Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.mft
File: fQdOnuMuCxDIMNykdj65zGUkb6o.mft (raw, json)
Hash identifier: vVfMhDAaaHf1MItv1hfAbEhnUyYytKmE9Q9F6L5Oigo=
Subject key identifier: C4:63:B7:72:EE:83:A7:B4:86:D6:83:03:07:91:0F:6E:08:62:01:96
Authority key identifier: 7D:07:4E:9E:E3:2E:0B:10:C8:30:DC:A4:76:3E:B9:CC:65:24:6F:AA
Certificate issuer: /CN=7d074e9ee32e0b10c830dca4763eb9cc65246faa
Certificate serial: 019D3A1C3D4B1C71CC7CE79073CBC31DE7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQdOnuMuCxDIMNykdj65zGUkb6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.mft
Manifest number: 01B0
Signing time: Sun 29 Mar 2026 15:00:22 +0000
Manifest this update: Sun 29 Mar 2026 15:00:22 +0000
Manifest next update: Mon 30 Mar 2026 15:00:22 +0000
Files and hashes: 1: 1-j7BW7Gsi7Bx1sLah-0rOSnTE50.roa (hash: E7bMvDHjIYbl5UUctsjT4E0zLMA1mzICPsYNWVA/uLc=)
2: fQdOnuMuCxDIMNykdj65zGUkb6o.crl (hash: u5eBHjtDh90Pdjl6OMLazrm2TWxtJPd4gDoCikOkcak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQdOnuMuCxDIMNykdj65zGUkb6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:3d:4b:1c:71:cc:7c:e7:90:73:cb:c3:1d:e7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d074e9ee32e0b10c830dca4763eb9cc65246faa
Validity
Not Before: Mar 29 15:00:22 2026 GMT
Not After : Mar 30 15:00:22 2026 GMT
Subject: CN=c463b772ee83a7b486d6830307910f6e08620196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:73:f8:df:b7:40:d9:3f:11:40:47:93:99:
1c:bb:cd:11:f4:b8:4f:dc:2e:fb:b4:2c:c2:55:74:
94:34:d4:54:dd:ed:ff:26:fb:b9:77:77:43:69:0b:
9e:a8:2f:bb:c9:73:ad:a5:90:f4:1e:0d:1d:19:0a:
f5:6c:6a:2f:34:58:d6:fe:64:13:fe:b7:fa:31:7f:
a9:0e:88:f7:9f:f7:39:43:be:0b:19:19:36:fd:07:
1f:ad:1f:7b:c3:28:aa:24:32:63:1e:18:02:1f:d8:
43:a5:d7:7e:e5:4b:a8:e8:b0:01:48:99:31:54:f3:
30:79:33:79:4d:f8:ff:5a:64:09:06:a7:02:ad:07:
7c:ec:a3:fc:0a:16:0b:ba:a0:c8:36:32:bd:56:45:
ee:00:25:11:0a:b4:91:07:2b:c8:46:d9:0b:fe:10:
ea:df:5e:ac:ca:4b:25:0c:bd:d8:60:25:00:ec:3b:
2a:c5:30:8f:55:cf:48:66:59:fa:1d:6c:7c:d2:ac:
5e:07:3d:b1:17:11:f2:4d:6b:db:ad:ac:74:6b:0e:
c3:de:5c:4e:24:ca:bd:2f:27:95:4c:8a:78:ea:65:
03:92:e7:69:57:9d:77:fd:40:f9:4b:55:90:e8:de:
0a:f6:2d:c2:d5:b5:83:5e:1d:15:a0:68:9e:54:a7:
29:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:63:B7:72:EE:83:A7:B4:86:D6:83:03:07:91:0F:6E:08:62:01:96
X509v3 Authority Key Identifier:
keyid:7D:07:4E:9E:E3:2E:0B:10:C8:30:DC:A4:76:3E:B9:CC:65:24:6F:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQdOnuMuCxDIMNykdj65zGUkb6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:26:ec:cf:95:6a:f1:17:eb:e1:9d:9f:d1:8d:77:c1:22:f3:
c2:48:fe:35:57:5c:0a:3a:72:46:f7:bf:91:7e:c6:72:16:e7:
40:2b:a7:8d:26:f4:03:78:09:fe:3e:15:ea:ca:81:07:fc:de:
99:85:b5:46:55:04:b7:fa:67:c2:e9:33:49:29:33:d0:1b:50:
48:6b:63:0a:cb:80:60:5f:81:83:f6:f9:58:6d:2f:c6:68:64:
f1:59:9e:7d:08:c9:07:19:91:67:a2:1a:f0:cd:27:57:7b:29:
15:7b:52:58:9b:04:ed:28:68:9c:4e:65:be:61:f8:82:c1:0a:
4a:fe:d2:6b:13:89:db:32:ee:e4:af:c7:89:c9:a1:85:ae:d2:
7c:76:f1:f2:68:27:9b:00:37:a8:fd:8c:a6:a2:d0:60:35:12:
55:6f:02:a9:6c:b9:0a:e4:76:b3:73:0e:65:df:33:55:2b:d7:
fb:4b:8a:fc:2b:81:e2:c6:91:73:97:0e:a7:f2:81:43:f9:ca:
89:96:f4:94:29:73:c8:d9:47:28:1a:6f:55:43:32:b5:de:cd:
55:50:82:27:68:44:47:ea:65:1f:7b:ad:1c:7b:3c:93:16:c2:
a2:c5:4d:fa:84:b1:b7:9c:a7:3e:c2:5a:21:9f:ca:2c:4b:35:
99:41:16:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:49:32 2026 by rpki-client