTfQ7gnKU.roa (hash: vdDuBpHduQahc3PKMIxcchCSqY/670u9m9pvbt17bp4=)
2: f76kKjzOSLi-F9qZN51XHnNpCzg.crl (hash: rHKQDCgFrz2XC43BDTC+oiiD925ep3eayRbg9YegHKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/f76kKjzOSLi-F9qZN51XHnNpCzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:ca:dd:83:70:59:5f:3a:91:1e:b0:e6:a6:3b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fbea42a3cce48b8be17da99379d571e73690b38
Validity
Not Before: Nov 15 09:01:36 2026 GMT
Not After : Nov 16 09:01:36 2026 GMT
Subject: CN=4ec87f5d820cd273fa41596bc33acd7572bd14cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:be:a0:27:7b:a5:d3:b9:b6:83:1c:86:58:
ed:f6:6c:cf:0f:9f:d6:05:17:f0:1c:11:f6:42:cd:
0b:a1:58:d2:81:11:95:fe:8b:36:ad:37:2d:14:c7:
c8:94:da:53:85:a0:d9:a2:8c:52:1b:ae:a3:26:02:
95:fc:0d:e7:2c:be:21:6c:94:70:d0:41:00:d8:f5:
10:bd:64:3c:35:58:0a:c3:8c:ae:81:56:6b:df:1e:
2a:99:76:ef:25:c5:12:7d:cb:c7:86:7b:35:e0:ad:
a8:6e:52:30:51:63:62:70:fc:7b:b5:e4:80:0c:09:
76:a9:b3:0a:ac:23:00:50:50:dd:8a:3c:0f:1c:36:
62:fe:07:0e:67:71:fb:c5:e2:96:3f:79:0e:77:93:
07:78:24:18:2c:26:f0:7d:b8:a4:88:39:87:33:67:
dd:cc:21:c0:83:7d:27:36:d6:a9:e8:40:43:af:a2:
cd:1e:fa:e8:5a:3f:59:0a:11:99:2e:7c:cf:44:ea:
d2:43:2f:99:bd:03:2e:89:78:33:41:c6:b0:ad:b0:
87:4a:a0:5e:f7:a0:03:13:5f:6b:50:f0:01:e1:31:
98:e0:39:8d:00:3f:2c:f0:36:78:30:ef:87:98:cc:
e8:44:c5:59:25:82:88:ab:cc:c5:3d:33:81:09:54:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C8:7F:5D:82:0C:D2:73:FA:41:59:6B:C3:3A:CD:75:72:BD:14:CB
X509v3 Authority Key Identifier:
keyid:7F:BE:A4:2A:3C:CE:48:B8:BE:17:DA:99:37:9D:57:1E:73:69:0B:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f76kKjzOSLi-F9qZN51XHnNpCzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/03d41c-e185-4a9d-9331-802a03119521/1/f76kKjzOSLi-F9qZN51XHnNpCzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:16:3d:b4:a5:bb:3a:65:a1:c6:6e:d6:c8:1a:ee:58:95:54:
be:cc:2b:d4:f9:3d:20:ad:0a:ea:52:d8:c7:03:05:c5:e5:a1:
39:fe:76:3b:3d:fc:3e:03:1d:64:07:ec:f6:9d:60:2b:70:5e:
30:8b:bd:6f:bc:1a:00:ec:c1:a3:8b:33:18:6b:6d:f5:d9:ca:
ad:d6:a9:85:68:6c:44:f5:aa:17:ab:34:59:84:47:c5:68:db:
fb:ce:2a:52:30:a3:65:4c:bd:e9:6b:dd:6b:6a:d1:d0:45:90:
e6:31:e4:7c:90:27:34:5f:49:7a:62:a0:bd:90:22:a1:8e:e2:
33:75:be:d2:03:60:5a:40:e1:fe:90:cc:9d:4f:d5:2b:bb:56:
63:83:41:ff:ec:ae:50:69:d6:a8:87:4a:77:0d:a0:fa:77:d5:
f2:0b:eb:8c:f5:d0:89:9e:b7:86:09:9c:72:de:89:ad:dc:90:
e5:a3:9d:2c:c1:9c:c4:1b:05:51:ee:b5:97:da:af:d4:51:2c:
52:67:98:a9:68:31:81:29:23:f3:ad:a5:bb:c1:c7:56:51:96:
b5:aa:6f:f2:c5:de:71:1f:08:0c:4e:2e:ef:d1:d6:17:49:5d:
7e:88:de:74:b0:14:7e:71:ad:a8:11:d3:e9:07:e3:bb:99:8b:
23:68:e0:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecMrdg3BZXzqRHrDmpjueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYmVhNDJhM2NjZTQ4YjhiZTE3ZGE5OTM3OWQ1NzFlNzM2
OTBiMzgwHhcNMjYxMTE1MDkwMTM2WhcNMjYxMTE2MDkwMTM2WjAzMTEwLwYDVQQD
Eyg0ZWM4N2Y1ZDgyMGNkMjczZmE0MTU5NmJjMzNhY2Q3NTcyYmQxNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20C+oCd7pdO5toMchljt9mzPD5/W
BRfwHBH2Qs0LoVjSgRGV/os2rTctFMfIlNpThaDZooxSG66jJgKV/A3nLL4hbJRw
0EEA2PUQvWQ8NVgKw4yugVZr3x4qmXbvJcUSfcvHhns14K2oblIwUWNicPx7teSA
DAl2qbMKrCMAUFDdijwPHDZi/gcOZ3H7xeKWP3kOd5MHeCQYLCbwfbikiDmHM2fd
zCHAg30nNtap6EBDr6LNHvroWj9ZChGZLnzPROrSQy+ZvQMuiXgzQcawrbCHSqBe
96ADE19rUPAB4TGY4DmNAD8s8DZ4MO+HmMzoRMVZJYKIq8zFPTOBCVRwQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7If12CDNJz+kFZa8M6zXVyvRTLMB8GA1UdIwQY
MBaAFH++pCo8zki4vhfamTedVx5zaQs4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjc2a0tqek9TTGktRjlxWk41MVhIbk5wQ3pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wM2Q0MWMtZTE4NS00YTlkLTkzMzEt
ODAyYTAzMTE5NTIxLzEvZjc2a0tqek9TTGktRjlxWk41MVhIbk5wQ3pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wM2Q0MWMtZTE4NS00YTlkLTkzMzEtODAyYTAzMTE5NTIx
LzEvZjc2a0tqek9TTGktRjlxWk41MVhIbk5wQ3pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRY9tKW7
OmWhxm7WyBruWJVUvswr1Pk9IK0K6lLYxwMFxeWhOf52Oz38PgMdZAfs9p1gK3Be
MIu9b7waAOzBo4szGGtt9dnKrdaphWhsRPWqF6s0WYRHxWjb+84qUjCjZUy96Wvd
a2rR0EWQ5jHkfJAnNF9JemKgvZAioY7iM3W+0gNgWkDh/pDMnU/VK7tWY4NB/+yu
UGnWqIdKdw2g+nfV8gvrjPXQiZ63hgmcct6JrdyQ5aOdLMGcxBsFUe61l9qv1FEs
UmeYqWgxgSkj862lu8HHVlGWtapv8sXecR8IDE4u79HWF0ldfojedLAUfnGtqBHT
6Qfju5mLI2jgfQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:48:59 2026 by rpki-client