Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File: p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier: 9xGg0JwE+sPAiYAvtUb//wGPV/mrZlKPr8q0c6ancOY=
Subject key identifier: FD:08:EB:E3:D4:03:D6:22:2E:7D:70:5C:14:4E:32:46:65:E8:43:F9
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 019D0EC49A75D27BDC41D8D3325D82ECE8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number: 1006
Signing time: Sat 21 Mar 2026 05:00:58 +0000
Manifest this update: Sat 21 Mar 2026 05:00:58 +0000
Manifest next update: Sun 22 Mar 2026 05:00:58 +0000
Files and hashes: 1: Qth5F4Jxy_7Urd_QUYNqQ6dh3BE.roa (hash: 7J/t016OYUhUIcd/w4kqId0UMUV/HMGOup9T1dY8o6k=)
2: VMk_-ZVMzNsk1GgbJTfI9LE0DME.roa (hash: UfrV1/CMx2zPrF2PH/5Pf7VA8YMgyux3npUJflT4mLo=)
3: WMaXfRf-RFKZGI9jfe80US59tDA.roa (hash: oSG4X6QE7Zo0M5rFiT40os6MT1Li/W/ODtM/SHLn50w=)
4: WYINcTR5G8eWIm2nJo9-FZB9A-c.roa (hash: xbC6ZKVedTs8dgZW52hJX5QjfYmjqhQcuGp6AKEKmZI=)
5: XAZ6WKQwSbWuMdg-slN8CRUbp5I.roa (hash: B/BbMvrnmz3NQFSpm/6UYMAwSqXPT+vl+n1zXtv+BHo=)
6: a9JkWci0F3TTd0p2sBEzmiEjdq0.roa (hash: 5j0Wq9PZGQQ7JbTj7Kgmx1x+26TKEMnhbQ7aJjaYgsg=)
7: hCn3bIQg5VsX6NCOxM1ZQie7ZJ0.roa (hash: D+/5MAyrqx5oCLSLt+ymEIb8F3rOABO1+8Ywi8kb7lY=)
8: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: yItcdRqIe3WRr6+8aqFqoT+2JQLtEhyPzNwT/apTqOQ=)
9: quvibglo6Ez0p7GLGOPHRy9oRo0.roa (hash: PHUCyCkb1CzH3KiJNE2akCPX54R84dlZX7do54X1Jww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0e:c4:9a:75:d2:7b:dc:41:d8:d3:32:5d:82:ec:e8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Mar 21 05:00:58 2026 GMT
Not After : Mar 22 05:00:58 2026 GMT
Subject: CN=fd08ebe3d403d6222e7d705c144e324665e843f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:ed:36:5d:d6:23:c8:95:84:44:09:16:d4:
71:c7:ad:b7:bc:29:66:be:70:cc:09:e0:22:dc:e5:
79:01:1c:7e:22:e5:a1:b2:ee:90:f4:4e:c6:6d:8f:
1a:a4:7a:bc:5b:4f:5f:b7:3b:c3:c2:2f:26:d4:4a:
16:df:a3:59:b5:0c:e7:90:44:fd:0e:70:db:11:bc:
b7:74:cc:4c:97:ed:2e:42:0f:a3:dd:6f:5c:9c:27:
79:04:2f:91:52:1e:bd:3a:e4:de:2f:34:d1:7e:3d:
aa:79:16:30:09:32:3e:b8:05:19:48:a6:05:1f:00:
54:8c:c8:dd:78:2b:65:88:8e:0a:83:ae:79:13:c8:
95:00:ad:d6:64:a8:f8:aa:3b:a8:d9:be:91:b2:14:
d7:31:bb:1f:2b:dc:30:71:34:4a:1e:44:44:40:53:
11:bc:be:3e:42:9b:a4:66:ed:3b:43:87:56:41:f4:
1a:40:07:c5:08:e9:c2:89:fd:fb:f5:ef:ed:2f:f4:
58:ad:f4:8d:1e:a4:0b:93:df:9b:1c:56:54:a1:d1:
e8:95:50:84:bb:65:08:d1:f4:d8:d6:a2:5f:26:27:
79:9b:e1:3f:4d:cb:69:22:6f:b1:39:3b:80:19:b2:
4d:38:56:6d:fc:12:a0:af:be:27:e9:38:a1:8a:a5:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:08:EB:E3:D4:03:D6:22:2E:7D:70:5C:14:4E:32:46:65:E8:43:F9
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:42:7f:ba:0d:03:7f:58:f8:72:45:97:53:c7:6a:3d:75:dd:
e4:d1:b9:f6:bc:ae:4e:5c:c0:84:7d:f7:ba:7b:09:2a:36:b3:
03:fe:b1:4f:2e:56:e6:24:55:fe:b5:57:3f:62:89:64:b7:36:
8c:c4:d0:9b:23:b4:35:7c:79:1b:ce:87:0e:b8:f6:99:cb:09:
89:15:43:65:67:e8:55:38:c3:45:76:68:f4:12:39:57:01:7d:
e6:d3:4b:7a:e4:42:36:07:aa:e4:1c:63:2e:84:53:4d:07:97:
96:a3:50:ae:cd:51:39:7b:32:1b:ff:60:35:51:0a:a9:f9:f8:
58:da:6e:5f:bb:17:ba:ff:22:f7:4b:66:0e:9d:5a:3b:f8:84:
ca:e4:59:de:e0:a8:f4:8a:13:89:74:62:f4:b0:4a:fa:8d:66:
41:f6:40:97:60:66:53:85:3f:24:08:f4:bf:68:bb:a8:83:9e:
89:41:36:97:4d:5f:b8:e1:10:86:29:aa:cb:40:d8:48:ad:51:
18:97:65:1c:d6:67:08:f3:ac:fc:11:d8:c4:b3:4b:1d:f9:c7:
09:88:79:fb:4f:2f:60:d3:b3:51:be:bf:8e:32:71:ac:3f:ba:
59:df:8d:95:67:26:cd:e5:21:21:81:fc:bb:e3:dd:70:a3:96:
eb:3d:be:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:06:42 2026 by rpki-client