Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier: Csy1UmLadzX/cw5jCEya/B2BhVEvVGrkZMl6oedltKE=
Subject key identifier: 7D:F8:58:52:BB:2D:63:6A:76:9D:20:C1:7C:73:BB:DE:20:08:F1:5B
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 019D3A1CBAC74CDAB731962D7778C655A25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number: 10EA
Signing time: Sun 29 Mar 2026 15:00:54 +0000
Manifest this update: Sun 29 Mar 2026 15:00:54 +0000
Manifest next update: Mon 30 Mar 2026 15:00:54 +0000
Files and hashes: 1: PC_LI5mzW33r19J5s8xktz3ZfWM.roa (hash: 89d083v0GAT00xfLKNNp4sOIB0VAv7J7O40LuyF21jA=)
2: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: miHz/+DKLbrZngD3S1xhAXodKm59e4gBPBFVBAhGzvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ba:c7:4c:da:b7:31:96:2d:77:78:c6:55:a2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: Mar 29 15:00:54 2026 GMT
Not After : Mar 30 15:00:54 2026 GMT
Subject: CN=7df85852bb2d636a769d20c17c73bbde2008f15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:f8:e7:1c:b4:fb:4b:7e:3c:ff:bc:14:98:
b3:86:73:c0:67:db:63:8a:7e:6e:1c:86:96:29:fd:
1a:3f:61:a5:db:90:51:7d:38:12:91:69:2a:5b:b0:
78:25:06:f7:0c:f2:f6:a6:32:e3:ea:6a:34:2d:b8:
7b:e0:91:16:05:d4:f4:74:71:07:e6:07:a8:3c:45:
5e:ff:43:d0:0a:df:48:f5:34:9f:9e:9c:16:d9:12:
15:c8:2f:ee:ca:66:50:da:2c:2c:81:19:9a:8d:6c:
8c:a6:8d:18:e9:11:50:7c:68:6c:b0:bf:0e:fc:da:
06:26:78:b4:9f:06:d2:2d:e4:7f:1b:20:78:72:09:
dc:fd:8e:1a:14:23:52:04:ad:d1:cd:8a:4c:4b:9f:
b1:5d:24:87:07:2c:1c:bc:13:4c:53:21:4d:3f:09:
25:83:be:80:1f:63:ec:b1:7c:08:22:27:2e:bc:62:
d4:3e:e4:eb:fc:06:57:38:08:cc:1d:71:0e:87:87:
6c:aa:72:d9:4b:18:50:c6:9f:df:99:db:69:81:25:
8b:63:05:49:0a:5a:8f:9d:4d:83:9c:76:dd:e4:2b:
61:2b:08:73:98:ae:ef:20:c4:81:6b:6b:81:9c:45:
34:01:4f:90:b7:f0:f3:c7:43:47:ca:12:80:17:c4:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F8:58:52:BB:2D:63:6A:76:9D:20:C1:7C:73:BB:DE:20:08:F1:5B
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b3:98:a7:c5:5b:2d:ef:20:d3:c6:c8:51:99:55:45:1b:bc:
cd:80:c5:16:5a:45:fd:d7:92:2f:eb:1e:57:72:0e:d9:8c:0e:
9b:54:bc:2d:7e:40:a3:46:96:11:90:90:77:70:4e:85:5a:87:
d5:bb:60:40:ee:59:3f:c1:70:9c:86:4c:11:04:00:7b:ac:b0:
b2:47:b3:fc:68:5e:25:64:62:a5:1b:89:7e:ef:9d:f1:71:ca:
9a:51:1c:92:8d:32:ed:0f:e7:9f:9c:17:2e:71:aa:ee:9e:f3:
ed:a5:ef:c9:8b:c9:38:05:d7:e5:e4:78:44:26:f9:e6:26:1c:
bf:93:b2:dc:31:61:8c:88:7c:b3:15:54:5c:71:99:6b:a8:3d:
ac:1a:7d:17:d1:07:96:d5:00:b7:68:aa:5f:26:dd:df:77:79:
40:9c:f0:20:e4:ee:c2:41:50:2b:80:24:e0:e4:f5:90:d4:9d:
e1:38:43:7b:ce:5e:c3:87:7b:f4:ff:ce:bb:e4:bb:dc:d2:ee:
39:74:9b:9f:29:3b:3f:0c:62:80:7c:80:11:8e:dd:36:e7:85:
aa:cf:e8:39:2c:1c:50:6b:ac:d8:3b:d4:93:6b:22:2c:59:95:
53:66:43:2f:00:0a:b5:71:c2:ab:52:5a:91:db:f1:29:29:7e:
29:6b:52:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:32:20 2026 by rpki-client