Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
File: fQDvTzv2W4fPoC73tKZYm6LeT_c.mft (raw, json)
Hash identifier: +vluJa8h3hbCBEOvtwUA6D5PcS7ukHIv3limzEgLBhI=
Subject key identifier: 86:90:89:45:7A:B3:D0:81:2C:8E:0A:C7:A9:EA:BF:4E:39:2C:CB:4D
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Certificate issuer: /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial: 019D2583C9151F9B102157A2C97351A94DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
Manifest number: 108B
Signing time: Wed 25 Mar 2026 15:01:26 +0000
Manifest this update: Wed 25 Mar 2026 15:01:26 +0000
Manifest next update: Thu 26 Mar 2026 15:01:26 +0000
Files and hashes: 1: fQDvTzv2W4fPoC73tKZYm6LeT_c.crl (hash: ZEJy+lIFEQukUxmHRfa+QKizKVohdV1hFxd9isGcun4=)
2: hGI3ocS-L58v4Or7ijp-3kbHDDI.roa (hash: KGbTVHSNg2+WZM2vF2JiCGPUm6fdzfEhTo+s9xkWkXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c9:15:1f:9b:10:21:57:a2:c9:73:51:a9:4d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Validity
Not Before: Mar 25 15:01:26 2026 GMT
Not After : Mar 26 15:01:26 2026 GMT
Subject: CN=869089457ab3d0812c8e0ac7a9eabf4e392ccb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:c4:7c:d5:12:d3:e5:60:67:72:f1:12:c4:
5d:80:bb:f5:04:a6:8f:7a:53:78:38:4c:74:0c:f6:
d4:2d:b2:74:e7:a4:2c:46:9f:c1:a5:6e:b8:8e:ed:
9a:e8:3b:98:04:95:b6:69:b6:41:41:51:7f:ce:ef:
8f:39:85:98:ea:8d:5c:c9:56:dc:3d:87:2b:95:77:
25:1e:44:db:8b:f2:9b:48:80:f9:50:83:b8:a8:ef:
e2:fd:fa:95:8c:24:0a:9a:f8:03:1e:a3:fb:f1:c4:
fd:12:f0:a9:6d:d1:27:89:34:05:17:19:f6:e3:5f:
6c:49:d0:2e:a9:00:06:9b:26:82:93:89:a5:59:41:
10:14:0f:2b:be:b0:c9:33:49:36:30:a5:69:98:45:
57:d3:c1:de:85:8e:54:85:e9:8b:06:ca:42:1d:ea:
f6:50:9d:f1:c4:3e:12:ee:7e:87:1c:7c:0c:25:8f:
6f:85:fe:d4:35:d9:84:09:88:de:b9:ad:51:40:1e:
cb:3c:eb:05:9e:de:58:01:44:40:47:cd:0a:b4:28:
bd:de:c5:01:e0:44:12:54:7a:c2:90:14:f5:1e:5e:
9a:a6:bf:b3:49:97:44:92:f4:73:83:87:f9:70:4b:
62:c5:f0:9a:b3:c8:56:1b:c3:60:b4:c2:09:b0:f3:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:90:89:45:7A:B3:D0:81:2C:8E:0A:C7:A9:EA:BF:4E:39:2C:CB:4D
X509v3 Authority Key Identifier:
keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:80:88:c1:39:cb:07:fe:8a:05:f9:c0:fa:c5:30:ac:d8:b5:
1b:68:2a:7b:1d:23:fa:a0:46:c3:d2:0c:87:e7:1e:f6:f8:b9:
bf:90:d4:3d:15:b3:b8:f3:47:3b:04:de:9a:ce:13:52:a5:7d:
77:3a:2e:06:9e:d7:56:a6:4c:76:d1:83:9b:5d:f5:8f:93:70:
60:85:4a:53:20:4f:3f:2d:1f:31:40:50:23:71:b5:33:f9:5f:
db:07:28:d3:48:1f:cb:d1:5a:11:d3:2c:ed:3b:c5:f4:e6:2b:
87:97:99:ee:fe:e0:57:fb:e1:73:78:a4:f7:f5:8d:38:b4:ff:
31:54:44:ca:65:23:e7:5b:08:18:0b:54:fe:95:1a:59:55:ed:
2f:9f:28:e0:90:e6:00:3e:fe:31:75:29:64:1b:43:7b:78:f5:
e2:7b:39:e4:10:a1:66:85:4b:47:5d:3c:ad:43:ce:dc:cc:f3:
0d:ae:bf:6a:e5:78:a8:98:0c:b9:b5:ae:5e:ae:78:04:eb:5c:
93:3e:b3:ed:61:a5:1f:cf:90:e9:fe:ac:9d:6d:61:28:2d:36:
bb:86:36:5a:26:6d:6f:d4:a5:98:89:89:20:5d:85:09:37:9d:
fa:19:cb:98:fd:e1:99:bb:3e:13:1a:a0:1a:9b:34:f1:ec:bc:
42:92:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:35 2026 by rpki-client