Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: IZ347swy1kpRM+j4AfAWUUwaCO++8+dmSOIFfcM5Utw=
Subject key identifier: D8:25:EE:64:71:33:9E:B3:28:48:B2:5E:15:E0:5E:4D:6A:92:85:34
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019D389BC159433118951E7DF5651E64AF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0AEF
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: QxPgQhLZSciZvWPoXaWmbFy5GQE.roa (hash: 2+siJJXulwAfsr5WZH3cVtlll3XHnNe+UHkOgJC93jY=)
2: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: 3Ls2o5Gt8Ght9SNJvokQspNP9YnzBaCh+lg5ti9jtz8=)
3: oDJd8k7v9hL4ELhX81UKtkrtMzs.roa (hash: ABmbVakjWPfaGm1nLXm6gvNYxUl2NncxIiAinPvtap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c1:59:43:31:18:95:1e:7d:f5:65:1e:64:af:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=d825ee6471339eb32848b25e15e05e4d6a928534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:35:f4:b4:18:07:42:a4:95:61:bc:45:82:
9b:0f:58:a8:cd:b1:af:22:36:bc:fd:d3:8c:2a:e6:
63:79:de:32:c8:af:f4:fa:60:a6:1f:cb:9b:e8:ae:
28:2f:48:65:33:09:45:84:2a:df:94:5f:53:8b:03:
af:a1:23:8a:62:74:b7:8b:75:a8:3c:8f:c7:68:78:
59:18:43:9f:4d:d0:8e:9a:95:da:83:11:46:e8:d0:
1c:98:c4:cd:59:aa:ab:83:06:e3:f5:09:58:2e:a3:
95:ab:fb:73:0b:cd:af:a3:a2:6d:c9:9d:02:b6:d4:
55:0f:34:d6:ef:90:83:92:85:24:43:46:f9:70:88:
0f:8a:b1:09:98:17:99:03:d6:83:b4:e6:33:de:f7:
68:0f:7e:df:fc:1e:64:21:c4:77:43:6f:b6:fe:4c:
33:19:2d:8a:9d:35:73:fd:85:2e:84:44:49:69:f2:
d6:97:36:43:36:25:6c:7e:a7:db:92:51:a3:1a:92:
dc:4d:9a:8f:8c:c2:5b:cb:c1:7c:f5:7c:be:ed:01:
4d:09:bd:73:2d:a9:df:4e:10:18:4e:0b:fd:3c:28:
de:55:bf:f4:4e:ee:c7:d4:a1:19:66:fc:8e:46:db:
3b:77:62:17:fe:78:a3:a4:c7:78:76:fe:ef:6a:24:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:25:EE:64:71:33:9E:B3:28:48:B2:5E:15:E0:5E:4D:6A:92:85:34
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:90:d5:1b:9f:5f:f1:9f:cd:82:ea:f4:7a:13:85:0f:d7:87:
9e:47:86:5f:a4:9b:68:d4:51:2c:38:8a:a2:ab:7b:24:fd:33:
fa:62:16:ac:00:8e:bb:c7:2e:eb:d7:b3:f2:62:63:5b:71:7d:
12:84:73:92:a0:7d:de:36:54:8c:b9:0e:8b:5b:ad:13:48:49:
59:4d:b8:4d:28:14:54:c1:d7:e8:17:f2:7a:6a:78:39:5b:ae:
59:10:dd:cf:6a:af:f4:d9:54:e9:52:d4:01:3d:91:b5:ec:d9:
26:2d:7d:f5:d3:23:de:8f:5c:4f:9b:2e:3e:67:86:20:59:ca:
05:d1:d8:de:4e:4d:41:9a:be:af:6e:e9:02:bb:58:c7:29:9a:
b0:fb:b6:ce:25:1c:c9:b5:17:5b:f7:bc:b0:a1:55:85:6e:2d:
7b:3a:c0:f1:32:7d:90:01:80:e5:15:7c:b6:6f:57:97:06:c7:
2c:2a:50:5c:31:28:5c:ae:9b:8b:f0:26:4a:c1:14:80:f5:d2:
0c:3c:8d:81:18:f3:6c:b8:8e:6a:6e:8a:b9:54:8b:2d:b1:20:
f3:1b:19:f9:50:b6:e4:07:de:f3:01:93:32:32:b1:86:a1:73:
3d:af:cc:99:43:25:c7:7f:92:66:33:02:5d:3b:a7:b7:4a:e5:
73:eb:f6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:06 2026 by rpki-client