Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: Ti9ipCf0fZQ+F3povJgQN2V5j+FHHYWvXRofyDtp+IM=
Subject key identifier: D9:B5:B8:84:4F:40:FC:F7:1A:BD:5B:1E:E5:25:5B:F5:35:AE:D4:18
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 019D29CED26EE268F918582C13F1C0FD9382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 0FD7
Signing time: Thu 26 Mar 2026 11:01:53 +0000
Manifest this update: Thu 26 Mar 2026 11:01:53 +0000
Manifest next update: Fri 27 Mar 2026 11:01:53 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: DYPHgOJeQEC8m89tH4AUwAUpAHO8V0YNfs7IXtadnDA=)
2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:d2:6e:e2:68:f9:18:58:2c:13:f1:c0:fd:93:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Mar 26 11:01:53 2026 GMT
Not After : Mar 27 11:01:53 2026 GMT
Subject: CN=d9b5b8844f40fcf71abd5b1ee5255bf535aed418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:d3:f9:5f:1e:a2:db:7c:70:0f:b0:7d:1f:
17:6b:0c:a3:8d:74:d3:01:a4:f7:4c:f3:8e:80:08:
f1:46:94:b9:4a:4d:cc:88:31:12:97:51:2e:0a:82:
16:1f:69:75:14:13:61:bc:de:14:c9:45:0d:01:ca:
ee:3f:48:d0:6e:a8:5b:cb:2e:1d:6b:f7:bc:c1:80:
5e:ef:26:4f:73:56:d8:02:82:d1:d1:54:3c:13:55:
c8:5d:2c:ff:3b:4a:31:98:20:f4:12:94:6f:ac:07:
2c:6e:1a:2f:31:1e:9a:a9:f7:dd:eb:50:9b:d7:40:
9b:eb:0c:87:f6:9d:e6:f8:b7:3e:37:af:6f:ca:aa:
9e:a5:8a:72:f6:1e:d5:d8:36:5f:d3:2e:e0:1e:33:
63:df:66:e0:37:56:16:75:e2:e2:4c:bb:27:c0:13:
10:e6:3c:35:54:6d:ed:af:3a:61:5f:59:65:f9:33:
b9:1d:5f:5e:70:f1:f4:b8:de:df:98:db:b0:e4:80:
33:81:db:12:a0:81:32:37:51:51:99:55:32:cd:17:
2c:0b:cf:77:36:1f:8c:54:1e:11:37:1f:59:90:14:
5c:da:f0:f0:b1:12:02:dc:24:e8:71:32:d0:e2:49:
f2:be:09:f6:a9:53:2c:7f:30:ec:f0:c1:79:4a:b7:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:B8:84:4F:40:FC:F7:1A:BD:5B:1E:E5:25:5B:F5:35:AE:D4:18
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8b:f6:2e:91:d7:fc:91:c3:bc:4f:f9:6f:b7:0b:97:62:73:
09:e8:79:a0:48:d6:97:2e:2e:84:c9:b3:fb:d7:d3:9c:e2:7a:
00:d0:0c:fe:8e:7e:ce:44:fe:17:4c:aa:b1:dc:9f:fb:d0:78:
d1:06:f3:67:91:55:82:b1:b6:00:9b:c5:26:58:ff:e4:cf:1c:
b5:fb:50:c5:b6:0b:8a:a4:97:4c:fd:bb:08:62:fa:59:5b:81:
7d:7f:00:a4:11:7d:f2:b9:f7:b4:38:30:a8:ae:41:4d:57:57:
1e:7c:7e:3b:8c:c6:41:69:b8:c7:38:a0:25:c7:c5:f2:90:76:
14:29:aa:b0:23:41:92:d1:6a:49:89:f3:2e:99:e8:34:73:3f:
d8:79:ae:21:bb:4d:8b:de:a2:47:fe:e7:55:71:b6:a5:ab:33:
29:89:ac:39:de:26:bb:52:65:18:32:1d:f7:b5:23:a0:07:ef:
de:03:3c:8c:c7:8e:ba:3e:36:82:0c:5a:3d:af:02:0d:82:c5:
e3:23:fc:18:52:bc:92:af:c9:b0:75:25:4c:88:8a:72:ad:b0:
9c:df:c7:62:40:98:4f:14:a6:17:2a:3c:a5:99:f7:96:9b:73:
09:02:34:35:88:dd:bb:a1:16:41:2a:b4:9e:13:b3:32:a7:66:
db:be:83:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pztJu4mj5GFgsE/HA/ZOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OWM5NzM4ZmM3YjFlNDA2NGM1YzYzNmJiYTZhOGI1NDkz
OTFjYTgwHhcNMjYwMzI2MTEwMTUzWhcNMjYwMzI3MTEwMTUzWjAzMTEwLwYDVQQD
EyhkOWI1Yjg4NDRmNDBmY2Y3MWFiZDViMWVlNTI1NWJmNTM1YWVkNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoHT+V8eott8cA+wfR8XawyjjXTT
AaT3TPOOgAjxRpS5Sk3MiDESl1EuCoIWH2l1FBNhvN4UyUUNAcruP0jQbqhbyy4d
a/e8wYBe7yZPc1bYAoLR0VQ8E1XIXSz/O0oxmCD0EpRvrAcsbhovMR6aqffd61Cb
10Cb6wyH9p3m+Lc+N69vyqqepYpy9h7V2DZf0y7gHjNj32bgN1YWdeLiTLsnwBMQ
5jw1VG3trzphX1ll+TO5HV9ecPH0uN7fmNuw5IAzgdsSoIEyN1FRmVUyzRcsC893
Nh+MVB4RNx9ZkBRc2vDwsRIC3CTocTLQ4knyvgn2qVMsfzDs8MF5SrcfJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNm1uIRPQPz3Gr1bHuUlW/U1rtQYMB8GA1UdIwQY
MBaAFAeclzj8ex5AZMXGNrumqLVJORyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zY2ZjZDktNDk0Yy00MWM4LTgxZTIt
ZDQxODE1M2EzMGE2LzEvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zY2ZjZDktNDk0Yy00MWM4LTgxZTItZDQxODE1M2EzMGE2
LzEvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4v2LpHX
/JHDvE/5b7cLl2JzCeh5oEjWly4uhMmz+9fTnOJ6ANAM/o5+zkT+F0yqsdyf+9B4
0QbzZ5FVgrG2AJvFJlj/5M8ctftQxbYLiqSXTP27CGL6WVuBfX8ApBF98rn3tDgw
qK5BTVdXHnx+O4zGQWm4xzigJcfF8pB2FCmqsCNBktFqSYnzLpnoNHM/2HmuIbtN
i96iR/7nVXG2paszKYmsOd4mu1JlGDId97UjoAfv3gM8jMeOuj42ggxaPa8CDYLF
4yP8GFK8kq/JsHUlTIiKcq2wnN/HYkCYTxSmFyo8pZn3lptzCQI0NYjdu6EWQSq0
nhOzMqdm276D5Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:54 2026 by rpki-client