Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
File: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json)
Hash identifier: Ro6w5wGc2vCZUjXQr+n5uw0BZOMhiBFGN/5S8PsaB/Q=
Subject key identifier: 04:C7:D2:F1:BF:07:B8:C8:D8:BA:62:74:41:A3:6A:67:3D:9C:0D:95
Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Certificate serial: 019D25F11A9C69520E966EA011CD00D5E3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
Manifest number: 01EC
Signing time: Wed 25 Mar 2026 17:00:50 +0000
Manifest this update: Wed 25 Mar 2026 17:00:50 +0000
Manifest next update: Thu 26 Mar 2026 17:00:50 +0000
Files and hashes: 1: 5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa (hash: Rd6vx0quono9MPD1F0vpd55eYapHMtF51xcO/Hw6eew=)
2: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: lee3U6UrGeesaxF+v9Vls6RQxauW/SmPc1x1RQrbwh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:1a:9c:69:52:0e:96:6e:a0:11:cd:00:d5:e3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Validity
Not Before: Mar 25 17:00:50 2026 GMT
Not After : Mar 26 17:00:50 2026 GMT
Subject: CN=04c7d2f1bf07b8c8d8ba627441a36a673d9c0d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:1c:8e:e1:ba:b4:be:cb:cd:a3:df:03:0f:
9d:b2:76:21:74:10:37:93:e5:de:62:83:04:80:c2:
4e:41:15:0c:93:8e:fe:96:af:b2:4c:dc:5f:90:c8:
61:79:56:6c:4f:16:1a:4d:bd:d8:07:84:d5:1d:ce:
5a:f7:e3:e7:0c:5a:f6:84:26:38:21:4b:6f:0b:9a:
81:4f:2d:ca:a0:21:2d:42:83:96:a2:36:46:11:17:
ff:46:60:a8:b3:ab:c2:a6:54:30:ab:f4:7d:ff:a8:
f7:be:40:84:91:fd:0b:74:d1:32:9b:fc:85:29:13:
1f:45:34:a5:cd:3a:f3:cc:ec:bf:69:0a:e5:86:f5:
27:4a:6b:1b:4d:6c:91:5b:d5:10:6f:9b:5d:2b:10:
9f:68:b5:c6:2d:4b:79:52:42:a2:32:26:12:21:94:
33:0c:42:12:19:da:18:e1:bb:28:02:69:a4:68:78:
ae:76:f6:e0:60:eb:fe:9e:dd:2e:d0:9c:f6:6d:06:
21:ad:a0:10:28:6a:78:1f:0d:dc:6d:05:60:bf:ff:
02:11:17:78:d7:67:ee:24:21:59:49:f2:44:ad:91:
9f:a4:11:7e:65:c6:e4:ed:ff:de:8a:dc:8d:c8:e1:
aa:5c:1c:f5:7e:68:aa:f1:ff:de:45:5f:28:ca:26:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C7:D2:F1:BF:07:B8:C8:D8:BA:62:74:41:A3:6A:67:3D:9C:0D:95
X509v3 Authority Key Identifier:
keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4e:80:28:6b:27:1c:85:8d:09:ca:a6:09:2a:db:4d:bc:71:
39:36:6d:55:89:04:82:1a:36:76:b7:bd:b7:ed:61:1f:8b:49:
7c:59:86:96:37:a8:d8:9b:3e:2a:ea:2d:52:67:66:a7:68:c4:
a7:c0:ab:6e:df:f9:51:c1:76:13:6b:58:26:00:ee:a9:18:dc:
14:c3:0a:cc:cd:3a:4a:29:60:ab:f2:c5:a1:7c:1f:9f:a9:af:
33:13:21:92:13:34:dc:79:94:a7:78:1b:60:f3:1e:6e:87:c0:
8f:8b:4a:83:8c:d9:6d:f1:95:c0:9a:1a:2e:9c:23:63:6c:a1:
8b:7e:28:aa:98:4b:fb:9b:31:ad:74:96:4a:f9:b5:fd:3d:ea:
13:bc:22:24:ec:1c:03:a8:e0:5a:ae:79:60:99:d2:d8:54:94:
c3:11:52:22:16:be:cc:fb:ab:81:d3:29:a9:de:91:6d:fb:9a:
30:99:6a:80:a6:08:ad:c3:df:de:62:07:ea:cb:40:68:30:7f:
0f:fe:57:a5:e8:85:7c:73:e5:f1:3c:e1:25:3e:e8:72:c4:52:
52:f9:39:ab:ed:90:f9:29:0a:4a:0e:72:8a:49:4c:0a:68:8b:
12:71:dd:89:7d:b4:04:55:41:6d:b9:82:9d:18:44:0f:52:29:
10:61:96:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8RqcaVIOlm6gEc0A1ePrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMzQ2YWNlNGU2NTI4NzBmMTY4NzQ1MGQ1YzM0ZTE0Y2Iw
MDk0YjUwHhcNMjYwMzI1MTcwMDUwWhcNMjYwMzI2MTcwMDUwWjAzMTEwLwYDVQQD
EygwNGM3ZDJmMWJmMDdiOGM4ZDhiYTYyNzQ0MWEzNmE2NzNkOWMwZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSEcjuG6tL7LzaPfAw+dsnYhdBA3
k+XeYoMEgMJOQRUMk47+lq+yTNxfkMhheVZsTxYaTb3YB4TVHc5a9+PnDFr2hCY4
IUtvC5qBTy3KoCEtQoOWojZGERf/RmCos6vCplQwq/R9/6j3vkCEkf0LdNEym/yF
KRMfRTSlzTrzzOy/aQrlhvUnSmsbTWyRW9UQb5tdKxCfaLXGLUt5UkKiMiYSIZQz
DEISGdoY4bsoAmmkaHiudvbgYOv+nt0u0Jz2bQYhraAQKGp4Hw3cbQVgv/8CERd4
12fuJCFZSfJErZGfpBF+Zcbk7f/eityNyOGqXBz1fmiq8f/eRV8oyiZaLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATH0vG/B7jI2LpidEGjamc9nA2VMB8GA1UdIwQY
MBaAFH00as5OZShw8Wh0UNXDThTLAJS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEt
MzI3YWNjMWIxZTU5LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEtMzI3YWNjMWIxZTU5
LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk06AKGsn
HIWNCcqmCSrbTbxxOTZtVYkEgho2dre9t+1hH4tJfFmGljeo2Js+KuotUmdmp2jE
p8Crbt/5UcF2E2tYJgDuqRjcFMMKzM06Silgq/LFoXwfn6mvMxMhkhM03HmUp3gb
YPMebofAj4tKg4zZbfGVwJoaLpwjY2yhi34oqphL+5sxrXSWSvm1/T3qE7wiJOwc
A6jgWq55YJnS2FSUwxFSIha+zPurgdMpqd6RbfuaMJlqgKYIrcPf3mIH6stAaDB/
D/5XpeiFfHPl8TzhJT7ocsRSUvk5q+2Q+SkKSg5yiklMCmiLEnHdiX20BFVBbbmC
nRhED1IpEGGWcw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:22 2026 by rpki-client