Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier: EaJ5Qf0LyD/zRxdg7UxW7/OYtQVCDxgNhLddUyyXWms=
Subject key identifier: DA:37:AE:D9:42:F3:AF:49:46:56:7D:AE:80:F8:BE:12:65:83:2F:FE
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 019D39408076408D5766835A53ED3A8BE7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:00:21 +0000
Manifest this update: Sun 29 Mar 2026 11:00:21 +0000
Manifest next update: Mon 30 Mar 2026 11:00:21 +0000
Files and hashes: 1: c7Yx8OXgZDt8m0xgBRRRBHak7tc.roa (hash: t4bLovDufBExbhkrhfSHs58+VNj/VxtITodpGthPLYM=)
2: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: 6J6D19uv5qsQS+YSW8bVRlmm1pUS/08pteE0UCe8ykU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:80:76:40:8d:57:66:83:5a:53:ed:3a:8b:e7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Mar 29 11:00:21 2026 GMT
Not After : Mar 30 11:00:21 2026 GMT
Subject: CN=da37aed942f3af4946567dae80f8be1265832ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:cc:8e:89:45:6d:4e:01:23:76:b3:c7:7c:
1a:04:87:05:e0:60:91:15:a1:d9:7c:3c:b8:71:c9:
db:2c:95:de:b0:68:c0:31:93:e5:8a:1a:6f:40:ec:
ae:8d:ba:76:b0:ef:56:b2:ea:2c:b7:b0:21:51:c9:
f5:8f:b1:fb:f8:1b:e2:32:82:1b:ab:d7:99:23:e2:
6b:6c:ad:db:ff:cc:81:b7:b8:d6:1a:ef:6b:e9:25:
f7:cc:c8:b8:5c:ce:01:73:5c:9b:4a:56:07:2a:aa:
cc:4d:8d:6c:de:cd:ad:2d:79:85:f6:0a:03:2a:97:
2b:40:52:25:4c:2a:2d:e9:4e:62:16:2f:78:ad:47:
49:db:9f:68:77:67:28:71:98:63:b3:44:4c:b4:30:
88:29:b9:eb:85:9c:cb:d4:c9:5a:e4:58:78:0f:3f:
5b:27:44:76:7a:37:ce:91:3a:8a:9c:18:0f:9a:5a:
60:b9:29:91:26:7d:6a:ff:0e:cf:98:24:f3:9a:7c:
f7:87:80:6c:cc:ec:55:7f:6b:34:27:22:a9:2e:99:
94:39:00:96:b6:47:94:2f:2f:ca:e4:d2:60:06:11:
d0:2a:8f:e3:f3:b1:83:df:1a:6b:8d:b2:df:ab:c0:
a2:c7:18:cb:95:30:72:de:fe:38:5b:4b:33:47:31:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:37:AE:D9:42:F3:AF:49:46:56:7D:AE:80:F8:BE:12:65:83:2F:FE
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:84:54:e2:41:ba:3d:ac:b4:b2:eb:69:bc:96:be:77:36:b5:
23:b7:4f:8f:8f:73:56:26:04:11:b4:0f:50:e6:10:a7:a8:fe:
27:53:ad:3c:82:a0:98:0c:ed:f4:84:50:2f:1a:ec:47:df:29:
a9:63:0b:c4:c1:d3:7b:6e:2b:46:37:e2:14:50:84:49:87:ad:
88:90:6d:26:20:49:69:8b:81:70:39:d0:e8:c8:53:f6:fd:39:
4a:3a:d0:8c:de:b2:d8:ec:44:b2:81:28:08:1c:61:24:a8:bb:
4f:89:3b:ea:ce:bc:cd:2b:2f:c8:53:70:2a:2c:84:5e:a3:08:
25:af:5f:78:26:a2:e4:33:22:37:c0:8a:aa:82:16:7c:30:ad:
06:2b:be:6b:73:24:23:01:43:dd:6b:c8:f5:16:69:c6:62:3f:
b8:9a:61:35:db:75:95:e3:50:b2:82:19:0d:66:df:8e:b4:a7:
cb:6d:df:9d:ed:ae:9e:4d:4c:d5:cf:25:5d:d4:11:9c:81:86:
1f:45:ef:19:af:97:8b:05:66:6e:0a:00:3a:cf:db:56:eb:61:
f6:3c:28:9c:67:e4:90:d4:0e:95:7b:b6:ca:1d:68:a6:8b:01:
98:1a:d0:98:a2:39:66:ff:b6:01:8c:cc:49:5f:ea:8d:4d:63:
b3:04:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:41 2026 by rpki-client