Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
File: F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json)
Hash identifier: EMAXR/PiqSyXus6LELkDo/8WHghy+aTfvPSzVvkpf3g=
Subject key identifier: A5:C1:8D:66:C6:A9:39:C0:95:C3:BD:DB:64:7E:6E:21:17:1B:C9:7E
Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39
Certificate serial: 019D284D6F9220B583C810C615124A313C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
Manifest number: 07DF
Signing time: Thu 26 Mar 2026 04:00:56 +0000
Manifest this update: Thu 26 Mar 2026 04:00:56 +0000
Manifest next update: Fri 27 Mar 2026 04:00:56 +0000
Files and hashes: 1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: nbTF2kQpURpsnIfccbN9b4Mhuv0Td7dVbi5/h3+hfGI=)
2: SbtU24bKXJzT0r_Edu3hABMBFRg.roa (hash: uhs0gjYBAZV/9eh8e1DZS32viLByYHa3Altj0TI5SN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:6f:92:20:b5:83:c8:10:c6:15:12:4a:31:3c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39
Validity
Not Before: Mar 26 04:00:56 2026 GMT
Not After : Mar 27 04:00:56 2026 GMT
Subject: CN=a5c18d66c6a939c095c3bddb647e6e21171bc97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:8b:23:52:bb:73:7f:08:85:39:ea:f1:c8:
76:26:b1:ab:69:39:ce:87:0b:63:3b:0e:42:7b:b7:
6a:ee:5c:cc:b2:74:97:c9:3d:fd:1b:e4:4c:cb:0e:
7e:6b:2b:71:a1:aa:81:d3:0a:1e:50:74:6a:11:26:
fa:7e:1b:df:06:60:6c:c9:ac:1c:84:c5:de:5c:5c:
78:ef:a4:c4:f8:0b:1f:82:0e:9a:ad:c4:85:f4:2d:
5e:8d:e5:df:5b:df:12:7e:20:fe:06:5c:dc:fe:0f:
b4:d2:25:9e:b3:d5:84:d0:c3:8c:26:7a:03:cb:e3:
e5:5b:25:a3:23:ff:f3:cf:d8:14:cc:17:f5:8c:4f:
03:20:5d:75:9a:1a:f6:01:26:71:97:a8:82:c7:ec:
0a:d9:ae:ed:bf:4a:1e:6e:00:76:0f:27:47:28:dd:
3d:4b:46:34:93:27:00:cd:18:96:39:4b:f4:56:fb:
9e:90:c5:34:4d:ea:b1:9d:da:6a:e9:de:2f:77:0d:
7d:f4:ef:02:3b:01:fc:2b:2d:b4:8f:2b:b3:36:b3:
de:4e:5c:37:03:29:fd:e5:ce:da:9a:2a:ff:89:62:
61:11:67:b7:16:0f:d6:5b:12:96:9e:8d:ea:55:8a:
d6:80:5f:0d:dd:1c:72:0c:8b:e3:02:51:ef:7a:6f:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:8D:66:C6:A9:39:C0:95:C3:BD:DB:64:7E:6E:21:17:1B:C9:7E
X509v3 Authority Key Identifier:
keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fa:93:ff:d4:ff:16:f1:97:c9:c9:12:81:61:65:00:12:e7:
c6:0e:d1:28:d2:8e:cc:60:68:97:ff:9a:fe:18:e8:c4:cd:7d:
9b:f4:74:a0:ea:2b:b5:ac:d3:e1:55:32:1d:cf:68:12:43:0e:
9f:52:67:93:95:22:0d:0c:49:74:98:24:08:2d:41:1a:74:f6:
c5:29:14:c9:6a:b6:1b:9b:c6:a5:83:51:b0:af:b8:76:38:be:
db:92:0b:76:40:4e:b5:07:b4:e3:e4:07:0e:35:83:e8:77:58:
97:96:20:68:1f:23:7a:69:ee:de:0a:68:f9:a8:8a:d2:05:9d:
af:d4:5d:0c:3b:f1:a9:00:0d:7e:37:37:91:02:52:c8:89:09:
75:e6:0f:e4:20:d0:01:1b:c7:a8:08:bb:d0:0c:21:73:7d:81:
9c:6c:fe:b4:42:6b:15:18:8b:55:8c:9f:25:6e:3b:79:cd:8a:
f9:93:70:c8:d9:3c:54:37:b6:93:0a:c8:85:44:8f:f9:69:64:
b9:0b:25:d5:13:dc:b6:78:0a:81:85:a6:8d:76:72:40:98:ef:
09:7e:74:77:a5:72:61:4e:8e:35:f2:24:52:97:20:20:c6:51:
55:60:75:cb:22:76:f8:bd:c9:0e:0f:e7:af:42:de:6f:dd:e4:
65:bd:57:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTW+SILWDyBDGFRJKMTxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OGQ4MTIxZWY3MDRkN2E5NzcwYzNlY2UxZTIwNTYxNDc5
MGFjMzkwHhcNMjYwMzI2MDQwMDU2WhcNMjYwMzI3MDQwMDU2WjAzMTEwLwYDVQQD
EyhhNWMxOGQ2NmM2YTkzOWMwOTVjM2JkZGI2NDdlNmUyMTE3MWJjOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxOLI1K7c38IhTnq8ch2JrGraTnO
hwtjOw5Ce7dq7lzMsnSXyT39G+RMyw5+aytxoaqB0woeUHRqESb6fhvfBmBsyawc
hMXeXFx476TE+Asfgg6arcSF9C1ejeXfW98SfiD+Blzc/g+00iWes9WE0MOMJnoD
y+PlWyWjI//zz9gUzBf1jE8DIF11mhr2ASZxl6iCx+wK2a7tv0oebgB2DydHKN09
S0Y0kycAzRiWOUv0VvuekMU0Teqxndpq6d4vdw199O8COwH8Ky20jyuzNrPeTlw3
Ayn95c7amir/iWJhEWe3Fg/WWxKWno3qVYrWgF8N3RxyDIvjAlHvem8fowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXBjWbGqTnAlcO922R+biEXG8l+MB8GA1UdIwQY
MBaAFBeNgSHvcE16l3DD7OHiBWFHkKw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjQyQkllOXdUWHFYY01QczRlSUZZVWVRckRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80MTRkOWQtYjMwMy00MDU4LTk5M2It
OTAwMmZhZDllYTFlLzEvRjQyQkllOXdUWHFYY01QczRlSUZZVWVRckRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80MTRkOWQtYjMwMy00MDU4LTk5M2ItOTAwMmZhZDllYTFl
LzEvRjQyQkllOXdUWHFYY01QczRlSUZZVWVRckRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPqT/9T/
FvGXyckSgWFlABLnxg7RKNKOzGBol/+a/hjoxM19m/R0oOortazT4VUyHc9oEkMO
n1Jnk5UiDQxJdJgkCC1BGnT2xSkUyWq2G5vGpYNRsK+4dji+25ILdkBOtQe04+QH
DjWD6HdYl5YgaB8jemnu3gpo+aiK0gWdr9RdDDvxqQANfjc3kQJSyIkJdeYP5CDQ
ARvHqAi70Awhc32BnGz+tEJrFRiLVYyfJW47ec2K+ZNwyNk8VDe2kwrIhUSP+Wlk
uQsl1RPctngKgYWmjXZyQJjvCX50d6VyYU6ONfIkUpcgIMZRVWB1yyJ2+L3JDg/n
r0Leb93kZb1Xng==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:53 2026 by rpki-client