Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
File: fdw2QUyZG_qNkvYCflMINwsitqY.mft (raw, json)
Hash identifier: YCmgDFD5+AP2bn2KOCDYZMgQH0Nob4TPFdoZEo/T4AI=
Subject key identifier: 1E:B4:8C:D2:3C:60:21:7E:CE:59:F2:28:92:F9:BA:6B:E9:38:7F:61
Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
Certificate issuer: /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Certificate serial: 019D382DEBE2F29445485CB683299943655B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
Manifest number: 09E6
Signing time: Sun 29 Mar 2026 06:00:26 +0000
Manifest this update: Sun 29 Mar 2026 06:00:26 +0000
Manifest next update: Mon 30 Mar 2026 06:00:26 +0000
Files and hashes: 1: 7govs0WCyjg5wwJ4Lwd5TvIwb8Q.roa (hash: OGSpoOfbnujXgA13Y9803ByJNfvBnyQq9VcU8i/EB6s=)
2: fdw2QUyZG_qNkvYCflMINwsitqY.crl (hash: Orl0z50KG+Gsw3no2HoltmzndiyVVZUwOZocpdu8P3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:eb:e2:f2:94:45:48:5c:b6:83:29:99:43:65:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Validity
Not Before: Mar 29 06:00:26 2026 GMT
Not After : Mar 30 06:00:26 2026 GMT
Subject: CN=1eb48cd23c60217ece59f22892f9ba6be9387f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:b1:dd:aa:9e:c0:b8:8c:83:c1:70:2c:f7:
37:66:40:3d:fc:4d:44:c8:02:db:9d:08:19:4e:4d:
18:2b:38:c8:4c:f3:37:11:8b:71:bb:5f:58:90:8a:
ac:a8:78:89:5f:64:63:9d:9b:b5:8c:58:59:27:58:
f2:b4:94:88:f6:9d:1a:cd:a7:f7:b0:be:7e:e7:59:
a3:92:57:fb:69:5b:eb:d0:c1:3b:62:83:cb:fd:f7:
21:f6:35:fe:22:10:22:cf:b8:75:0e:c5:5a:4b:1f:
9d:c9:35:85:d8:00:9d:73:88:27:17:16:57:92:c4:
cc:6e:d6:1e:d5:7e:93:9a:c0:ad:ed:69:0d:d0:bb:
db:1c:37:89:f1:34:d8:b8:95:28:3b:17:2e:98:02:
ed:12:59:a9:af:54:88:50:5a:cc:02:f1:d7:c6:f3:
84:aa:c8:ea:c7:7c:37:9e:49:1b:9c:c2:c5:ce:8c:
eb:a4:98:d7:d9:49:30:f1:7b:5f:01:d1:51:ca:56:
47:79:22:50:62:15:00:b2:45:c6:23:d4:59:4d:dd:
d8:2a:98:44:ca:11:cc:f0:d5:62:06:2c:8b:c4:65:
ef:9c:fe:03:c6:80:4a:8f:27:1f:27:e9:5c:52:32:
18:25:e0:c7:4c:74:7e:2b:0d:7b:86:e3:79:e8:57:
42:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:8C:D2:3C:60:21:7E:CE:59:F2:28:92:F9:BA:6B:E9:38:7F:61
X509v3 Authority Key Identifier:
keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0a:75:24:4a:6e:98:7f:b3:15:c5:24:b0:83:18:38:a7:60:
82:3e:f9:e2:ba:f0:01:d4:06:0b:81:d1:6f:f1:59:ff:5a:82:
f1:68:36:0b:d4:57:0f:ef:90:48:41:12:ef:c3:8e:d2:04:79:
19:06:f1:b0:52:87:6d:f2:3d:0c:d3:2d:3d:31:8a:4e:ed:41:
d9:a9:7e:23:21:2f:e6:6a:f1:44:16:c5:01:11:3f:61:c7:79:
58:bd:89:fc:c1:2e:4a:48:83:02:97:e4:9e:eb:24:de:b9:0b:
59:2d:91:58:4e:dd:fd:34:34:7c:e7:64:85:ed:44:4e:8a:2f:
86:fa:f3:db:68:9f:b9:fe:35:86:da:3d:4c:e4:3d:66:86:63:
4b:2a:08:b7:88:60:16:21:c2:51:88:3c:2f:89:67:3b:97:fc:
e4:e3:71:2c:49:9f:80:fa:d6:0f:64:46:83:02:b2:51:22:82:
59:c8:cb:bb:44:dd:ea:a9:72:e6:f6:9e:ec:66:4e:da:55:0d:
20:74:dc:db:35:6f:a2:ee:7c:68:84:78:23:cd:37:83:57:d7:
9b:5c:2e:b6:a8:2b:3a:14:78:db:1b:50:cc:04:14:92:c6:27:
e5:af:2d:04:c1:9b:91:b9:41:ac:9f:1d:45:7b:12:5c:02:28:
b8:de:7a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:35 2026 by rpki-client