Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
File: cF3hUpBmZK56yfIIesTQBoWl1_A.mft (raw, json)
Hash identifier: nP8XqhObCIBoIRSYVUnjuQFx7o1PZeir9Y2Cz5UxlRE=
Subject key identifier: 7A:8D:51:C6:FF:04:BD:2E:9E:67:0A:A5:D2:5A:1B:15:59:DD:80:12
Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
Certificate issuer: /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Certificate serial: 019D27727DCDB60F8CD3269A23B9867390E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:47 +0000
Manifest this update: Thu 26 Mar 2026 00:01:47 +0000
Manifest next update: Fri 27 Mar 2026 00:01:47 +0000
Files and hashes: 1: cF3hUpBmZK56yfIIesTQBoWl1_A.crl (hash: dGNBHpmN4g0JK3D6KAD3MwHtvY16o7ZwowSBxUz46OQ=)
2: y7AqiXLlolDvCA4ci8GI1FGSGEk.roa (hash: SHdF4S1wOxIU7MQoEG79yqjjmd2Uh7jceITC2kby4Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7d:cd:b6:0f:8c:d3:26:9a:23:b9:86:73:90:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Validity
Not Before: Mar 26 00:01:47 2026 GMT
Not After : Mar 27 00:01:47 2026 GMT
Subject: CN=7a8d51c6ff04bd2e9e670aa5d25a1b1559dd8012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:80:78:ed:32:6e:c0:1c:11:25:f9:c9:2a:
7a:25:a5:31:87:c9:5c:21:d7:68:4f:54:3a:46:49:
53:a5:49:3c:18:4a:81:20:39:0b:24:d1:89:4f:ba:
a0:9d:c6:b7:43:30:08:47:9a:f2:dd:82:13:ef:ea:
3b:24:52:43:cb:eb:31:a7:f3:58:38:47:44:f7:f1:
7a:9f:67:3e:f6:7d:8a:2c:df:a8:14:b1:ab:b6:38:
ed:34:c7:1d:70:2f:f7:8e:94:a3:18:b5:14:ae:aa:
11:33:20:a9:e2:ee:f4:02:40:cb:50:e3:08:4e:fb:
a1:f2:de:38:80:1b:d3:43:cd:2d:10:d8:a7:a6:ee:
96:a6:8b:1c:ab:15:af:af:69:9b:d1:a3:ca:9e:9a:
1c:d1:c9:86:9f:84:95:05:cc:e9:25:b0:c8:d9:bc:
3e:4a:9b:b4:c8:38:c8:b0:f9:2b:32:a5:e6:ab:32:
e9:b0:da:86:76:0f:33:4e:9b:7e:4e:6e:2d:44:dc:
0a:25:85:23:bd:9e:fd:cb:91:63:10:cd:4f:fb:02:
6f:a8:cb:85:2e:3c:0c:07:e1:5d:0d:34:b3:93:b8:
9f:84:17:76:3a:74:fd:5f:a9:9f:1d:33:03:5e:36:
03:41:a0:44:df:64:ef:ca:77:19:ce:96:fc:42:d7:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:51:C6:FF:04:BD:2E:9E:67:0A:A5:D2:5A:1B:15:59:DD:80:12
X509v3 Authority Key Identifier:
keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:77:61:1a:61:14:3b:e3:85:5e:19:d4:e0:94:a4:df:0e:8e:
3c:dc:fd:cb:e0:0d:f0:f0:5c:ac:fe:7b:77:1f:b3:08:23:0f:
bb:00:b1:46:76:9a:c2:02:ed:e4:ab:bd:3c:2c:f4:e7:35:06:
b2:16:97:e7:0d:25:7b:96:4c:c4:7b:ab:55:bd:7a:67:80:eb:
4c:79:53:8c:1f:1d:18:64:31:55:63:c7:ce:13:8f:3a:f2:66:
fd:4f:97:f3:9b:1c:b6:ac:ff:b9:72:c0:d5:13:06:74:d0:e9:
4a:8f:6b:cb:f7:be:a2:4d:cf:a4:09:3b:83:aa:d8:10:18:0a:
e3:60:54:a9:03:5a:27:fd:02:da:4f:9f:22:14:0c:cf:6f:5e:
e4:f7:f5:4d:26:30:b2:ee:2f:8f:34:e6:bb:3a:d4:a7:d6:16:
4f:1f:be:81:6e:67:88:3b:65:65:36:01:6f:a0:30:76:43:7a:
7c:75:64:9a:65:3c:fe:3d:7a:bb:80:44:cc:cd:e9:22:d4:d1:
13:73:da:14:a0:9c:02:d4:91:90:5c:cc:09:66:a5:af:a4:5d:
b8:fe:2b:c7:63:19:60:71:6e:35:3f:f4:74:7f:70:78:ee:30:
84:ce:57:a1:46:ab:fb:0d:f9:67:ae:57:a1:3d:74:61:1a:07:
9c:a5:31:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncn3Ntg+M0yaaI7mGc5DkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNWRlMTUyOTA2NjY0YWU3YWM5ZjIwODdhYzRkMDA2ODVh
NWQ3ZjAwHhcNMjYwMzI2MDAwMTQ3WhcNMjYwMzI3MDAwMTQ3WjAzMTEwLwYDVQQD
Eyg3YThkNTFjNmZmMDRiZDJlOWU2NzBhYTVkMjVhMWIxNTU5ZGQ4MDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxOAeO0ybsAcESX5ySp6JaUxh8lc
IddoT1Q6RklTpUk8GEqBIDkLJNGJT7qgnca3QzAIR5ry3YIT7+o7JFJDy+sxp/NY
OEdE9/F6n2c+9n2KLN+oFLGrtjjtNMcdcC/3jpSjGLUUrqoRMyCp4u70AkDLUOMI
Tvuh8t44gBvTQ80tENinpu6WposcqxWvr2mb0aPKnpoc0cmGn4SVBczpJbDI2bw+
Spu0yDjIsPkrMqXmqzLpsNqGdg8zTpt+Tm4tRNwKJYUjvZ79y5FjEM1P+wJvqMuF
LjwMB+FdDTSzk7ifhBd2OnT9X6mfHTMDXjYDQaBE32TvyncZzpb8QteZAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqNUcb/BL0unmcKpdJaGxVZ3YASMB8GA1UdIwQY
MBaAFHBd4VKQZmSuesnyCHrE0AaFpdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8yMTJhNzYtNzkzNC00Y2MxLTgyYzQt
ZjU2MTg0NzdmOGQ0LzEvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8yMTJhNzYtNzkzNC00Y2MxLTgyYzQtZjU2MTg0NzdmOGQ0
LzEvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXdhGmEU
O+OFXhnU4JSk3w6OPNz9y+AN8PBcrP57dx+zCCMPuwCxRnaawgLt5Ku9PCz05zUG
shaX5w0le5ZMxHurVb16Z4DrTHlTjB8dGGQxVWPHzhOPOvJm/U+X85sctqz/uXLA
1RMGdNDpSo9ry/e+ok3PpAk7g6rYEBgK42BUqQNaJ/0C2k+fIhQMz29e5Pf1TSYw
su4vjzTmuzrUp9YWTx++gW5niDtlZTYBb6AwdkN6fHVkmmU8/j16u4BEzM3pItTR
E3PaFKCcAtSRkFzMCWalr6RduP4rx2MZYHFuNT/0dH9weO4whM5XoUar+w35Z65X
oT10YRoHnKUxYw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:59 2026 by rpki-client