Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File: fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier: 0SDPV6fAFo8nzWlLYD+zhVeebA2CFLoYmh9KrA7i/8o=
Subject key identifier: 74:2F:DE:97:A3:00:E8:79:89:65:17:A4:2C:F0:F1:6A:AE:A9:2A:12
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial: 019D273A9A61EBC88E4CCFD3407FE1677F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number: 1789
Signing time: Wed 25 Mar 2026 23:00:45 +0000
Manifest this update: Wed 25 Mar 2026 23:00:45 +0000
Manifest next update: Thu 26 Mar 2026 23:00:45 +0000
Files and hashes: 1: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: kYpwwlLflDjC1FIFLb2X+sRKLh3d2Xrn8uEoLuekfpk=)
2: mmW_PspRyWWJ-0koYlr6B2-6cDU.roa (hash: +DO/fJxCRM9CFhtpysXEvyA/4qA5BtqezUG8hfqugKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:9a:61:eb:c8:8e:4c:cf:d3:40:7f:e1:67:7f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Validity
Not Before: Mar 25 23:00:45 2026 GMT
Not After : Mar 26 23:00:45 2026 GMT
Subject: CN=742fde97a300e879896517a42cf0f16aaea92a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:bf:c3:67:cf:87:80:52:0a:ba:5b:de:95:
de:3a:e4:4e:84:90:2d:70:bf:38:5e:e6:88:12:6c:
e4:e6:4c:ee:5f:31:07:47:91:b2:58:68:af:85:38:
ba:dd:94:1f:66:c1:d7:41:c2:ef:37:8c:c3:39:cf:
76:d5:bb:0c:30:94:7d:88:2d:c5:b1:e9:98:1f:c4:
47:1f:5c:aa:4f:cd:c6:8f:39:a9:bc:17:f2:3c:ca:
df:f4:a2:5c:d9:3e:bc:a4:e8:c1:c7:e3:0b:2d:06:
32:64:6e:fe:f1:3d:ae:c8:c8:0d:36:35:cd:b3:b8:
a5:7e:e9:33:ab:e8:c9:37:f4:24:64:a4:96:cb:45:
05:4c:3d:4d:5d:63:6c:d6:b5:20:d6:aa:4b:61:f3:
cb:e7:65:4a:54:b3:f0:7d:05:e9:90:66:2b:a3:fe:
07:bd:09:6a:72:10:b0:23:29:81:5a:88:22:5b:f2:
d6:82:bc:7b:15:63:6d:6e:ef:f9:83:b4:df:6e:b3:
b2:4e:a6:82:73:a5:91:af:a8:e8:bc:fe:cc:55:9f:
d1:fd:a3:4d:f9:98:a5:1e:1c:6b:c7:36:87:6e:b0:
4b:6b:08:3c:39:1b:b0:8d:88:31:e0:d2:8c:d2:fd:
a5:40:3a:f4:8b:29:9e:2b:3e:36:72:c7:ab:6f:89:
51:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:DE:97:A3:00:E8:79:89:65:17:A4:2C:F0:F1:6A:AE:A9:2A:12
X509v3 Authority Key Identifier:
keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:23:2c:d7:74:ef:f2:3b:68:e5:48:6f:1f:32:00:c4:6d:6c:
e4:ba:3d:5f:b4:34:a8:56:68:12:19:06:fb:51:08:9c:a3:94:
c5:88:1d:b5:f3:a9:d5:67:96:10:ba:6a:26:b4:61:98:04:c1:
d5:de:fc:af:99:41:9e:2b:c1:99:61:e4:32:a9:a5:4e:91:29:
62:5d:1f:e4:ba:79:f2:3c:69:d6:ca:03:49:e9:d7:3b:17:14:
45:d2:fc:99:31:07:c8:28:4a:f2:1c:06:62:f4:03:1b:f2:18:
14:53:f0:88:77:c8:0d:29:d6:31:c3:7f:91:ab:c1:8c:22:3b:
f2:46:65:ef:2e:b3:a9:f2:cc:0f:f3:7e:6a:a7:9b:19:05:58:
6a:f9:b1:1d:69:4c:4d:3f:ad:76:82:fa:77:10:c1:3e:a5:02:
43:0d:62:81:d2:67:e1:d6:0e:b7:00:67:55:1d:bf:fa:02:b2:
ce:c6:70:c2:d0:d7:d2:50:83:67:1d:e0:5d:14:97:ce:e1:d4:
c9:25:c1:d8:53:bc:b0:3e:e7:ab:72:f3:fa:68:2f:88:29:2b:
fc:fd:bc:6d:b5:4a:bc:11:b7:6c:8a:df:a9:2c:84:7c:0c:14:
78:2c:f2:09:f0:91:31:dc:03:88:93:71:e6:5f:9f:d9:10:7a:
96:57:59:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOpph68iOTM/TQH/hZ3+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDQyMzIxMWY0OWIxMzM1ZTk0YjhiZGJiYjExNjg2NjRm
NjgwNGYwHhcNMjYwMzI1MjMwMDQ1WhcNMjYwMzI2MjMwMDQ1WjAzMTEwLwYDVQQD
Eyg3NDJmZGU5N2EzMDBlODc5ODk2NTE3YTQyY2YwZjE2YWFlYTkyYTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArue/w2fPh4BSCrpb3pXeOuROhJAt
cL84XuaIEmzk5kzuXzEHR5GyWGivhTi63ZQfZsHXQcLvN4zDOc921bsMMJR9iC3F
semYH8RHH1yqT83GjzmpvBfyPMrf9KJc2T68pOjBx+MLLQYyZG7+8T2uyMgNNjXN
s7ilfukzq+jJN/QkZKSWy0UFTD1NXWNs1rUg1qpLYfPL52VKVLPwfQXpkGYro/4H
vQlqchCwIymBWogiW/LWgrx7FWNtbu/5g7TfbrOyTqaCc6WRr6jovP7MVZ/R/aNN
+ZilHhxrxzaHbrBLawg8ORuwjYgx4NKM0v2lQDr0iymeKz42cserb4lRbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQv3pejAOh5iWUXpCzw8WquqSoSMB8GA1UdIwQY
MBaAFH4EIyEfSbEzXpS4vbuxFoZk9oBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83N2FjODYtMzFmNi00MzcwLWI0MzMt
YjBlN2Q0MWI1ZDM2LzEvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83N2FjODYtMzFmNi00MzcwLWI0MzMtYjBlN2Q0MWI1ZDM2
LzEvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCMs13Tv
8jto5UhvHzIAxG1s5Lo9X7Q0qFZoEhkG+1EInKOUxYgdtfOp1WeWELpqJrRhmATB
1d78r5lBnivBmWHkMqmlTpEpYl0f5Lp58jxp1soDSenXOxcURdL8mTEHyChK8hwG
YvQDG/IYFFPwiHfIDSnWMcN/kavBjCI78kZl7y6zqfLMD/N+aqebGQVYavmxHWlM
TT+tdoL6dxDBPqUCQw1igdJn4dYOtwBnVR2/+gKyzsZwwtDX0lCDZx3gXRSXzuHU
ySXB2FO8sD7nq3Lz+mgviCkr/P28bbVKvBG3bIrfqSyEfAwUeCzyCfCRMdwDiJNx
5l+f2RB6lldZ4w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:51 2026 by rpki-client