Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
File: fQDvTzv2W4fPoC73tKZYm6LeT_c.mft (raw, json)
Hash identifier: WxOi4w7zf3XXf0yf9Q7exLvsjl1ibUj4fbhIbAEMvzM=
Subject key identifier: 8E:3A:C5:DE:B2:D4:A2:64:81:04:87:C1:49:07:39:76:67:0E:2A:90
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Certificate issuer: /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial: 019D38D39F440E339CA0F7C46D858D9D4C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
Manifest number: 1095
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: fQDvTzv2W4fPoC73tKZYm6LeT_c.crl (hash: zYKa5K9TDuwdJB+IbhoRFkH+oL9SSTGIQSSdQpDzN/E=)
2: hGI3ocS-L58v4Or7ijp-3kbHDDI.roa (hash: KGbTVHSNg2+WZM2vF2JiCGPUm6fdzfEhTo+s9xkWkXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9f:44:0e:33:9c:a0:f7:c4:6d:85:8d:9d:4c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=8e3ac5deb2d4a264810487c149073976670e2a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:26:87:71:9e:34:47:97:53:d1:95:7f:64:
46:2f:cd:ed:0b:5b:76:55:5b:78:44:a3:d7:41:b4:
b4:30:6b:76:22:69:7e:8e:ac:b9:6c:29:55:30:1f:
3d:36:55:8f:cf:1d:9f:13:c5:dc:75:1c:80:21:22:
c4:b3:64:2c:3c:bf:37:f5:85:d6:6d:5f:cc:68:4c:
16:6b:d5:ec:cf:02:a1:15:5d:a7:d4:4f:96:b1:9a:
d3:11:1c:80:a6:41:1e:c4:f6:b3:d7:c8:d6:c2:ab:
1e:8e:58:8e:a5:47:50:19:ae:60:5c:b1:26:be:e5:
43:24:bf:d4:a0:ad:e7:6e:68:5a:c9:d0:2d:8a:19:
0c:10:ff:1e:a1:06:f7:37:14:74:59:f1:4c:84:aa:
fe:a8:32:ca:b1:89:92:ef:76:95:86:2d:2e:ab:60:
04:1d:50:c0:db:17:bb:d6:90:cd:8d:95:bd:ca:3a:
bb:1c:e1:3f:e2:8f:b0:05:91:54:e9:9f:d1:4a:46:
e4:ae:e6:f3:ab:39:ec:0d:8d:c8:cc:08:9f:1a:98:
ce:3f:88:19:71:57:81:9f:cb:85:81:70:fc:f7:ec:
8a:1c:0e:c6:73:22:97:88:65:f1:ac:62:00:d3:fd:
98:5e:ee:ad:f1:98:bc:33:57:67:4b:df:dc:e1:dc:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3A:C5:DE:B2:D4:A2:64:81:04:87:C1:49:07:39:76:67:0E:2A:90
X509v3 Authority Key Identifier:
keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a0:ca:86:fa:d8:21:5b:31:d9:00:89:d3:bb:3c:37:45:ae:
19:91:43:bd:cf:4e:b6:8a:c7:08:f0:29:67:f0:bf:e5:c9:01:
fd:01:9b:0a:8d:9f:a8:80:83:84:5a:37:5f:72:b9:d7:d3:58:
46:73:74:48:31:e7:82:aa:86:d0:6e:a5:92:1d:32:a1:71:a1:
24:43:18:d7:1f:26:e6:72:f2:f5:72:a5:f9:03:2b:26:42:c8:
dd:20:45:53:e1:ef:40:50:73:72:cc:23:99:10:21:dc:68:9b:
36:1a:77:56:f5:5d:4b:b8:5b:b4:b8:7e:9f:7c:4d:6e:23:21:
77:29:70:52:12:5c:89:96:43:f9:78:cb:75:90:71:7f:88:77:
70:3e:6e:a5:83:c0:9f:dd:59:e1:12:72:c4:2b:0e:04:a0:54:
ee:a5:aa:ba:82:6e:c1:1d:9d:b7:64:0b:a4:cf:90:11:5c:9e:
ed:61:31:b4:62:83:bd:dc:b8:02:ae:49:9b:16:a8:a3:f2:92:
45:58:ef:a1:c5:2c:1c:95:16:a0:9f:cd:0d:a8:6b:a9:b1:0a:
46:f2:ab:1e:7a:fb:d8:88:ec:05:16:97:12:86:29:c5:e7:c5:
90:c9:43:b6:ac:d7:1e:f1:ae:37:e2:c4:1b:57:ba:1d:11:ff:
74:29:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:34 2026 by rpki-client