Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: ud1wM6sebwlDZL4/CfvoSqFgIavHt4MkqXSYTCaO5o0=
Subject key identifier: 12:F7:6F:26:7D:57:79:C8:E5:B2:84:12:65:6D:FB:F9:BD:14:CD:08
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 01A029C6294A1C253FA01F7AD0854340ED56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0C75
Signing time: Sat 22 Aug 2026 14:00:47 +0000
Manifest this update: Sat 22 Aug 2026 14:00:47 +0000
Manifest next update: Sun 23 Aug 2026 14:00:47 +0000
Files and hashes: 1: QxPgQhLZSciZvWPoXaWmbFy5GQE.roa (hash: 2+siJJXulwAfsr5WZH3cVtlll3XHnNe+UHkOgJC93jY=)
2: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: HMNvq6WFQzUAw3QIj8pri7djXB1z5K9H4JLrdxsuWy4=)
3: oDJd8k7v9hL4ELhX81UKtkrtMzs.roa (hash: ABmbVakjWPfaGm1nLXm6gvNYxUl2NncxIiAinPvtap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:c6:29:4a:1c:25:3f:a0:1f:7a:d0:85:43:40:ed:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Aug 22 14:00:47 2026 GMT
Not After : Aug 23 14:00:47 2026 GMT
Subject: CN=12f76f267d5779c8e5b28412656dfbf9bd14cd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:be:50:c8:6f:60:13:38:90:22:88:25:7b:
d9:dc:57:b5:aa:7a:5d:3a:87:5d:03:b9:70:1b:51:
31:0f:14:41:9a:1c:8c:f7:88:26:f0:17:b4:50:4e:
ee:96:42:0d:0e:06:03:15:b3:6c:a5:52:f4:3b:91:
16:ee:5b:f1:1a:f1:44:83:f5:e2:b0:1e:22:ed:59:
13:93:d4:b1:dd:d9:67:15:6a:b6:0d:e0:8d:b2:2f:
40:64:51:9c:fe:4c:20:45:54:ca:b0:61:c9:18:2a:
50:4c:76:9f:9a:2c:b5:97:22:14:65:ed:79:46:84:
63:e8:01:ad:a5:22:dc:11:00:46:cd:5b:ad:42:81:
3e:91:13:be:8a:11:b7:10:bc:88:13:49:ad:45:b0:
ed:19:f6:e9:52:4d:59:17:be:e2:ca:d1:ae:b7:52:
80:e0:18:a7:84:8e:de:58:ff:c3:24:ab:e7:4f:58:
0a:72:7b:d6:82:d8:cd:0c:1e:ef:2e:99:49:db:4f:
b8:31:09:ad:aa:4d:c4:57:6d:a2:99:56:3f:4e:aa:
a1:59:72:f0:8d:00:2e:6d:34:28:2c:9b:5c:44:0b:
b5:56:b4:b9:76:9b:e0:54:f7:1c:96:30:16:ec:db:
ba:c4:c1:5c:a9:c1:f9:a2:30:8d:4f:1d:7a:bb:83:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F7:6F:26:7D:57:79:C8:E5:B2:84:12:65:6D:FB:F9:BD:14:CD:08
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:78:4b:d8:3b:7b:66:17:37:eb:83:54:44:74:f5:1b:58:3c:
99:80:6a:71:30:7a:e1:31:c1:ec:4b:7d:d2:24:6c:d8:4c:36:
bb:f7:7c:38:b9:ed:ae:47:4e:10:c1:71:44:71:19:65:84:d6:
6b:0a:4e:ee:77:a6:4e:9e:10:66:28:2f:23:b3:31:e2:df:f1:
65:f7:92:20:d1:a2:04:d9:de:2d:ea:42:b2:f5:48:72:b2:57:
f8:5a:75:2f:e3:72:12:19:10:b0:a4:b2:a9:d8:fc:24:d6:00:
4b:9e:77:28:0c:66:79:76:be:89:8e:50:2d:02:ea:51:a6:4c:
d6:52:cc:6e:9d:47:7d:95:9f:21:4f:98:44:bf:fe:2f:9a:07:
c7:bd:22:35:d6:f2:99:ad:12:82:99:e9:9b:b4:ae:42:16:25:
c9:c1:66:e4:6b:cc:77:db:f2:71:01:11:f0:52:0c:89:0b:0a:
a5:e5:9f:29:9b:25:f3:c5:4e:63:ef:40:63:80:73:7d:54:1e:
05:db:82:6a:dc:9e:61:66:c9:38:9c:cf:57:e2:33:1d:65:61:
1b:f9:e4:17:27:df:93:a7:04:cf:b5:66:74:a5:47:30:8f:83:
20:63:30:75:c8:44:fd:98:75:79:6b:c0:c8:b4:d5:9f:6d:cb:
a7:c5:2b:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaApxilKHCU/oB960IVDQO1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGQyMzZkODA0ZDVhYTlhMmNhYjM5Y2Y1MTAyMmFjMDVl
MGIxODMwHhcNMjYwODIyMTQwMDQ3WhcNMjYwODIzMTQwMDQ3WjAzMTEwLwYDVQQD
EygxMmY3NmYyNjdkNTc3OWM4ZTViMjg0MTI2NTZkZmJmOWJkMTRjZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4C+UMhvYBM4kCKIJXvZ3Fe1qnpd
OoddA7lwG1ExDxRBmhyM94gm8Be0UE7ulkINDgYDFbNspVL0O5EW7lvxGvFEg/Xi
sB4i7VkTk9Sx3dlnFWq2DeCNsi9AZFGc/kwgRVTKsGHJGCpQTHafmiy1lyIUZe15
RoRj6AGtpSLcEQBGzVutQoE+kRO+ihG3ELyIE0mtRbDtGfbpUk1ZF77iytGut1KA
4BinhI7eWP/DJKvnT1gKcnvWgtjNDB7vLplJ20+4MQmtqk3EV22imVY/TqqhWXLw
jQAubTQoLJtcRAu1VrS5dpvgVPccljAW7Nu6xMFcqcH5ojCNTx16u4MR7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBL3byZ9V3nI5bKEEmVt+/m9FM0IMB8GA1UdIwQY
MBaAFH3dI22ATVqposqznPUQIqwF4LGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2Mt
ODU1ZTYwNzJlZjM2LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2MtODU1ZTYwNzJlZjM2
LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA03hL2Dt7
Zhc364NURHT1G1g8mYBqcTB64THB7Et90iRs2Ew2u/d8OLntrkdOEMFxRHEZZYTW
awpO7nemTp4QZigvI7Mx4t/xZfeSINGiBNneLepCsvVIcrJX+Fp1L+NyEhkQsKSy
qdj8JNYAS553KAxmeXa+iY5QLQLqUaZM1lLMbp1HfZWfIU+YRL/+L5oHx70iNdby
ma0Sgpnpm7SuQhYlycFm5GvMd9vycQER8FIMiQsKpeWfKZsl88VOY+9AY4BzfVQe
BduCatyeYWbJOJzPV+IzHWVhG/nkFyffk6cEz7VmdKVHMI+DIGMwdchE/Zh1eWvA
yLTVn23Lp8Ur+w==
-----END CERTIFICATE-----
Generated at Sat Aug 22 21:50:09 2026 by rpki-client