Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
File: fdq9ZIcR0M5WmJiW77c6DmXpczk.mft (raw, json)
Hash identifier: 39hmH88WhiOy9HCEGTLbNFJYrxkmuU5IKh8tEzxxKLU=
Subject key identifier: B9:D6:51:7A:0D:74:4C:E3:C9:52:C9:CE:64:5D:C5:C4:17:39:87:EB
Authority key identifier: 7D:DA:BD:64:87:11:D0:CE:56:98:98:96:EF:B7:3A:0E:65:E9:73:39
Certificate issuer: /CN=7ddabd648711d0ce56989896efb73a0e65e97339
Certificate serial: 019FA0E033560ECCB399802B53B967C587F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
Manifest number: 42
Signing time: Mon 27 Jul 2026 00:01:15 +0000
Manifest this update: Mon 27 Jul 2026 00:01:15 +0000
Manifest next update: Tue 28 Jul 2026 00:01:15 +0000
Files and hashes: 1: K60hVPLSPVtUpielhkzPMTSO0aM.roa (hash: G37NAr4nS+/pnxGye8gLOv9acyLCoKW6Bim3ph2z7sw=)
2: fdq9ZIcR0M5WmJiW77c6DmXpczk.crl (hash: OyobiI1ylIeT4sz/Gx19sETSwu4PSXZk3NbIu+W4XP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:33:56:0e:cc:b3:99:80:2b:53:b9:67:c5:87:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddabd648711d0ce56989896efb73a0e65e97339
Validity
Not Before: Jul 27 00:01:15 2026 GMT
Not After : Jul 28 00:01:15 2026 GMT
Subject: CN=b9d6517a0d744ce3c952c9ce645dc5c4173987eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a7:c5:36:a7:b4:ef:7f:55:9e:d6:46:dd:69:
00:72:0d:f0:65:c3:3e:34:ab:72:2c:85:5e:34:29:
e6:14:d3:63:78:7c:ab:1d:81:e1:fd:bf:88:9e:fd:
09:23:88:73:bc:de:f4:71:0f:d8:b0:0b:eb:46:ec:
c4:13:9f:31:5b:98:88:b8:4c:be:32:fd:a2:98:46:
19:03:ea:9b:e5:df:88:42:a9:2d:8d:97:ce:14:a7:
5b:f3:24:99:59:e1:5d:e6:41:34:37:4d:32:1e:36:
d3:83:a9:bb:1b:16:c9:a0:ba:1e:d9:11:1d:ff:20:
fd:c5:12:95:23:87:ce:a5:50:6e:47:17:56:c5:50:
97:6c:40:47:c3:03:e9:6c:de:7e:84:4a:53:16:bd:
3c:ce:39:67:d3:fb:54:ab:be:03:06:24:5f:9c:89:
43:d6:57:c4:32:a1:3f:99:18:cd:08:28:c7:ed:0a:
0f:74:59:b4:b8:ff:47:29:e2:38:b5:d6:3b:69:6e:
34:16:ba:68:63:dc:8b:f0:67:bb:86:0c:e6:86:3c:
ec:b6:b6:e4:a2:c7:9b:a5:90:67:83:c0:b0:c0:5a:
41:15:79:2b:81:70:14:94:43:be:5d:ec:9d:11:87:
d5:91:ed:fc:01:6e:f3:92:1e:2d:1e:c6:d9:94:f6:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D6:51:7A:0D:74:4C:E3:C9:52:C9:CE:64:5D:C5:C4:17:39:87:EB
X509v3 Authority Key Identifier:
keyid:7D:DA:BD:64:87:11:D0:CE:56:98:98:96:EF:B7:3A:0E:65:E9:73:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:08:33:53:79:d5:3d:0d:e8:72:9b:17:3b:6d:c8:f8:2a:4a:
17:d9:b6:e5:70:b0:42:e9:02:6f:6f:6f:fe:8c:1c:d1:4e:5e:
67:c3:c9:c4:59:63:21:9f:25:96:4d:c5:62:6e:67:8a:60:b0:
e9:06:de:13:08:12:88:ca:6f:57:ad:d0:82:3c:ba:f3:b2:fc:
6e:e1:c3:ea:5a:ec:77:61:9d:16:03:d1:94:f5:27:1d:1b:28:
da:95:ef:2a:f0:14:e3:c4:b4:cb:f1:0d:af:0b:e4:f6:32:97:
3c:7f:c9:b4:09:78:61:3a:bb:17:e8:7f:16:c4:e0:64:a5:c5:
29:da:87:82:a9:bb:30:c1:a5:3e:6e:7e:7e:18:b3:b4:f2:dd:
5d:ae:54:5f:46:d6:08:6d:ea:aa:be:44:66:63:5a:10:c2:41:
f7:01:5b:4d:db:53:36:72:fe:22:99:f0:90:c4:25:9c:96:1c:
2a:e1:ed:f3:cf:35:e6:b5:f2:43:e9:06:b3:2d:36:d2:23:fb:
fe:2e:5e:f2:11:3e:c1:98:91:fb:a3:58:0b:6a:92:39:68:c7:
e1:48:34:b2:f8:8a:c3:3a:10:66:0c:2c:14:e8:18:5e:e1:31:
3a:7d:5c:2a:59:0c:a5:b6:3d:5a:05:69:28:a4:ce:4b:c9:be:
30:56:f6:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4DNWDsyzmYArU7lnxYf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGFiZDY0ODcxMWQwY2U1Njk4OTg5NmVmYjczYTBlNjVl
OTczMzkwHhcNMjYwNzI3MDAwMTE1WhcNMjYwNzI4MDAwMTE1WjAzMTEwLwYDVQQD
EyhiOWQ2NTE3YTBkNzQ0Y2UzYzk1MmM5Y2U2NDVkYzVjNDE3Mzk4N2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qfFNqe0739VntZG3WkAcg3wZcM+
NKtyLIVeNCnmFNNjeHyrHYHh/b+Inv0JI4hzvN70cQ/YsAvrRuzEE58xW5iIuEy+
Mv2imEYZA+qb5d+IQqktjZfOFKdb8ySZWeFd5kE0N00yHjbTg6m7GxbJoLoe2REd
/yD9xRKVI4fOpVBuRxdWxVCXbEBHwwPpbN5+hEpTFr08zjln0/tUq74DBiRfnIlD
1lfEMqE/mRjNCCjH7QoPdFm0uP9HKeI4tdY7aW40FrpoY9yL8Ge7hgzmhjzstrbk
osebpZBng8CwwFpBFXkrgXAUlEO+XeydEYfVke38AW7zkh4tHsbZlPaGtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnWUXoNdEzjyVLJzmRdxcQXOYfrMB8GA1UdIwQY
MBaAFH3avWSHEdDOVpiYlu+3Og5l6XM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmRxOVpJY1IwTTVXbUppVzc3YzZEbVhwY3prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMWJlMzctNmViNS00YmU3LWIwNmEt
Zjk1OGEwZWQwYTQ2LzEvZmRxOVpJY1IwTTVXbUppVzc3YzZEbVhwY3prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iMWJlMzctNmViNS00YmU3LWIwNmEtZjk1OGEwZWQwYTQ2
LzEvZmRxOVpJY1IwTTVXbUppVzc3YzZEbVhwY3prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAgzU3nV
PQ3ocpsXO23I+CpKF9m25XCwQukCb29v/owc0U5eZ8PJxFljIZ8llk3FYm5nimCw
6QbeEwgSiMpvV63Qgjy687L8buHD6lrsd2GdFgPRlPUnHRso2pXvKvAU48S0y/EN
rwvk9jKXPH/JtAl4YTq7F+h/FsTgZKXFKdqHgqm7MMGlPm5+fhiztPLdXa5UX0bW
CG3qqr5EZmNaEMJB9wFbTdtTNnL+IpnwkMQlnJYcKuHt88815rXyQ+kGsy020iP7
/i5e8hE+wZiR+6NYC2qSOWjH4Ug0sviKwzoQZgwsFOgYXuExOn1cKlkMpbY9WgVp
KKTOS8m+MFb2AQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:22:29 2026 by rpki-client