Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: 5eqCUPbi942pEh4JXL6Xiun31erWANucjaB6ZT7dVV0=
Subject key identifier: 73:98:3A:8E:90:FC:C5:6B:29:8B:34:12:0F:16:B3:5F:25:0F:5C:98
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 019D27A8DEB6B43BF54A157C7947BBCFE11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 0707
Signing time: Thu 26 Mar 2026 01:01:11 +0000
Manifest this update: Thu 26 Mar 2026 01:01:11 +0000
Manifest next update: Fri 27 Mar 2026 01:01:11 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: FQDIrpG9AgTvKfBk6aVGZaKpSSvqeowRTzwm+EtJ5nM=)
2: gKy9zHGv_AzpQLevKwupWQqjQQo.roa (hash: b17GwYPcAv3jWGndXOTYFmkgmyJcASg4uml7i5Uih54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:de:b6:b4:3b:f5:4a:15:7c:79:47:bb:cf:e1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Mar 26 01:01:11 2026 GMT
Not After : Mar 27 01:01:11 2026 GMT
Subject: CN=73983a8e90fcc56b298b34120f16b35f250f5c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:ca:4d:d4:fa:76:0a:bf:36:13:47:a8:92:
dd:cb:06:3c:d9:7e:b9:04:da:f2:42:5e:df:a5:80:
a6:16:3a:a6:58:30:de:9c:18:59:3a:a6:aa:af:67:
ce:c3:90:12:1b:ec:8a:a8:6c:56:5d:5c:30:23:48:
5a:56:0b:1e:86:8c:49:72:ab:0e:ed:df:65:99:0b:
8f:19:df:41:b9:01:94:62:6d:a5:18:90:83:3d:e8:
de:d2:19:56:6f:61:25:70:ee:1b:6a:a3:52:a1:27:
d7:d7:bd:18:86:94:73:85:43:2c:44:59:fc:1d:d1:
7a:aa:a1:59:1c:50:ea:c1:fe:9e:e5:63:3c:05:e1:
fe:ee:71:18:d2:f2:fa:75:7f:fd:c1:a1:d5:14:61:
55:0e:c9:c9:80:4a:b9:62:08:58:e5:7d:68:bc:b4:
8d:b6:45:e9:10:95:88:ca:fe:40:c0:f8:18:10:b4:
b4:77:e8:01:d1:ca:8c:3a:1e:94:76:0e:ba:d6:3e:
e2:b5:f5:f7:b9:20:d9:d9:09:bf:c6:b8:36:ae:2f:
d1:f1:76:60:d7:c8:02:48:11:e1:93:58:ab:7b:e3:
24:2a:65:f4:2f:d4:0b:d7:a1:12:b2:da:f0:cd:62:
85:01:73:6a:ed:73:a9:8a:ad:f0:7b:4c:bb:3b:6d:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:98:3A:8E:90:FC:C5:6B:29:8B:34:12:0F:16:B3:5F:25:0F:5C:98
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4f:cf:f1:45:b5:7f:7e:53:98:24:d0:d1:21:c7:29:33:f7:
5e:82:33:85:66:da:2b:51:c9:66:52:9a:45:f9:ad:c6:1c:8c:
00:3f:e0:4b:d5:8b:4b:05:00:49:a6:0a:4a:d6:26:54:55:55:
0e:47:0e:ea:3c:a2:34:d2:ae:83:f9:2e:0f:c7:35:30:55:f4:
ad:89:e5:c4:7a:0f:5a:e4:41:f9:12:a1:60:ca:43:ea:02:bf:
ba:ee:a7:2c:7a:96:aa:0f:d3:c9:46:37:61:ec:76:6e:53:4f:
b2:89:92:56:6a:e4:b7:50:21:06:ec:09:21:03:a7:a3:8e:33:
4e:ae:8a:52:45:4f:96:dc:6b:fa:ab:4c:b6:68:f0:53:bc:56:
91:33:30:59:c8:2d:ae:d1:3a:4a:5c:32:ee:b8:85:5f:07:c5:
75:89:cf:b9:21:c9:e9:e2:80:79:3b:90:0f:29:56:77:15:c9:
fa:fa:fd:aa:24:1c:ab:ce:97:60:fd:dd:f7:0d:56:57:eb:2a:
a4:0d:7d:43:db:da:44:b4:ce:d8:d8:c3:f2:64:e6:e0:8e:9e:
ba:ad:d3:25:21:a0:d7:6e:f0:aa:a0:47:23:3f:ed:f8:34:5b:
37:ca:19:6a:a7:5e:88:c4:27:9d:8b:f5:6c:67:b9:99:57:e2:
7f:39:11:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:51:50 2026 by rpki-client