Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft
File: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft (raw, json)
Hash identifier: JKRgINTztk81QQJ3PTeLFNkKKCIa3qaMVb+68x1xxXU=
Subject key identifier: 63:A6:B9:E1:BD:54:D7:54:25:62:5D:A8:95:4C:BB:B1:C1:A6:A7:DE
Authority key identifier: FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07
Certificate issuer: /CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907
Certificate serial: 72F45CB6B78A4AFEEA4BBEFBE6D9ADD28FB4F544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft
Manifest number: 85
Signing time: Tue 02 Jun 2026 16:30:31 +0000
Manifest this update: Tue 02 Jun 2026 16:25:31 +0000
Manifest next update: Wed 03 Jun 2026 18:22:31 +0000
Files and hashes: 1: FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl (hash: AuzU/vhfLgFh55J6lFOQqvugaffF4B+WSZf/Ks9Ziic=)
2: 3138352e3230302e3231312e302f32342d3234203d3e203137353631.roa (hash: vaq2U1utiHAmwsFdBJWN8CZ3Xs8ef88rxfCkv12YYlQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft
rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f4:5c:b6:b7:8a:4a:fe:ea:4b:be:fb:e6:d9:ad:d2:8f:b4:f5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fddee908a9ad2dfbe32ff35b402a5ab2198dc907
Validity
Not Before: Jun 2 16:25:31 2026 GMT
Not After : Jun 3 18:22:31 2026 GMT
Subject: CN=63A6B9E1BD54D75425625DA8954CBBB1C1A6A7DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:39:f3:29:32:b4:60:10:c2:4f:ac:1d:ab:
34:35:ec:02:d7:38:75:32:d7:74:9e:e9:25:3e:3e:
fe:7a:bf:22:d8:8c:a0:61:72:e2:23:3c:ad:94:6c:
68:9b:f2:75:08:6f:55:dd:31:f0:4e:95:74:57:8e:
29:44:8c:0d:cb:19:12:27:4b:b3:5d:88:8e:79:85:
1c:aa:99:b4:1d:bc:ef:2b:b8:73:db:36:c7:5e:6b:
1b:5f:df:f7:ab:0b:ca:e1:31:df:99:ea:67:48:59:
19:3c:93:67:e5:2f:7e:06:b1:2c:bb:55:15:49:36:
eb:84:e3:53:e6:3f:85:af:dc:ee:73:b1:83:d7:6e:
cd:35:1c:78:ee:2a:90:f9:c5:96:b9:4f:ed:e6:f5:
2d:0e:be:f9:26:c0:e2:68:5f:fd:da:2a:e5:b7:1b:
4a:e0:eb:4f:44:9c:61:31:b5:a5:fe:dd:fb:a1:fe:
e1:e7:02:15:9d:71:22:e9:63:3c:ec:31:64:cb:3d:
7e:de:14:d3:be:c9:47:75:64:0a:77:17:b1:0f:12:
e1:4a:ea:08:de:e5:07:a4:9b:e7:f1:b5:f8:ed:d2:
a7:01:78:9d:c9:27:0d:d6:a8:d5:1b:b7:5f:e7:78:
61:47:58:10:32:8e:67:de:90:aa:75:63:0c:45:a0:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A6:B9:E1:BD:54:D7:54:25:62:5D:A8:95:4C:BB:B1:C1:A6:A7:DE
X509v3 Authority Key Identifier:
keyid:FD:DE:E9:08:A9:AD:2D:FB:E3:2F:F3:5B:40:2A:5A:B2:19:8D:C9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_d7pCKmtLfvjL_NbQCpashmNyQc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/3/FDDEE908A9AD2DFBE32FF35B402A5AB2198DC907.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e8:6d:32:79:03:aa:33:45:ba:fc:21:47:70:98:30:9b:d7:
11:99:c0:5f:13:7f:37:43:56:36:cc:11:44:7f:85:51:8d:8c:
eb:ed:a9:ac:1d:d4:0a:0b:b9:f0:4b:ec:41:1b:b9:0f:9d:ef:
d4:d0:de:95:09:17:f8:c0:c3:56:a9:b2:f3:76:26:1a:c8:22:
3f:ad:1d:1b:ac:2a:03:a3:c1:04:a9:a1:8e:c5:5a:17:2a:98:
9f:d8:94:42:82:5d:88:18:9a:00:b4:20:60:c4:33:84:c0:52:
ce:5c:e5:16:2e:a4:85:23:50:c7:55:1d:b2:6a:2b:67:65:74:
83:32:03:d6:67:f9:09:78:7f:7b:c3:34:a1:c8:03:a2:3c:af:
eb:d8:29:89:c8:d4:d2:f1:8e:ed:45:24:6c:c3:da:f8:93:28:
b3:fa:37:20:08:70:87:32:a8:0e:f6:2a:2e:64:d3:84:d1:34:
a7:c2:e9:db:5a:48:b6:78:f4:0d:96:9e:0c:5f:f2:ef:b6:1b:
11:6f:6e:95:af:44:00:fd:34:29:c8:2d:89:3b:94:92:51:28:
24:ed:9e:5e:8e:cf:8a:4c:88:7a:6e:8d:07:b3:5a:82:9d:91:
34:fd:83:4f:09:56:1e:a2:88:5c:15:c6:ac:21:ce:11:6b:33:
b8:f3:09:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:14 2026 by rpki-client