Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
File: fdq9ZIcR0M5WmJiW77c6DmXpczk.mft (raw, json)
Hash identifier: fdCtBe8yTORrl0u7ve2Wt1kmeg66tUbw3l2DX4cr1Bw=
Subject key identifier: 77:D5:F8:AF:77:02:B4:4E:5E:13:EB:38:ED:67:F2:9A:71:BD:DF:75
Authority key identifier: 7D:DA:BD:64:87:11:D0:CE:56:98:98:96:EF:B7:3A:0E:65:E9:73:39
Certificate issuer: /CN=7ddabd648711d0ce56989896efb73a0e65e97339
Certificate serial: 01A08E692C45EE33E46EEE78BE90F084B290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
Manifest number: BD
Signing time: Fri 11 Sep 2026 03:00:52 +0000
Manifest this update: Fri 11 Sep 2026 03:00:52 +0000
Manifest next update: Sat 12 Sep 2026 03:00:52 +0000
Files and hashes: 1: K60hVPLSPVtUpielhkzPMTSO0aM.roa (hash: G37NAr4nS+/pnxGye8gLOv9acyLCoKW6Bim3ph2z7sw=)
2: fdq9ZIcR0M5WmJiW77c6DmXpczk.crl (hash: m78IfuHVS+wZPZB36EC4VFUGf1L3A7AaCu9i8ehsFb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:2c:45:ee:33:e4:6e:ee:78:be:90:f0:84:b2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddabd648711d0ce56989896efb73a0e65e97339
Validity
Not Before: Sep 11 03:00:52 2026 GMT
Not After : Sep 12 03:00:52 2026 GMT
Subject: CN=77d5f8af7702b44e5e13eb38ed67f29a71bddf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:36:39:b1:dc:a1:47:e6:e5:e3:72:92:00:dd:
b4:7c:19:29:7e:e7:59:b9:91:6a:d7:3f:56:98:3e:
db:ba:41:45:26:b8:15:9b:7e:cc:d5:05:fb:98:22:
31:6d:8e:45:15:64:8d:d2:b3:7b:34:82:5b:b5:62:
f1:dc:0f:c4:c7:09:ba:2f:87:bc:de:a4:76:87:f8:
03:61:8a:eb:93:5f:3c:06:fb:6a:db:cf:ed:22:47:
ff:d0:2e:48:3a:85:f1:c9:d7:85:2f:21:65:8a:4f:
75:b2:98:c9:d9:7b:91:58:45:9e:a0:74:1c:cf:2c:
55:96:e8:7c:0b:89:7e:bd:e7:0e:ce:cb:9e:0a:b6:
78:b7:c2:a4:bd:e9:e3:e8:73:0e:ce:3d:cd:eb:68:
ac:85:22:d0:98:ff:c0:aa:91:05:0b:af:d8:a6:b9:
90:dd:d5:fa:98:9d:fd:ed:82:6e:55:5e:84:f5:07:
0a:6d:e4:32:54:19:90:f3:78:30:b8:77:e7:1b:40:
93:f2:d2:2e:06:5b:bd:5c:83:88:fa:91:3d:ee:7d:
98:55:62:25:0b:cd:33:91:14:ad:de:a1:e9:58:5e:
bb:77:58:e3:78:14:20:65:4d:74:7d:85:6f:c0:4c:
ad:e3:5f:99:07:29:84:7e:34:5d:cd:28:bb:8e:ca:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D5:F8:AF:77:02:B4:4E:5E:13:EB:38:ED:67:F2:9A:71:BD:DF:75
X509v3 Authority Key Identifier:
keyid:7D:DA:BD:64:87:11:D0:CE:56:98:98:96:EF:B7:3A:0E:65:E9:73:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f3:e0:59:52:de:a5:67:14:99:d7:44:58:47:9a:92:51:cd:
55:03:ec:0a:53:b6:07:bf:51:ea:46:fd:f2:04:92:a3:ae:69:
b1:a7:09:71:83:b3:68:f6:e3:0e:a6:61:c4:38:1d:3d:be:80:
63:dd:35:49:7d:d7:99:13:bb:90:9b:e3:48:f4:44:f3:6d:ab:
1a:96:7a:dc:87:f8:b3:99:d4:40:b0:6c:0f:bf:10:77:d0:d2:
5a:dd:7d:39:23:1f:48:f4:f0:c3:ea:52:9d:6c:70:b0:0b:75:
a3:50:3c:58:09:a4:ac:65:2f:15:e2:dc:5b:42:f8:1b:be:b0:
d4:d9:6c:3b:17:23:dc:d3:58:ca:bc:1f:ed:94:6f:c9:f3:4c:
b4:0f:c0:02:1c:8c:f8:5f:ce:31:43:26:8a:2c:a9:b7:d1:fe:
8a:59:2a:1d:a5:84:6c:e7:93:35:12:f5:db:ac:80:06:d9:72:
1b:8e:58:14:04:28:41:75:4a:74:e6:c6:8b:02:e1:00:27:ed:
2a:b3:78:7e:1c:8d:33:75:9f:86:a2:43:69:9f:67:40:c9:a9:
48:06:64:1d:6a:0f:a0:36:d2:68:5a:1c:1c:e3:72:f6:37:81:
85:4a:d8:de:8c:bc:53:7b:92:55:03:85:46:8d:66:4d:3f:dd:
48:d8:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:56 2026 by rpki-client