Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: qH2yGXxi8vW5cx36MdtV0p9TenaaeC8RWfWJenitBOA=
Subject key identifier: 46:3E:89:BE:7A:EA:6E:1B:D9:0D:C6:96:32:6D:FF:C4:AC:7F:E4:70
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 019E1FB5C10B27A058239047C44A4AAFD179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0FEF
Signing time: Wed 13 May 2026 05:01:05 +0000
Manifest this update: Wed 13 May 2026 05:01:05 +0000
Manifest next update: Thu 14 May 2026 05:01:05 +0000
Files and hashes: 1: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (hash: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: Mzw1W5584SN4KBCYv/2/iLSWUA9016ds+O8dpzCso6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:c1:0b:27:a0:58:23:90:47:c4:4a:4a:af:d1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: May 13 05:01:05 2026 GMT
Not After : May 14 05:01:05 2026 GMT
Subject: CN=463e89be7aea6e1bd90dc696326dffc4ac7fe470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:e7:7a:4d:bb:12:b5:e0:d1:ca:19:53:bf:
af:68:01:57:8c:3f:e1:72:f8:79:2c:04:2e:db:51:
c4:1b:a3:54:dc:2e:c5:6e:77:b2:d4:8c:bc:7d:a8:
6b:68:47:cb:a3:88:0b:f6:da:1f:1c:56:48:80:e4:
3d:ef:ed:0a:c3:69:2d:74:3a:a5:ac:54:6e:1b:d9:
1b:1a:01:bb:f5:9f:ae:30:73:77:02:94:c6:87:6d:
fd:01:ba:c7:a4:00:fc:27:56:da:ba:9c:c0:89:e6:
88:3c:4a:0d:1a:80:96:f7:4b:7f:59:70:25:39:18:
53:e6:92:31:95:89:5b:c0:ba:87:2a:57:c9:8a:4c:
3b:ea:d8:70:8e:07:a7:40:64:fe:b1:41:46:c3:9c:
a5:15:55:e8:66:a1:c7:cf:af:54:a0:5a:00:b1:93:
c2:f1:06:d1:70:cc:cd:46:16:52:4d:62:db:3c:6b:
70:75:56:d9:14:cb:1b:4b:c1:be:67:66:41:ff:df:
e8:b8:2e:54:95:a3:f9:c4:03:80:04:77:9d:43:6b:
15:d6:e8:00:88:30:3a:13:a0:6b:af:ed:83:e3:78:
34:f5:29:8b:27:f2:2d:c8:39:0d:0a:f3:08:3e:f4:
3c:c3:0c:48:a2:5c:37:8b:3e:1c:a9:ca:c3:9f:26:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3E:89:BE:7A:EA:6E:1B:D9:0D:C6:96:32:6D:FF:C4:AC:7F:E4:70
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:56:3d:5b:70:72:42:9d:e7:21:ce:d3:72:c4:97:34:8b:a9:
3f:8d:f3:15:ab:09:eb:58:60:8c:bb:bb:f9:37:e3:81:24:53:
13:9a:2a:6a:59:84:2c:06:54:af:8b:da:79:eb:fe:dc:7e:a4:
9b:4b:59:3e:bf:09:1e:50:b0:50:59:6c:5e:f7:73:b5:eb:87:
62:ae:36:77:19:6f:0d:76:70:65:71:76:43:b3:6e:1c:7a:e9:
c4:0c:39:59:17:3b:5d:a5:80:42:6e:8a:55:c9:e6:7e:a9:01:
63:9b:6a:b4:22:f3:08:78:ac:cd:d1:8e:6b:df:a7:84:7d:a2:
3e:49:e5:d5:67:02:e1:4d:a9:4c:26:17:1f:19:57:80:e2:67:
a3:b6:e6:51:64:e8:d4:49:93:9e:fd:a3:00:a8:f3:ac:c6:e8:
4b:52:b0:9d:60:d9:a3:48:e5:eb:6a:43:30:51:f1:6f:af:83:
46:98:44:87:4c:2f:d7:e7:d8:ff:26:7b:80:cb:95:ba:7e:ef:
c7:9b:13:dc:29:85:58:43:58:80:d7:fc:3d:6a:7e:98:20:eb:
e9:91:f1:b9:fd:1d:f0:1f:3b:b4:90:f4:d9:a2:5e:5b:2a:28:
05:5e:0b:8a:8e:f6:78:b2:34:d1:d3:e8:41:a7:87:64:d4:93:
4c:fb:db:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftcELJ6BYI5BHxEpKr9F5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZWM3MjgzN2VmYmJjNGVhNmRkZDRiZTk0MzYxOTE2YjRj
MzYyZGEwHhcNMjYwNTEzMDUwMTA1WhcNMjYwNTE0MDUwMTA1WjAzMTEwLwYDVQQD
Eyg0NjNlODliZTdhZWE2ZTFiZDkwZGM2OTYzMjZkZmZjNGFjN2ZlNDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGbnek27ErXg0coZU7+vaAFXjD/h
cvh5LAQu21HEG6NU3C7Fbney1Iy8fahraEfLo4gL9tofHFZIgOQ97+0Kw2ktdDql
rFRuG9kbGgG79Z+uMHN3ApTGh239AbrHpAD8J1baupzAieaIPEoNGoCW90t/WXAl
ORhT5pIxlYlbwLqHKlfJikw76thwjgenQGT+sUFGw5ylFVXoZqHHz69UoFoAsZPC
8QbRcMzNRhZSTWLbPGtwdVbZFMsbS8G+Z2ZB/9/ouC5UlaP5xAOABHedQ2sV1ugA
iDA6E6Brr+2D43g09SmLJ/ItyDkNCvMIPvQ8wwxIolw3iz4cqcrDnyY/8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEY+ib566m4b2Q3GljJt/8Ssf+RwMB8GA1UdIwQY
MBaAFH3scoN++7xOpt3UvpQ2GRa0w2LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUt
Mzg2NjE3YTY2NGZlLzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUtMzg2NjE3YTY2NGZl
LzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFY9W3By
Qp3nIc7TcsSXNIupP43zFasJ61hgjLu7+TfjgSRTE5oqalmELAZUr4vaeev+3H6k
m0tZPr8JHlCwUFlsXvdzteuHYq42dxlvDXZwZXF2Q7NuHHrpxAw5WRc7XaWAQm6K
VcnmfqkBY5tqtCLzCHiszdGOa9+nhH2iPknl1WcC4U2pTCYXHxlXgOJno7bmUWTo
1EmTnv2jAKjzrMboS1KwnWDZo0jl62pDMFHxb6+DRphEh0wv1+fY/yZ7gMuVun7v
x5sT3CmFWENYgNf8PWp+mCDr6ZHxuf0d8B87tJD02aJeWyooBV4Lio72eLI00dPo
QaeHZNSTTPvb4w==
-----END CERTIFICATE-----
Generated at Wed May 13 08:59:29 2026 by rpki-client