Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier: AuzQNmA3ANFCBzPr7uIa2+y862LteaN7VP+33uWztVo=
Subject key identifier: 17:EE:69:08:8D:E3:D0:2F:13:63:B8:86:B7:9F:7C:1D:EB:4B:27:DA
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 019D39E5877BF95B787E789B9C359AEFD4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number: 09A2
Signing time: Sun 29 Mar 2026 14:00:36 +0000
Manifest this update: Sun 29 Mar 2026 14:00:36 +0000
Manifest next update: Mon 30 Mar 2026 14:00:36 +0000
Files and hashes: 1: Wx2W2x44SbNMpet_nxHfcd54RRg.roa (hash: RaqqpE5anacxSOoNS8mABkC5o0iVF+x65+b349Ql+4w=)
2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: dMkmaVuK0LlmE0uXkv3Cmh0qxSkHz+ZOat7IEWfS98E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:87:7b:f9:5b:78:7e:78:9b:9c:35:9a:ef:d4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: Mar 29 14:00:36 2026 GMT
Not After : Mar 30 14:00:36 2026 GMT
Subject: CN=17ee69088de3d02f1363b886b79f7c1deb4b27da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:e8:df:97:ad:de:b6:f4:3f:88:b8:d6:93:
2e:bd:45:e2:c8:a0:ca:d3:8f:a6:f8:10:a4:c8:28:
bb:f4:27:e8:ef:7a:4b:7f:91:f3:d0:e7:fc:c2:68:
31:2c:86:52:2d:60:d5:9b:c9:09:f8:2a:3b:bf:f3:
5a:91:d5:50:8a:8d:83:6a:25:b2:28:fc:f3:2d:6b:
d4:e2:33:44:f5:10:1d:21:6c:d9:ae:ae:b5:b5:93:
cc:10:6e:24:66:4c:a6:07:62:88:c0:24:41:97:45:
68:f1:71:8a:13:1b:88:d9:42:fd:52:02:6b:42:03:
ed:54:9d:cc:ab:70:c9:92:79:07:e2:86:20:f7:b8:
40:57:88:a5:39:c9:53:8f:1e:b6:81:23:aa:a1:24:
fe:96:44:8a:2d:df:94:3e:01:87:a0:48:5c:c2:ad:
e5:40:25:f8:b8:73:de:f6:34:7a:83:4a:f1:30:8b:
86:d6:a5:7f:cc:eb:2f:de:bf:55:f6:3d:04:d0:26:
1e:8a:6d:0c:ec:be:cd:55:34:e9:45:f6:86:20:08:
26:e2:78:89:2e:d1:3f:e0:d3:91:a7:b3:9f:63:be:
02:d9:57:16:b6:d9:fb:64:fd:48:52:03:2c:05:0b:
9f:e6:5e:49:24:b5:08:8e:34:83:7d:48:c4:51:af:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EE:69:08:8D:E3:D0:2F:13:63:B8:86:B7:9F:7C:1D:EB:4B:27:DA
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d8:3f:28:cf:15:5a:fe:e9:96:6e:32:99:8e:cb:84:47:34:
59:3b:dc:88:fe:20:73:b1:b5:17:b6:c5:c3:7c:cd:4e:03:0a:
e1:4e:0b:f3:0a:c3:ba:fc:f1:db:c7:3a:2d:b3:eb:ad:50:f6:
0c:6d:45:61:4d:04:a0:7f:e1:c5:b8:8c:96:10:39:66:7c:a3:
73:89:8a:a0:37:5c:69:ae:08:0b:9a:f5:d5:be:36:81:29:87:
62:ae:02:1f:23:e0:2f:87:c0:5b:4d:a8:74:d5:5d:86:5d:8c:
1b:7f:f5:57:83:8b:5f:42:b3:e7:f1:d6:78:4d:d5:81:1b:0a:
29:be:66:b0:d0:5e:5e:ca:9f:8e:ba:31:b5:c6:e5:59:b0:b1:
5e:14:25:e1:8a:c7:37:a2:08:32:e8:8a:c5:b3:68:fb:37:ae:
c9:2f:f0:c4:99:f8:bc:a3:7b:aa:40:cf:ed:60:f9:ad:42:3c:
fd:d8:d5:65:f7:02:70:bc:6c:3d:87:86:0f:f7:b6:be:90:c9:
7c:c7:cb:5e:42:cb:38:ba:38:6c:ca:21:8f:f1:c6:33:89:b5:
d2:1e:0e:3c:04:46:5a:ac:b7:0e:ce:64:08:2d:22:8a:db:22:
93:16:4b:d7:4a:a4:44:bc:39:b8:e1:85:ca:d5:66:19:6f:f8:
de:45:19:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055Yd7+Vt4fnibnDWa79T9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZDUxZGMxMDJhNDk3NTE4ZTE2MDkxZTY1ZTgwNWMyNDM4
ZWYyNWIwHhcNMjYwMzI5MTQwMDM2WhcNMjYwMzMwMTQwMDM2WjAzMTEwLwYDVQQD
EygxN2VlNjkwODhkZTNkMDJmMTM2M2I4ODZiNzlmN2MxZGViNGIyN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZHo35et3rb0P4i41pMuvUXiyKDK
04+m+BCkyCi79Cfo73pLf5Hz0Of8wmgxLIZSLWDVm8kJ+Co7v/NakdVQio2DaiWy
KPzzLWvU4jNE9RAdIWzZrq61tZPMEG4kZkymB2KIwCRBl0Vo8XGKExuI2UL9UgJr
QgPtVJ3Mq3DJknkH4oYg97hAV4ilOclTjx62gSOqoST+lkSKLd+UPgGHoEhcwq3l
QCX4uHPe9jR6g0rxMIuG1qV/zOsv3r9V9j0E0CYeim0M7L7NVTTpRfaGIAgm4niJ
LtE/4NORp7OfY74C2VcWttn7ZP1IUgMsBQuf5l5JJLUIjjSDfUjEUa+NpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfuaQiN49AvE2O4hreffB3rSyfaMB8GA1UdIwQY
MBaAFH3VHcECpJdRjhYJHmXoBcJDjvJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGIt
NzZlNGUxYzkzNjA2LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGItNzZlNGUxYzkzNjA2
LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEdg/KM8V
Wv7plm4ymY7LhEc0WTvciP4gc7G1F7bFw3zNTgMK4U4L8wrDuvzx28c6LbPrrVD2
DG1FYU0EoH/hxbiMlhA5Znyjc4mKoDdcaa4IC5r11b42gSmHYq4CHyPgL4fAW02o
dNVdhl2MG3/1V4OLX0Kz5/HWeE3VgRsKKb5msNBeXsqfjroxtcblWbCxXhQl4YrH
N6IIMuiKxbNo+zeuyS/wxJn4vKN7qkDP7WD5rUI8/djVZfcCcLxsPYeGD/e2vpDJ
fMfLXkLLOLo4bMohj/HGM4m10h4OPARGWqy3Ds5kCC0iitsikxZL10qkRLw5uOGF
ytVmGW/43kUZ/g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:11:06 2026 by rpki-client