Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.mft (raw, json)
Hash identifier: 7pDXJOUOKCsrFtnMAuAYnWt3DphCOuqv9BhVZkI7xSI=
Subject key identifier: 6A:FE:27:A1:88:7D:CC:C9:60:2A:78:F5:D2:1C:B6:D2:A5:8D:39:67
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 019DCED04102AFB0A4E4C7135BF6F4AEF95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
Manifest number: 0D7F
Signing time: Mon 27 Apr 2026 12:00:47 +0000
Manifest this update: Mon 27 Apr 2026 12:00:47 +0000
Manifest next update: Tue 28 Apr 2026 12:00:47 +0000
Files and hashes: 1: KfM_Z_Z-SNR188s2cAL37I8urEE.roa (hash: UID52aiMOKJSN+qhsE3djfMdcKj7BbWtDHOsP/vEFqQ=)
2: _dD9aMG2tWm598SBOsEt7Wrl6Ks.crl (hash: b73eJeqGSfqls02eoeZAGEgWb2nS9+5ijEjTziPgku8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:41:02:af:b0:a4:e4:c7:13:5b:f6:f4:ae:f9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Apr 27 12:00:47 2026 GMT
Not After : Apr 28 12:00:47 2026 GMT
Subject: CN=6afe27a1887dccc9602a78f5d21cb6d2a58d3967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:ff:62:50:97:73:f0:15:8a:e0:d0:50:f2:
10:6c:5c:7e:82:4c:04:fb:83:cd:ab:50:86:ad:a5:
88:39:1b:8f:2a:59:c5:43:c9:f7:61:8b:2c:05:f5:
12:55:e6:26:84:1c:f5:34:86:ce:cc:00:53:0c:3d:
87:ab:71:0c:d9:a5:e2:77:27:60:2b:03:0f:50:14:
0e:64:1f:67:3b:75:0e:da:af:5c:5a:e6:6a:49:c3:
0b:07:7f:f3:94:1a:6e:81:ea:02:08:90:3f:f6:d8:
84:f4:59:ca:fa:1c:43:ae:ad:76:b5:7a:cb:da:06:
0e:61:da:d7:0b:a9:e9:d3:85:10:9a:df:b4:de:6e:
0e:65:6c:6c:7c:7c:89:d9:ad:68:34:15:c0:4b:65:
6c:30:ad:b7:ff:09:21:d1:47:28:1a:af:3e:2e:f6:
9e:35:54:0d:fe:79:b9:ec:70:c5:93:f7:38:fa:47:
33:20:f2:2d:36:e0:7c:9e:10:c0:82:6d:43:c6:88:
35:5d:af:ce:1c:4e:2e:4b:87:ce:29:0b:b3:07:eb:
de:67:f1:38:40:05:30:51:9c:f8:a6:a7:b3:47:96:
95:26:6d:8a:a4:89:f2:79:8e:e1:ad:83:06:55:59:
40:15:ed:5c:c1:c6:72:5d:c5:8c:14:ff:17:b1:a1:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FE:27:A1:88:7D:CC:C9:60:2A:78:F5:D2:1C:B6:D2:A5:8D:39:67
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:89:93:18:60:f9:55:b7:60:ac:76:e4:d7:c3:73:07:5f:ac:
f3:3a:4c:de:9d:cf:90:a0:4e:67:13:1c:bc:a5:20:ba:83:76:
08:b2:1b:7a:c2:4d:eb:7b:f3:d5:bb:96:95:f6:e9:7e:9c:51:
b1:f9:dc:fe:09:8a:83:31:2a:6e:3f:ff:b0:a3:98:16:14:60:
5d:1d:c8:39:5c:ef:25:8d:c3:53:b2:2f:1b:f5:08:88:b5:12:
11:82:fc:0e:31:b7:d5:6b:8f:9d:46:4e:9e:9a:04:af:bd:06:
a4:83:7b:33:36:21:c6:c5:72:df:30:b3:11:fc:33:61:4b:54:
b5:31:f7:28:b4:fc:2f:d7:5c:20:65:8f:2b:8a:22:a8:e4:bc:
1a:f3:39:f2:9a:a9:a3:98:42:be:72:90:62:9a:12:cc:42:9c:
6b:26:9e:37:c1:ad:53:08:aa:46:7e:29:92:62:0d:77:83:50:
e0:6e:29:a2:a7:38:91:19:47:7d:5b:56:dc:f6:68:27:12:a7:
f2:b7:6d:db:2c:17:36:82:46:82:c4:56:b3:9d:4f:4f:4a:53:
5e:63:30:5e:fd:c3:7b:58:87:fb:3b:21:25:23:c9:bd:92:a8:
61:85:0e:0e:93:3c:2b:6d:af:2a:fb:73:12:42:7c:7e:43:a1:
9b:45:3a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:31:01 2026 by rpki-client