Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File: Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier: jcxHbvJ1szszdaYECJENSC0i2LAX14Qo+BBy65DQnZE=
Subject key identifier: 3A:73:3B:E0:94:E4:56:0C:EA:F0:82:36:5B:63:8C:4D:FF:E5:D5:15
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 019D382EAB8248514B89F756709E91AF38AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number: 18A1
Signing time: Sun 29 Mar 2026 06:01:15 +0000
Manifest this update: Sun 29 Mar 2026 06:01:15 +0000
Manifest next update: Mon 30 Mar 2026 06:01:15 +0000
Files and hashes: 1: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: zhAy+IR353091+q1bdNUQYotNP5w785Np0zXNx+KYz0=)
2: WDUelmNWtMrCQbOJvUmN2XaStwI.roa (hash: KWgWYImtf/YNaXBplwW65YCHE6E/0lUKm659Dqli3Kc=)
3: Wt_ouvMs8E7XNhDiQlEIBb5_EdQ.roa (hash: XqNX6SSr2Oq+GTNhsHhbudiKIR3OH7BFPiSnD24oL6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:ab:82:48:51:4b:89:f7:56:70:9e:91:af:38:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Mar 29 06:01:15 2026 GMT
Not After : Mar 30 06:01:15 2026 GMT
Subject: CN=3a733be094e4560ceaf082365b638c4dffe5d515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:30:2d:c2:f6:f8:e6:a6:30:72:23:de:94:
fa:c3:2e:8d:ea:75:0b:a5:1f:50:bc:7b:f5:0e:42:
1e:04:69:7f:c0:e9:be:74:f5:5a:6e:c1:dd:84:24:
a3:cc:31:9a:b7:02:89:18:2f:a5:c5:a0:55:e7:e2:
b2:1c:9f:13:e3:63:2c:37:3e:1c:5a:35:a2:d9:9a:
80:8f:ef:ba:59:ad:0c:47:86:04:fb:b4:c9:80:30:
36:99:9e:c4:66:c3:5b:b2:f2:27:af:89:32:2a:af:
6e:64:53:a9:f2:2a:09:be:87:fd:b9:c7:d3:97:82:
ec:41:65:44:f7:a3:7d:01:23:8e:1f:ca:4d:74:e7:
cd:9b:bf:02:d3:db:87:fd:b4:5e:25:4b:37:13:bf:
f2:ae:06:b2:70:b7:c9:0c:a4:d1:b0:bf:d9:68:ed:
e1:31:b4:8d:58:bd:59:db:9b:d2:aa:e3:62:5d:85:
c9:cd:bc:2b:c2:94:1d:7d:22:c5:01:c8:41:84:21:
1c:f6:4a:47:96:61:89:a7:2f:75:ff:88:0a:ed:32:
f0:d6:58:3a:c3:23:1e:c3:66:89:72:7b:7c:3d:87:
af:40:15:71:5b:95:ed:44:9f:4e:4e:44:1d:6e:30:
39:41:0e:dc:5a:d7:22:41:09:4e:06:c6:0c:a0:3e:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:73:3B:E0:94:E4:56:0C:EA:F0:82:36:5B:63:8C:4D:FF:E5:D5:15
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:57:d5:ee:4e:47:20:57:f7:63:06:d9:63:24:cf:f2:1b:89:
90:b2:67:66:c4:1e:26:4d:b3:99:b0:09:c8:bc:e5:8f:9f:65:
b3:c0:7a:ad:79:6d:b1:38:e4:6d:f5:26:ec:02:45:b9:74:0f:
23:f5:e7:48:33:07:d2:61:13:58:65:9d:40:07:8c:8e:9d:ed:
77:b9:bc:83:15:21:78:27:95:d9:1f:75:e7:3d:ed:86:d9:db:
3e:bd:13:8a:bf:e2:16:74:8e:ca:b3:0e:ab:19:c5:a7:cb:21:
b5:d3:20:0b:f9:95:f8:74:c9:fa:47:4e:4b:ac:4f:21:6e:2a:
d9:08:d8:da:01:2b:58:8d:d8:5a:da:e6:76:16:56:a5:b1:c3:
50:3a:88:62:5f:a2:15:8d:5f:c7:61:69:f4:75:6b:45:66:2b:
32:f7:a5:0a:6b:cb:09:94:d3:ef:da:65:10:0d:af:14:45:e4:
07:d2:e3:26:05:a3:20:0a:43:4a:b2:b2:be:14:c9:b4:76:56:
25:c2:a2:92:18:62:87:15:6c:3d:11:f4:41:1d:64:53:df:1e:
1e:78:5a:5f:d0:73:84:ef:25:3e:ed:35:42:a0:40:4d:e4:56:
db:66:24:27:46:c2:d5:c5:d4:74:88:ba:07:8a:7e:af:2e:3f:
a7:1d:72:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LquCSFFLifdWcJ6RrzirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZGMzY2IxZTA3ZDcxNGI3MjVmNTFhNjZkMWRjZmQ4N2Fl
MWM1MWEwHhcNMjYwMzI5MDYwMTE1WhcNMjYwMzMwMDYwMTE1WjAzMTEwLwYDVQQD
EygzYTczM2JlMDk0ZTQ1NjBjZWFmMDgyMzY1YjYzOGM0ZGZmZTVkNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8UwLcL2+OamMHIj3pT6wy6N6nUL
pR9QvHv1DkIeBGl/wOm+dPVabsHdhCSjzDGatwKJGC+lxaBV5+KyHJ8T42MsNz4c
WjWi2ZqAj++6Wa0MR4YE+7TJgDA2mZ7EZsNbsvInr4kyKq9uZFOp8ioJvof9ucfT
l4LsQWVE96N9ASOOH8pNdOfNm78C09uH/bReJUs3E7/yrgaycLfJDKTRsL/ZaO3h
MbSNWL1Z25vSquNiXYXJzbwrwpQdfSLFAchBhCEc9kpHlmGJpy91/4gK7TLw1lg6
wyMew2aJcnt8PYevQBVxW5XtRJ9OTkQdbjA5QQ7cWtciQQlOBsYMoD4W3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpzO+CU5FYM6vCCNltjjE3/5dUVMB8GA1UdIwQY
MBaAFBXcPLHgfXFLcl9Rpm0dz9h64cUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmR3OHNlQjljVXR5WDFHbWJSM1AySHJoeFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hOWNjNWQtNjllMC00NTk3LWFkNjQt
ZmUyY2I0MzFjZjJmLzEvRmR3OHNlQjljVXR5WDFHbWJSM1AySHJoeFJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hOWNjNWQtNjllMC00NTk3LWFkNjQtZmUyY2I0MzFjZjJm
LzEvRmR3OHNlQjljVXR5WDFHbWJSM1AySHJoeFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVfV7k5H
IFf3YwbZYyTP8huJkLJnZsQeJk2zmbAJyLzlj59ls8B6rXltsTjkbfUm7AJFuXQP
I/XnSDMH0mETWGWdQAeMjp3td7m8gxUheCeV2R915z3thtnbPr0Tir/iFnSOyrMO
qxnFp8shtdMgC/mV+HTJ+kdOS6xPIW4q2QjY2gErWI3YWtrmdhZWpbHDUDqIYl+i
FY1fx2Fp9HVrRWYrMvelCmvLCZTT79plEA2vFEXkB9LjJgWjIApDSrKyvhTJtHZW
JcKikhhihxVsPRH0QR1kU98eHnhaX9BzhO8lPu01QqBATeRW22YkJ0bC1cXUdIi6
B4p+ry4/px1yuw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:08 2026 by rpki-client