Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
File: F3khM2kRpWiNeOk__l5HIRO7Gb4.mft (raw, json)
Hash identifier: K+nvo+b4XQlhuZgVbMZHYBhDwHi7oyzfIll2MY1fJZc=
Subject key identifier: D5:40:AC:A6:2D:9D:F1:D0:A5:35:12:8F:A0:10:C7:83:32:0A:F5:59
Authority key identifier: 17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
Certificate issuer: /CN=177921336911a5688d78e93ffe5e472113bb19be
Certificate serial: 019D2996D9AF4E96C65100186F33CBD361E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
Manifest number: 0869
Signing time: Thu 26 Mar 2026 10:00:44 +0000
Manifest this update: Thu 26 Mar 2026 10:00:44 +0000
Manifest next update: Fri 27 Mar 2026 10:00:44 +0000
Files and hashes: 1: 00KPXaoeVFb3ZxS5PVmQU3i8VY4.roa (hash: HLzQZ86nyzCWCoL4HyX0cWOR0lVQ8RFQ8/UNt4CesgA=)
2: F3khM2kRpWiNeOk__l5HIRO7Gb4.crl (hash: p8F5t6EbRH/GRqIYZWV8kPKPz23QerX62Ap5wNGF88w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d9:af:4e:96:c6:51:00:18:6f:33:cb:d3:61:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177921336911a5688d78e93ffe5e472113bb19be
Validity
Not Before: Mar 26 10:00:44 2026 GMT
Not After : Mar 27 10:00:44 2026 GMT
Subject: CN=d540aca62d9df1d0a535128fa010c783320af559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:23:c6:cc:03:95:9f:9f:8c:d9:02:91:23:
5f:4a:95:6e:02:41:2b:60:a0:83:7e:66:67:5c:4c:
2b:e2:88:38:16:98:c2:81:53:e0:b4:2b:d9:9d:7a:
87:37:9a:50:42:a2:f1:7e:b8:92:08:b6:c7:db:48:
23:23:ee:4b:e5:bd:6b:3e:68:d4:dd:09:7b:93:ec:
d2:de:ff:80:c5:8f:0f:c8:65:57:36:dc:d3:26:71:
f9:1d:18:bb:43:c0:9d:d2:c8:d3:4c:e5:36:4f:ec:
c0:32:21:12:fd:96:83:d2:27:e9:40:85:37:23:73:
6f:39:cf:e1:2a:aa:75:cc:b9:dd:9a:4d:9f:c4:fd:
ef:8a:08:03:b4:b5:99:3f:5b:35:77:06:82:4f:1e:
21:3e:a7:e3:8a:a5:43:5f:b2:54:17:6b:41:13:ba:
6f:d1:33:73:d2:71:48:ab:83:a7:f4:2f:3a:13:bc:
f1:d4:b7:66:67:91:b4:fe:19:ab:da:ae:74:ab:c0:
3c:89:db:10:4d:20:9b:37:39:81:4a:32:13:94:04:
53:9f:44:c9:af:18:ff:c3:02:ff:8d:2b:ee:ba:9b:
e0:e0:cd:38:cf:87:8c:0f:06:c3:f6:98:d3:e8:5a:
c1:06:eb:c9:ba:ad:d7:75:36:ad:d5:4e:5c:fa:c4:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:40:AC:A6:2D:9D:F1:D0:A5:35:12:8F:A0:10:C7:83:32:0A:F5:59
X509v3 Authority Key Identifier:
keyid:17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ff:02:00:3c:0b:32:76:72:a6:c5:6d:f0:90:90:79:90:75:
0d:2f:43:58:f1:2a:c6:3e:a0:51:a9:87:9a:c8:e1:72:b2:83:
d5:6e:eb:42:03:a7:7c:e9:20:fa:ee:fd:80:da:0f:a4:70:dc:
d0:c7:d5:a3:1c:7c:18:7e:28:b0:df:ee:4d:ac:cf:9d:51:a8:
f7:00:d9:3b:89:61:00:93:2c:dc:47:34:d9:0a:4f:c9:b1:d2:
17:a7:9b:df:bb:91:ad:ba:78:3a:41:cf:1d:8c:94:7c:7a:12:
2a:ae:4f:6f:00:25:30:86:66:14:db:8d:9b:69:6e:38:db:bf:
3e:fd:2d:78:3e:e8:82:da:2d:f5:bb:ab:a1:2a:11:cc:5d:54:
d6:91:9b:6e:86:cc:5f:9d:35:09:26:20:1c:08:78:96:ec:18:
38:c6:65:d8:a7:e0:c7:80:c1:10:05:df:50:e5:1c:c2:69:4b:
5e:80:d4:b7:88:52:1a:65:e0:38:2e:30:d5:dd:8d:a2:32:f4:
8b:b0:54:55:2e:4b:76:a1:a8:ba:2a:04:91:58:5d:11:10:21:
ca:e1:2d:1e:d1:60:f8:29:3b:a3:b3:90:5e:f5:7c:5b:88:79:
69:b1:6e:77:2e:c9:29:33:db:63:df:e9:5b:2e:18:c9:0c:44:
86:99:54:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pltmvTpbGUQAYbzPL02HhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzkyMTMzNjkxMWE1Njg4ZDc4ZTkzZmZlNWU0NzIxMTNi
YjE5YmUwHhcNMjYwMzI2MTAwMDQ0WhcNMjYwMzI3MTAwMDQ0WjAzMTEwLwYDVQQD
EyhkNTQwYWNhNjJkOWRmMWQwYTUzNTEyOGZhMDEwYzc4MzMyMGFmNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTYjxswDlZ+fjNkCkSNfSpVuAkEr
YKCDfmZnXEwr4og4FpjCgVPgtCvZnXqHN5pQQqLxfriSCLbH20gjI+5L5b1rPmjU
3Ql7k+zS3v+AxY8PyGVXNtzTJnH5HRi7Q8Cd0sjTTOU2T+zAMiES/ZaD0ifpQIU3
I3NvOc/hKqp1zLndmk2fxP3viggDtLWZP1s1dwaCTx4hPqfjiqVDX7JUF2tBE7pv
0TNz0nFIq4On9C86E7zx1LdmZ5G0/hmr2q50q8A8idsQTSCbNzmBSjITlARTn0TJ
rxj/wwL/jSvuupvg4M04z4eMDwbD9pjT6FrBBuvJuq3XdTat1U5c+sRMnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVArKYtnfHQpTUSj6AQx4MyCvVZMB8GA1UdIwQY
MBaAFBd5ITNpEaVojXjpP/5eRyETuxm+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNraE0ya1JwV2lOZU9rX19sNUhJUk83R2I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82MzEwN2MtYjU2MC00MTE2LWI0Nzgt
YjVjM2QyNGVmZGNkLzEvRjNraE0ya1JwV2lOZU9rX19sNUhJUk83R2I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82MzEwN2MtYjU2MC00MTE2LWI0NzgtYjVjM2QyNGVmZGNk
LzEvRjNraE0ya1JwV2lOZU9rX19sNUhJUk83R2I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFf8CADwL
MnZypsVt8JCQeZB1DS9DWPEqxj6gUamHmsjhcrKD1W7rQgOnfOkg+u79gNoPpHDc
0MfVoxx8GH4osN/uTazPnVGo9wDZO4lhAJMs3Ec02QpPybHSF6eb37uRrbp4OkHP
HYyUfHoSKq5PbwAlMIZmFNuNm2luONu/Pv0teD7ogtot9buroSoRzF1U1pGbbobM
X501CSYgHAh4luwYOMZl2Kfgx4DBEAXfUOUcwmlLXoDUt4hSGmXgOC4w1d2NojL0
i7BUVS5LdqGouioEkVhdERAhyuEtHtFg+Ck7o7OQXvV8W4h5abFudy7JKTPbY9/p
Wy4YyQxEhplUVg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:05 2026 by rpki-client