Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json)
Hash identifier: YDHVDwehSmr86rFg05g4Yqi6ZyPotHbG37im6BDerLA=
Subject key identifier: A6:6E:8D:C0:A6:FF:CE:51:60:5D:82:13:13:42:74:81:57:25:40:0E
Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Certificate serial: 019D3865887F2EE5A219FF5F034659AF211B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
Manifest number: 18A4
Signing time: Sun 29 Mar 2026 07:01:11 +0000
Manifest this update: Sun 29 Mar 2026 07:01:11 +0000
Manifest next update: Mon 30 Mar 2026 07:01:11 +0000
Files and hashes: 1: X6yij2F2wCS9SNyg0X2W1evj5UY.roa (hash: NA6kYJC1nLmQ9K7t2tSV4/j0mb+VEM1Maf4SLgSq/gU=)
2: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: +uM44RYqw1s4Tg4Cj2/sxhH68zYEm1xWKCo+DIvcqyY=)
3: cMI6xFuuN3kOOUkjFl-dw7vQpxk.roa (hash: QMhkNofXWtqJpzrnd1DVBgskNLYUlXU/ZSYppiY4PcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:88:7f:2e:e5:a2:19:ff:5f:03:46:59:af:21:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7
Validity
Not Before: Mar 29 07:01:11 2026 GMT
Not After : Mar 30 07:01:11 2026 GMT
Subject: CN=a66e8dc0a6ffce51605d8213134274815725400e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:ff:9b:71:99:ed:d1:fd:8a:3c:ee:38:94:
04:97:65:59:a1:4b:2a:1f:69:0a:fb:7f:df:7c:a1:
a6:c1:b1:f2:cd:b3:25:03:a7:43:32:9f:0e:f2:e0:
20:30:e4:b1:c7:51:92:b2:17:46:86:49:1c:02:91:
79:26:82:77:62:74:4a:f0:58:3b:71:c3:ba:21:8b:
b5:91:38:a4:73:e0:da:68:9f:50:9d:a5:f3:34:1b:
dc:b3:22:af:7a:be:77:ab:42:c5:f4:d9:ff:b4:5b:
5b:e3:b9:05:18:1e:dd:6f:97:ee:38:6a:34:53:f4:
ca:76:83:58:ed:f7:61:c7:90:da:4c:a0:52:62:e3:
43:55:f3:a5:04:44:2c:74:a9:9a:e0:f0:e2:78:3d:
27:5a:20:40:82:6a:b7:da:43:49:9a:fa:db:8b:90:
4d:bb:89:93:14:68:84:8e:9d:a6:19:45:2d:25:d3:
fd:ac:3d:52:5e:1b:84:e9:c5:ab:cc:e7:a2:15:40:
5e:87:ba:11:5b:53:39:a3:a9:db:7e:35:38:48:c1:
2c:47:ce:30:e7:5e:a5:60:99:65:38:ed:cd:d4:3b:
82:e8:7b:f6:5b:ec:3d:28:7b:82:64:c3:ea:51:b7:
5c:4c:15:0b:df:a5:ed:a3:f3:83:ed:9e:50:f2:66:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6E:8D:C0:A6:FF:CE:51:60:5D:82:13:13:42:74:81:57:25:40:0E
X509v3 Authority Key Identifier:
keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:01:e1:c8:03:d8:7b:da:3a:72:fa:e6:18:29:63:87:cb:93:
31:d8:57:70:ba:76:ce:ea:b4:e9:81:bb:03:f5:a6:57:45:20:
ef:45:7e:50:ce:a2:86:c4:93:9d:9c:07:ee:b3:3b:71:74:ba:
d9:49:0c:28:8a:74:4c:bc:cb:82:e5:fd:13:41:2e:c1:fa:c4:
69:8e:a8:ad:48:a7:b0:01:b2:bd:fb:a7:49:a5:13:fb:80:f8:
84:c7:1d:8a:2a:25:09:f5:54:41:6a:b7:f0:24:a0:75:ce:37:
d2:40:1d:c9:f0:0a:40:3f:77:85:15:1e:66:7f:03:80:00:10:
48:4e:72:d9:13:63:21:00:c5:fe:be:f2:38:c6:40:90:a5:3b:
17:ea:bc:33:b5:1f:18:91:de:67:03:38:8b:39:b5:80:3b:59:
a9:ca:e7:98:8d:03:72:03:37:3e:6f:b5:4a:25:65:6f:3f:16:
76:a4:6f:a6:e9:a3:32:01:ef:1b:8c:44:ab:df:5f:90:3e:0e:
49:74:ec:09:52:d9:95:6d:0c:60:4d:6d:f8:6f:9b:40:77:bf:
70:1d:37:23:df:d8:36:cf:18:ea:8b:eb:7d:f4:58:78:ec:6f:
20:4a:45:1c:26:f0:19:48:1f:d7:3e:57:cc:5b:f7:20:e5:3c:
dc:5b:6b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:48 2026 by rpki-client