Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File: fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier: /l94vdRbRdZHBMZngoITW2iIzq7VASMiEYPaQ1/gIwo=
Subject key identifier: 9A:D1:3C:11:49:3A:DE:E4:29:5B:DD:3D:B5:A8:18:0A:92:47:25:D4
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 019D29CECB5A2CDAA8A330189A84EBF98D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number: 18AB
Signing time: Thu 26 Mar 2026 11:01:51 +0000
Manifest this update: Thu 26 Mar 2026 11:01:51 +0000
Manifest next update: Fri 27 Mar 2026 11:01:51 +0000
Files and hashes: 1: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (hash: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4=)
2: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (hash: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU=)
3: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (hash: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c=)
4: WPr7hmOS_5zgQSOkKpNrOBkQjP0.roa (hash: zY6UwlQ/GxjFTntYJPN/sGqFKcDOf8d8m1v7xUcl1jY=)
5: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: k27he8DxqOnnLRgiywFXJqVv64Gs05S0hJxfrj+b/TA=)
6: fkKkQqSxJp_plv8zmlMuWpt7SKA.roa (hash: Sf+HsASX9t6YQf31Gs6tChY0U3y7nkWEG9+UmtOAYlc=)
7: gxHDLsArjTiXKEpHJWMyRpUv3cY.roa (hash: dCObsibTUgKigew1g86RJZOg/QuYkH7A+/+pCpHO7nk=)
8: nuyOFFadfRrO-PHC8XAHyHRujfs.roa (hash: /f8gp/JEgFhNhBZOt0Zfqqd/+VO8Z7hxkEAexMPxwQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:cb:5a:2c:da:a8:a3:30:18:9a:84:eb:f9:8d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Mar 26 11:01:51 2026 GMT
Not After : Mar 27 11:01:51 2026 GMT
Subject: CN=9ad13c11493adee4295bdd3db5a8180a924725d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:b2:07:60:55:17:11:40:64:31:26:5d:ad:
c9:86:33:bf:0c:76:e0:0e:44:03:e5:52:d1:fe:1b:
c1:b0:0f:93:10:88:08:90:f1:57:40:e2:f3:9d:5d:
47:17:6e:90:ec:99:b2:75:50:64:7a:1d:f2:db:3c:
b7:2f:2c:a0:fa:84:9f:c7:2b:cd:66:e2:45:1d:b7:
fd:26:4d:5c:89:10:92:f1:40:fd:bf:f7:af:60:4b:
4a:92:6c:bc:9f:e4:c3:84:ce:a5:a7:10:54:f1:70:
e7:2b:21:7a:74:c1:2e:1b:61:25:a0:2a:8f:7e:6f:
b3:ac:66:e1:16:33:bf:c3:76:b9:3a:04:b7:77:4b:
8a:85:7a:19:f7:2e:bd:5e:60:09:05:44:20:b7:01:
15:99:5a:1c:01:5a:4c:2d:59:43:7e:76:fe:a4:d5:
6b:f7:a9:80:46:f6:ad:06:d9:f9:e2:ad:36:c1:e1:
3c:5e:f3:9b:95:b9:89:d7:f1:17:d6:b7:9e:8e:9f:
0d:42:cb:ec:5f:64:2a:2f:eb:de:cd:48:04:55:e7:
b3:7a:64:d2:90:b1:24:75:eb:fe:83:4c:2e:97:db:
bc:22:1c:5d:ab:80:44:8c:04:95:53:d3:5a:91:17:
2f:f3:93:c7:0f:9d:71:c7:cf:61:63:98:7e:8c:d8:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D1:3C:11:49:3A:DE:E4:29:5B:DD:3D:B5:A8:18:0A:92:47:25:D4
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:fd:26:9a:9c:18:f3:6a:9c:89:36:37:41:c8:b3:14:62:
c4:46:d8:eb:75:77:14:97:3c:bb:45:eb:06:85:44:48:69:2b:
74:58:b2:6d:97:65:4a:4b:d4:59:ce:30:72:53:af:89:c3:66:
a2:c6:78:80:d7:9c:31:9d:24:5c:bc:34:ab:91:ce:20:63:27:
64:ea:6a:15:71:0a:aa:a9:19:85:98:22:bd:d2:5b:92:15:51:
68:4c:e3:5f:7c:a6:a6:2f:fe:4b:a3:e9:e1:02:0b:8d:f7:87:
60:b3:8e:f8:93:30:a9:ef:39:31:53:63:c2:12:10:05:ce:d6:
6d:a0:a2:15:fa:db:90:76:6e:52:14:c0:02:3c:a9:84:b7:9b:
63:61:0c:bd:18:1c:1b:dd:99:d0:bb:60:c8:cf:ea:e7:c3:6e:
c6:5d:83:c6:8c:b3:ef:0e:5f:3d:ae:01:43:ee:71:eb:bb:64:
e7:64:1d:dc:bb:df:0d:95:0a:d8:9a:cc:89:ed:43:29:bf:1b:
dc:7e:5d:23:d1:b9:75:83:da:68:c0:5f:8a:15:ff:63:32:09:
61:8e:a6:fe:69:a5:be:95:e1:a3:f7:b3:86:84:a2:a3:d5:cf:
a0:ae:73:b5:aa:b7:61:18:1d:51:d5:53:fd:49:7a:42:67:f1:
1d:73:83:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:28 2026 by rpki-client