Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: j5q8DCSYR2h5d6HqNUBrF8zBx/Yh0a++ApZYqkpnwP4=
Subject key identifier: 29:AA:05:1F:9B:29:3F:6F:9E:5E:97:66:3D:5E:E8:C2:F1:97:85:F7
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019E566D9D3F11959F32EFAC09F93BBDFFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0B83
Signing time: Sat 23 May 2026 20:01:24 +0000
Manifest this update: Sat 23 May 2026 20:01:24 +0000
Manifest next update: Sun 24 May 2026 20:01:24 +0000
Files and hashes: 1: QxPgQhLZSciZvWPoXaWmbFy5GQE.roa (hash: 2+siJJXulwAfsr5WZH3cVtlll3XHnNe+UHkOgJC93jY=)
2: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: vX8qcK2VFmDQrPm5CAVja/bUHatg3atggtl8wyz5t/s=)
3: oDJd8k7v9hL4ELhX81UKtkrtMzs.roa (hash: ABmbVakjWPfaGm1nLXm6gvNYxUl2NncxIiAinPvtap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:56:6d:9d:3f:11:95:9f:32:ef:ac:09:f9:3b:bd:ff:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: May 23 20:01:24 2026 GMT
Not After : May 24 20:01:24 2026 GMT
Subject: CN=29aa051f9b293f6f9e5e97663d5ee8c2f19785f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:e1:c8:74:d7:04:00:ec:18:a4:77:23:28:
1e:50:34:6b:cc:17:b7:5e:60:85:5d:7f:32:1d:00:
ff:a9:2b:a4:e8:85:0b:48:50:41:f3:66:ee:e9:1d:
4b:a2:c5:16:91:04:e5:3e:da:8c:1f:f2:00:e4:35:
41:37:08:4b:ac:39:37:b3:9e:60:cc:4a:48:99:64:
df:cb:85:be:d6:34:6d:5c:a8:6e:17:0d:18:2a:69:
45:68:7d:02:4d:cc:35:b4:9d:79:e5:4c:42:2f:1f:
70:35:46:e7:e9:4a:8f:67:d6:b2:b7:62:3c:4e:22:
43:7c:65:40:29:5e:e5:4c:27:e1:97:3f:6a:9b:10:
de:2c:42:9d:73:73:1c:a3:9e:4c:d9:67:21:54:08:
47:1b:cd:49:1d:58:7c:11:fd:7a:a5:58:a6:a6:21:
49:ce:29:08:4d:dc:2d:35:68:5d:8f:5c:66:42:e0:
60:9e:dd:be:a2:80:a4:ff:cb:d2:1d:9b:5b:e9:6f:
9a:d9:56:66:e2:53:79:79:15:6c:db:16:3f:af:0a:
82:75:30:9b:be:70:76:d8:f2:88:29:e5:a6:7a:d2:
cb:6a:8a:ba:98:56:3b:1a:b9:cf:da:76:e0:58:4c:
da:cc:a7:2b:1a:c9:fb:19:56:da:76:3b:7f:a5:8f:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AA:05:1F:9B:29:3F:6F:9E:5E:97:66:3D:5E:E8:C2:F1:97:85:F7
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a8:cd:6e:ef:1d:76:4e:00:34:23:75:c7:05:8c:9e:23:a3:
b8:18:57:a9:01:33:12:3d:1d:5c:0a:73:bb:e4:44:c0:74:89:
65:b4:b2:af:bf:49:8e:67:fa:12:e1:53:a3:bd:97:83:90:e7:
6b:51:a6:77:d4:b5:73:45:ae:9f:69:da:e9:b7:b6:68:1f:6e:
0a:df:c1:f0:f5:c9:25:49:8f:95:b0:f4:d6:60:33:17:40:a5:
e2:8d:23:ff:ef:55:cb:52:53:0d:97:eb:f2:e0:8d:4d:ba:21:
56:86:fc:63:85:7d:67:d3:74:8b:2c:7b:23:52:5c:53:35:18:
d9:97:5e:5c:11:87:d0:07:0e:2b:ac:ed:3e:be:25:ee:c4:e8:
b3:f3:92:dc:a9:a2:06:12:76:e7:b0:20:b6:67:86:6b:0a:b4:
1a:df:67:a1:6c:3b:b8:1d:3f:1d:bf:66:8b:9a:3e:cc:0c:fa:
30:dd:61:d1:5f:25:24:a5:f2:9f:e6:8d:ce:3f:ad:db:d4:53:
68:17:0f:d2:2e:cf:19:4a:03:88:b8:d1:d3:5a:4b:96:bd:eb:
f6:93:be:4d:99:ad:ac:8f:71:cb:3f:6f:17:bd:4d:db:70:2f:
4c:9b:1b:14:57:70:15:01:9c:39:1d:b6:55:fc:8a:85:7f:39:
00:a8:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:20 2026 by rpki-client