Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
File: fdw2QUyZG_qNkvYCflMINwsitqY.mft (raw, json)
Hash identifier: N7jXzJlIKuZl6WsMMXqwIHBWuGINj1mxoExxJxk/6T4=
Subject key identifier: 16:0E:8C:9D:42:25:CE:21:AE:F5:D5:79:2A:7B:DB:A0:FA:F6:5C:B2
Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
Certificate issuer: /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Certificate serial: 019E21DAD4621A26A33F8EB790733E9B7CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
Manifest number: 0A5F
Signing time: Wed 13 May 2026 15:00:49 +0000
Manifest this update: Wed 13 May 2026 15:00:49 +0000
Manifest next update: Thu 14 May 2026 15:00:49 +0000
Files and hashes: 1: 7govs0WCyjg5wwJ4Lwd5TvIwb8Q.roa (hash: OGSpoOfbnujXgA13Y9803ByJNfvBnyQq9VcU8i/EB6s=)
2: fdw2QUyZG_qNkvYCflMINwsitqY.crl (hash: Kyh/REdqwly4LaDaKisUU37iklltp6PwCyprJe/FMTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:da:d4:62:1a:26:a3:3f:8e:b7:90:73:3e:9b:7c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Validity
Not Before: May 13 15:00:49 2026 GMT
Not After : May 14 15:00:49 2026 GMT
Subject: CN=160e8c9d4225ce21aef5d5792a7bdba0faf65cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:8c:6a:96:e9:73:f1:df:dc:d9:7a:43:03:
71:ff:1a:67:aa:a1:91:1e:fc:1f:11:59:37:7c:db:
e0:65:a1:a5:9f:fd:19:0f:1f:cb:6b:11:e4:aa:be:
ac:a9:3e:01:4d:f7:97:70:37:43:20:42:fb:29:65:
82:d1:f1:51:db:6e:13:78:ad:25:4d:22:cd:64:1b:
8e:37:ca:43:a5:37:32:16:ce:e7:31:01:c0:91:d0:
bb:bc:38:7b:a1:59:5c:d0:2a:dd:20:8d:24:9e:2f:
b2:c8:fb:e6:de:7e:c3:35:26:c2:e3:ba:10:82:89:
38:1a:ea:63:82:07:f1:3f:81:75:14:cb:22:61:54:
89:62:6e:9d:09:59:85:bf:c4:5d:6e:5c:56:ba:c6:
8c:0f:dc:f7:96:3b:d4:61:83:30:a6:b2:1e:82:84:
a0:e2:b1:d8:6b:e6:72:79:e6:1c:23:da:2f:09:c6:
dc:e9:53:11:01:0a:05:0c:52:bf:3d:0f:e5:ec:fe:
27:d5:5d:d9:a6:09:8e:f1:11:a1:c7:87:0f:1a:66:
2f:b4:9b:18:22:9c:71:a5:6f:c6:cd:1f:27:02:18:
cb:47:cd:2d:c4:7d:8d:e8:96:fe:c0:ed:98:f9:f3:
fd:a1:18:ff:b6:ca:61:ee:62:b7:2b:61:f7:5e:6a:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0E:8C:9D:42:25:CE:21:AE:F5:D5:79:2A:7B:DB:A0:FA:F6:5C:B2
X509v3 Authority Key Identifier:
keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a1:ea:ca:a3:ee:99:20:f5:b5:32:22:40:bf:c9:9f:0f:76:
cf:47:78:88:59:e4:44:7f:25:cf:18:63:a4:07:01:c8:fe:a8:
17:da:bc:84:23:f7:5a:98:86:59:43:e5:9c:bd:fd:9a:66:ec:
e1:8e:44:78:f1:0c:3b:13:10:8a:3a:de:f0:c5:bc:21:95:2f:
13:1c:87:64:26:22:b5:05:c7:08:14:24:0c:15:aa:3b:73:f2:
11:1e:e2:bb:9f:73:4b:a1:c1:37:80:96:ef:15:de:9b:e0:e6:
fe:d4:fc:84:18:d8:31:81:f8:17:14:f9:30:db:99:7f:89:b4:
c3:17:fb:de:29:eb:45:15:9b:47:13:1b:28:b1:74:8e:5e:32:
10:94:27:68:cb:c2:66:f1:45:bb:c5:13:c7:5e:eb:0a:a3:f5:
c0:45:cb:f5:3c:09:77:e2:5c:4d:ef:75:1e:27:6d:70:a6:54:
9c:38:74:51:9b:cc:e0:9f:98:36:dd:fb:71:46:f4:7e:dd:49:
45:d3:fe:8b:32:00:ef:53:25:53:d8:9e:b7:82:7f:01:8c:65:
82:91:39:b0:c3:f4:50:af:ac:2d:9f:d6:fb:17:e5:a6:3d:57:
80:7a:49:e4:0f:b9:60:9e:27:3a:d2:ca:d5:22:ca:4a:28:b0:
53:0d:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 00:51:43 2026 by rpki-client