Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
File: _FXgUz76pWJPU4uS7RqXP-_4l1E.mft (raw, json)
Hash identifier: Wozrtjn2mGASJTVNA8qYpeH3tvEBlzwJXAjAN/lO9Zg=
Subject key identifier: 2B:89:1C:CD:9B:1F:E6:0F:F4:95:C7:3F:47:40:8B:67:CF:C3:0E:54
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Certificate issuer: /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial: 019D26CD9A359790B797BB7E493943D11CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
Manifest number: 1373
Signing time: Wed 25 Mar 2026 21:01:41 +0000
Manifest this update: Wed 25 Mar 2026 21:01:41 +0000
Manifest next update: Thu 26 Mar 2026 21:01:41 +0000
Files and hashes: 1: 3cJyWq-tBxGFG7u2mJLWK8AgYnM.roa (hash: dC1Jmhk6Q3zkT4ET8SP9YRaPacsXX6m/6++3eHhj2g0=)
2: 4sSprCfe0hEnTrgFB2Gt47mVuTY.roa (hash: yLSbVgV82C4PxlN4PCRq1i+ZoIUp1wONOTUwmInAlqw=)
3: _FXgUz76pWJPU4uS7RqXP-_4l1E.crl (hash: AXq7ygRdSa+RVvdd9ZQzYbeCkQVxhiU+QcZvdyqE9QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:9a:35:97:90:b7:97:bb:7e:49:39:43:d1:1c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
Validity
Not Before: Mar 25 21:01:41 2026 GMT
Not After : Mar 26 21:01:41 2026 GMT
Subject: CN=2b891ccd9b1fe60ff495c73f47408b67cfc30e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:90:ad:2b:4e:7b:c4:78:fd:55:b0:2a:c4:
9f:55:10:e1:18:3a:f1:2a:88:02:77:6c:df:08:a3:
b4:62:ed:2a:ad:40:d8:62:4d:22:a1:55:ec:64:9f:
88:88:5a:98:56:91:46:e0:4a:87:4e:eb:b3:5e:80:
2a:25:5a:10:fa:91:b5:3b:84:89:cc:db:d4:5c:f2:
6d:cb:e3:f7:a9:6e:7c:8c:aa:2e:f3:de:bb:0d:73:
62:19:92:1e:88:ee:9c:1a:ae:67:87:ed:59:2d:6e:
60:39:17:43:c3:c7:c7:75:a0:f8:76:1f:a8:6e:7a:
b3:61:46:c5:00:76:bf:c0:82:7b:19:d9:b2:65:f5:
a9:20:6c:96:2e:85:95:46:67:d2:d3:f6:6e:4a:82:
fb:0f:d5:15:73:b2:8c:97:0d:3b:b4:cc:92:13:25:
89:a6:d8:28:03:66:a1:69:48:1d:1a:d0:28:ad:d6:
e8:e3:f2:d0:fe:2f:5f:d2:5d:98:e2:09:5c:8c:68:
b6:8d:f8:f8:30:40:a0:7a:1d:c0:6d:98:38:2d:14:
c4:e3:3f:db:c9:17:3e:34:30:8f:89:48:0c:5a:7e:
a9:b9:c6:68:df:14:a5:92:ab:52:8d:ac:10:b7:12:
af:ab:ab:cc:02:54:35:d0:0f:ce:35:c6:5c:6c:b0:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:1C:CD:9B:1F:E6:0F:F4:95:C7:3F:47:40:8B:67:CF:C3:0E:54
X509v3 Authority Key Identifier:
keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:93:bd:63:90:fd:fc:f7:af:08:ae:31:27:87:7a:53:49:ee:
c4:8e:9a:f8:70:a9:ee:c3:13:86:e0:ac:b4:b2:16:43:e0:f9:
c4:24:77:61:65:aa:dd:83:ca:6f:46:37:0e:0e:c1:ae:a6:1a:
3d:f7:9b:98:da:3d:35:ca:30:2a:52:da:f6:39:fd:56:cb:1d:
83:5c:02:dc:4c:f7:27:e3:d8:b3:79:31:05:3d:7d:4b:0e:3d:
30:92:2d:0d:8b:20:43:7e:15:70:a9:53:88:5a:ef:c0:7f:8f:
23:75:b5:df:46:19:cd:2d:fa:04:fa:47:45:d9:b9:d6:44:61:
56:35:ed:8d:09:5c:ea:52:70:0f:5f:7c:37:32:97:d1:9b:fa:
15:46:e8:64:29:5f:d5:fa:6e:bb:c0:a2:78:62:bb:1a:c0:0f:
6d:9c:3c:d4:27:70:ab:ba:d5:af:a4:81:c2:a5:e6:9f:52:11:
6a:7b:24:26:f1:ee:9f:11:65:ad:13:27:fd:59:28:5e:8a:c7:
e7:59:29:f0:a5:19:8b:80:f0:97:4c:4b:b4:be:fd:cd:44:d7:
27:f2:9f:66:0a:71:c9:23:b5:72:2e:60:4f:64:1a:d8:c3:f2:
92:97:40:41:8a:bb:c7:06:f5:48:f1:76:f8:40:e7:55:12:22:
20:11:24:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzZo1l5C3l7t+STlD0RzRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNTVlMDUzM2VmYWE1NjI0ZjUzOGI5MmVkMWE5NzNmZWZm
ODk3NTEwHhcNMjYwMzI1MjEwMTQxWhcNMjYwMzI2MjEwMTQxWjAzMTEwLwYDVQQD
EygyYjg5MWNjZDliMWZlNjBmZjQ5NWM3M2Y0NzQwOGI2N2NmYzMwZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxASQrStOe8R4/VWwKsSfVRDhGDrx
KogCd2zfCKO0Yu0qrUDYYk0ioVXsZJ+IiFqYVpFG4EqHTuuzXoAqJVoQ+pG1O4SJ
zNvUXPJty+P3qW58jKou8967DXNiGZIeiO6cGq5nh+1ZLW5gORdDw8fHdaD4dh+o
bnqzYUbFAHa/wIJ7GdmyZfWpIGyWLoWVRmfS0/ZuSoL7D9UVc7KMlw07tMySEyWJ
ptgoA2ahaUgdGtAordbo4/LQ/i9f0l2Y4glcjGi2jfj4MECgeh3AbZg4LRTE4z/b
yRc+NDCPiUgMWn6pucZo3xSlkqtSjawQtxKvq6vMAlQ10A/ONcZcbLDq7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuJHM2bH+YP9JXHP0dAi2fPww5UMB8GA1UdIwQY
MBaAFPxV4FM++qViT1OLku0alz/v+JdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODIt
YTUyODYyYjQ0NTYzLzEvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODItYTUyODYyYjQ0NTYz
LzEvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7ZO9Y5D9
/PevCK4xJ4d6U0nuxI6a+HCp7sMThuCstLIWQ+D5xCR3YWWq3YPKb0Y3Dg7BrqYa
PfebmNo9NcowKlLa9jn9Vssdg1wC3Ez3J+PYs3kxBT19Sw49MJItDYsgQ34VcKlT
iFrvwH+PI3W130YZzS36BPpHRdm51kRhVjXtjQlc6lJwD198NzKX0Zv6FUboZClf
1fpuu8CieGK7GsAPbZw81Cdwq7rVr6SBwqXmn1IRanskJvHunxFlrRMn/VkoXorH
51kp8KUZi4Dwl0xLtL79zUTXJ/KfZgpxySO1ci5gT2Qa2MPykpdAQYq7xwb1SPF2
+EDnVRIiIBEkQw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:33 2026 by rpki-client