Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: QxbuFBnbW2imAPMjByVlN7GQmn25srqDIWKWJ/Gz+zU=
Subject key identifier: FE:FE:22:F0:99:45:86:DF:D3:B8:B1:8C:C6:D4:61:E8:CF:B4:4D:80
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019F42088E522962D0513E57FE8F0CB5E561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0BFD
Signing time: Wed 08 Jul 2026 14:01:24 +0000
Manifest this update: Wed 08 Jul 2026 14:01:24 +0000
Manifest next update: Thu 09 Jul 2026 14:01:24 +0000
Files and hashes: 1: QxPgQhLZSciZvWPoXaWmbFy5GQE.roa (hash: 2+siJJXulwAfsr5WZH3cVtlll3XHnNe+UHkOgJC93jY=)
2: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: SimKw+Xg8RJRujnCsAj38VHs1uTu27n58ZIJ73apyEI=)
3: oDJd8k7v9hL4ELhX81UKtkrtMzs.roa (hash: ABmbVakjWPfaGm1nLXm6gvNYxUl2NncxIiAinPvtap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:08:8e:52:29:62:d0:51:3e:57:fe:8f:0c:b5:e5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Jul 8 14:01:24 2026 GMT
Not After : Jul 9 14:01:24 2026 GMT
Subject: CN=fefe22f0994586dfd3b8b18cc6d461e8cfb44d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ff:2e:24:7e:15:dd:26:39:8d:b1:3e:0a:bb:
12:b7:ea:0c:bc:41:cb:2e:44:a7:82:01:89:58:b7:
7d:0e:38:49:d6:09:cc:82:d3:34:67:f2:a2:27:4e:
34:cf:f9:f2:df:88:e0:d0:12:b2:89:8f:67:76:e4:
b1:c3:3b:4d:bb:2a:cd:4a:d0:29:2c:d2:93:4b:00:
4e:0d:fa:00:cb:c4:81:47:89:e5:bc:59:96:85:05:
92:20:b5:f7:41:55:29:80:14:39:b5:89:61:f4:94:
7b:80:d2:78:75:8e:51:96:5e:bb:7b:5a:a7:b9:6e:
5e:10:2a:01:51:d2:79:0d:12:88:ad:39:15:8a:a7:
da:dc:2d:ec:f9:4d:90:7a:c4:8b:8f:c9:02:ee:08:
0b:ac:5a:1e:99:6e:19:a0:d3:1b:b0:9a:89:d6:9f:
5d:fd:eb:45:11:50:b8:e2:fc:1e:f3:d2:de:76:33:
d5:56:71:18:3e:1a:df:0c:a5:6a:7e:20:78:de:8d:
93:6f:e2:fb:c5:d3:cc:d8:1b:9e:46:d7:53:a1:57:
16:93:79:26:75:35:d3:ee:17:6e:4a:95:e2:e2:8f:
65:68:27:c9:2d:b2:d5:23:82:31:58:15:1d:b0:92:
3e:94:1a:9c:0d:dd:bc:19:40:82:45:67:30:c1:bd:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FE:22:F0:99:45:86:DF:D3:B8:B1:8C:C6:D4:61:E8:CF:B4:4D:80
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:f9:3e:9f:cc:76:35:bc:2e:86:d2:0e:2a:7a:8b:2d:a6:29:
06:52:8a:03:f8:76:ca:b7:05:dd:9e:0e:69:32:86:bd:b5:62:
2c:1e:87:19:9a:ee:bc:d1:1b:74:c6:39:d1:f1:b7:c6:c1:ed:
7c:08:d0:5b:db:66:bc:14:ca:18:a0:01:95:6d:fd:45:76:2e:
34:68:b3:62:37:ca:14:bc:d1:57:ac:14:a8:7c:23:fa:47:24:
26:6b:94:16:d2:fa:71:d4:18:b8:ed:6f:d1:70:40:0f:c1:09:
7b:d1:1e:55:d2:1b:0b:a5:f4:2a:51:24:34:cf:b1:d4:56:84:
c5:81:56:26:a5:0d:1d:8c:be:bc:7a:ef:70:d8:39:86:88:55:
55:9a:4c:34:d2:5c:0c:72:1b:23:a3:1a:fb:9e:37:f7:06:fc:
e7:36:18:8a:dc:27:9b:00:69:5d:b3:66:15:03:eb:04:0c:3f:
2e:24:16:eb:5f:5c:fd:c4:bd:99:30:d9:04:5e:01:d7:bf:92:
36:da:2d:ee:17:1b:75:3d:20:e9:a9:33:76:94:e2:5f:ff:6e:
90:4c:03:53:e2:ef:9f:41:fe:66:7c:72:a1:59:0a:8e:69:74:
79:0c:af:6f:96:0a:25:65:43:fa:57:38:a6:65:3d:10:d6:9d:
11:ef:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:30:08 2026 by rpki-client