
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File: Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier: 6XluMippsxkENAw6GhFxfFoqe9d/BBMAB/GF9eWf8Yg=
Subject key identifier: C7:26:C7:A1:8B:66:37:DE:5C:28:A5:DC:31:C3:39:78:A5:A7:64:DA
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 019DA8302C6C7D3ACC5C163F0D72C0059AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number: 1065
Signing time: Mon 20 Apr 2026 00:00:22 +0000
Manifest this update: Mon 20 Apr 2026 00:00:22 +0000
Manifest next update: Tue 21 Apr 2026 00:00:22 +0000
Files and hashes: 1: 3x_eNlfqr-pzS31r85Kyh1RTzhw.roa (hash: ca0B1hA6S7RSMd4p7jDgIrOLafYEE67HR7dN2aYSue0=)
2: AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa (hash: UJ521U9kX8KbpPJ5yoTgLuBYMW8RZw/CsvE9VFkznzw=)
3: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: ljQl3d7LwO31L/9YU3pEeGQjfeYcR3zwTfwluYHRV7k=)
4: k3Io6XWMMdN-bVtwln4_8KO-IVA.roa (hash: Aa8iwiJFepHxrsbFSA+APkKdOhzyuMHdrvQewpxY1oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:30:2c:6c:7d:3a:cc:5c:16:3f:0d:72:c0:05:9a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Apr 20 00:00:22 2026 GMT
Not After : Apr 21 00:00:22 2026 GMT
Subject: CN=c726c7a18b6637de5c28a5dc31c33978a5a764da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:7f:bc:eb:50:b5:ac:a0:35:ab:68:fc:4f:
fa:63:7e:90:9d:fb:c1:52:c7:a2:64:93:a1:a9:45:
fe:e0:a0:38:aa:f1:83:6a:67:bc:c6:98:4d:cb:0a:
f8:aa:cc:fe:6a:73:32:49:0f:ca:40:8e:15:df:89:
14:6b:fc:1b:44:fc:82:01:ac:4c:4d:03:9c:29:85:
8c:8a:61:4e:26:7d:ee:9f:39:a2:dc:60:75:c7:0b:
0c:99:df:eb:71:37:f1:83:be:48:7a:2c:54:b5:27:
79:88:08:aa:26:a0:c2:c4:39:9d:9d:d5:49:c0:0c:
bc:df:88:f2:28:c6:72:69:b2:00:fd:a1:a7:74:e8:
e4:30:5a:21:6b:1e:35:8b:73:41:65:ac:ab:fa:d1:
57:00:06:3b:86:d2:3c:b9:0e:f4:f4:ae:ee:39:63:
6d:d1:a4:98:0e:af:54:81:e1:a1:04:db:5d:d1:fd:
41:7b:0e:8e:8c:80:ee:f6:18:cc:f2:96:eb:13:a1:
d9:a7:19:30:c5:47:19:1b:18:e1:f9:38:6e:f8:b9:
d8:b8:fb:23:14:75:f5:bf:6c:f0:2d:28:e1:36:18:
c2:fd:d5:01:4b:b3:b0:ba:fc:36:0d:93:54:7a:ca:
7e:d5:cf:5d:6f:7c:15:54:40:51:8e:d8:17:c7:2e:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:26:C7:A1:8B:66:37:DE:5C:28:A5:DC:31:C3:39:78:A5:A7:64:DA
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7d:a9:0d:09:ea:ae:be:61:e3:25:04:89:11:32:2b:06:45:
61:70:b7:61:d5:31:5a:c3:bc:02:19:6b:45:88:8a:95:00:b1:
e0:0f:ac:81:5e:d1:16:41:3b:0d:e8:4e:b8:7c:1b:11:96:df:
48:1d:ba:2c:3e:7c:31:51:01:b5:31:db:6f:34:cb:a4:ab:c2:
d8:2d:c6:83:0c:d2:4b:6d:08:0b:9b:93:d2:fe:73:10:c1:b2:
7c:a6:3a:66:fa:96:ee:7c:c4:e7:ec:73:85:78:d2:bd:77:3f:
de:43:30:47:ad:be:07:39:23:0c:35:3c:8b:58:a5:7e:61:97:
1b:41:c8:28:da:9b:84:fb:58:2e:bc:97:af:8e:5a:0c:4e:93:
d0:ff:c1:33:ba:10:aa:51:ae:67:b3:3d:fc:ab:d2:65:9a:25:
b8:f3:73:cb:59:73:bb:64:e0:3d:7e:7d:49:41:7e:ec:97:ae:
c8:e5:fe:4b:a5:3f:94:e3:26:75:30:55:7d:11:00:59:84:7a:
68:c1:20:c2:33:1a:05:b1:88:e5:da:63:f0:91:e4:50:ab:45:
98:cd:57:b8:23:ca:ea:30:84:fd:e8:76:f9:cc:c5:a1:b9:45:
bd:ca:13:99:9c:1f:f5:77:50:18:0e:49:f1:49:bf:4b:94:42:
54:29:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:33:12 2026 by rpki-client