Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
File: fmdQ5YygordfLFO99vYf9j7IMcs.mft (raw, json)
Hash identifier: Cpy1d8UJ69ju5e1bXRVAtaqxFcRQ6OUsFQUTbsCv9YY=
Subject key identifier: 6E:3C:15:47:36:78:31:6E:56:8A:53:D8:18:37:E3:A7:98:D2:60:9E
Authority key identifier: 7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
Certificate issuer: /CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Certificate serial: 019D39413167E79DD85724BFDF25ACBA71D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:06 +0000
Manifest this update: Sun 29 Mar 2026 11:01:06 +0000
Manifest next update: Mon 30 Mar 2026 11:01:06 +0000
Files and hashes: 1: HgGZCT60vi5wpzie1_eEXqtU-lI.roa (hash: 9qMAtpqKBvQUvGt8XD6571cQEZdj7SpbN8xSeRT6418=)
2: fmdQ5YygordfLFO99vYf9j7IMcs.crl (hash: fkFoFBL42lxEV/KtuSldcNwTnGnE04rFMbTYow1msiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:31:67:e7:9d:d8:57:24:bf:df:25:ac:ba:71:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb
Validity
Not Before: Mar 29 11:01:06 2026 GMT
Not After : Mar 30 11:01:06 2026 GMT
Subject: CN=6e3c15473678316e568a53d81837e3a798d2609e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:c2:86:b1:d4:18:3e:77:a2:6f:00:dc:05:
bf:52:2f:b5:3a:f4:c6:9e:0f:5f:c0:4d:d8:d4:7b:
40:d3:f0:95:6b:28:03:07:b8:89:3c:4c:a6:78:5e:
15:73:1a:0c:93:2d:f7:55:77:5c:b0:ef:c1:51:5d:
1d:78:a7:96:48:8e:8f:38:72:16:61:cd:c1:a4:ed:
d2:44:05:65:6c:ea:ca:72:5e:0e:bb:4c:18:00:a1:
65:36:96:53:e8:e9:47:e7:db:8b:24:17:92:52:ac:
b1:56:15:77:39:ec:bf:73:b1:1f:e3:d0:a5:e2:94:
35:a1:00:c4:03:c8:e1:b4:33:76:0c:ff:78:81:6b:
eb:d0:e3:14:48:bc:dc:50:4f:2d:5a:bc:93:94:76:
88:09:36:0e:8d:b3:55:0b:2d:1d:a1:7d:5f:10:03:
4d:99:05:02:35:9c:88:3b:c2:c5:52:15:e2:a6:bd:
cd:37:d0:b7:7d:18:a6:fe:a1:de:ba:d8:53:53:52:
23:23:e3:df:1a:61:b2:02:c4:4c:05:98:2a:6c:d2:
53:ce:81:d0:86:1d:aa:7f:40:ae:b1:6d:5d:d6:ac:
b6:77:75:fa:fd:37:8f:1b:6a:02:b0:15:e6:0c:1d:
b0:f7:61:e5:b6:10:75:41:cb:52:9f:51:a2:c9:ed:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3C:15:47:36:78:31:6E:56:8A:53:D8:18:37:E3:A7:98:D2:60:9E
X509v3 Authority Key Identifier:
keyid:7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4b:c2:ec:7c:2f:dc:5a:d3:6f:ff:95:a3:02:22:de:74:b1:
05:74:0e:a9:ab:96:75:45:71:a6:95:d5:b2:2e:6b:ff:cd:19:
b4:87:70:b2:32:0d:b6:95:13:61:1f:79:a5:4c:91:8a:6c:4c:
e0:21:e4:61:7a:0e:f1:d9:6f:a5:7a:b2:21:bd:da:df:ff:c3:
8c:c8:5d:7a:aa:e3:b2:7f:3f:16:fa:67:1f:98:9e:d1:b5:ca:
62:15:00:0f:53:8b:b5:17:0b:46:b2:49:7a:40:e6:62:c8:e0:
65:22:cb:db:a2:22:2e:7b:4f:82:c3:f5:e1:81:be:bb:31:d1:
e0:cb:ff:d8:e4:2c:a6:42:47:2c:74:1c:49:75:79:8c:08:1a:
7e:23:8b:0d:fb:07:90:c6:6a:e0:c8:0e:ed:92:f1:08:11:46:
d1:3c:22:02:ef:32:2d:9d:da:5c:97:2a:3b:bd:6e:11:6a:a3:
ef:c0:98:d7:18:75:f2:a8:a9:36:b4:b2:f7:29:ed:34:c4:a1:
e7:2d:b4:ed:a9:32:7e:62:59:cc:d0:fc:6b:41:4a:a6:65:4b:
d5:99:ff:ee:e4:98:18:05:ad:56:f8:d8:f4:06:f7:2a:68:88:
69:86:90:6c:eb:f1:a7:f2:00:c2:75:50:bc:74:17:5a:05:76:
e4:85:92:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:44 2026 by rpki-client