
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File: Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier: 2mIhSZDzzVuLNhiJFK2q2wMGf3f0NSOfUSd0Qkhbtz4=
Subject key identifier: 3D:A8:79:27:24:45:C1:AB:96:17:18:97:23:71:6F:C2:D9:C6:DA:BE
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 019D28BBB96DE7DA51FA3E6B4C2606B071F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number: 1023
Signing time: Thu 26 Mar 2026 06:01:24 +0000
Manifest this update: Thu 26 Mar 2026 06:01:24 +0000
Manifest next update: Fri 27 Mar 2026 06:01:24 +0000
Files and hashes: 1: 3x_eNlfqr-pzS31r85Kyh1RTzhw.roa (hash: ca0B1hA6S7RSMd4p7jDgIrOLafYEE67HR7dN2aYSue0=)
2: AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa (hash: UJ521U9kX8KbpPJ5yoTgLuBYMW8RZw/CsvE9VFkznzw=)
3: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: Zm91r8VmwUCYKqfTZJ1ae0BBtRBZYUABiEylIfM9RlA=)
4: k3Io6XWMMdN-bVtwln4_8KO-IVA.roa (hash: Aa8iwiJFepHxrsbFSA+APkKdOhzyuMHdrvQewpxY1oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b9:6d:e7:da:51:fa:3e:6b:4c:26:06:b0:71:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Mar 26 06:01:24 2026 GMT
Not After : Mar 27 06:01:24 2026 GMT
Subject: CN=3da879272445c1ab9617189723716fc2d9c6dabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:b1:04:46:97:a8:e1:f6:a1:96:22:4d:4c:
47:5e:b8:83:61:56:63:74:ae:c6:93:1c:37:3d:60:
3a:0a:62:b7:41:ce:6b:67:57:c1:70:1b:4a:db:8c:
b8:d7:68:b8:1f:2b:7a:c5:43:94:91:2b:24:b7:71:
b6:b7:35:cd:c5:58:ad:1d:74:45:16:c8:87:9c:f0:
9d:b4:2a:5b:47:12:36:7b:b2:67:9f:b7:af:0e:aa:
62:bd:67:5b:69:2c:88:14:8d:b8:dd:b6:79:b4:4b:
40:6c:29:4a:87:1c:94:db:a0:22:30:47:55:e9:32:
3d:3e:4b:ba:fb:17:2b:a3:51:72:ef:28:b4:39:9f:
8c:bf:7e:fe:36:b1:89:01:85:8e:cb:c8:29:c6:1a:
2f:f7:93:3d:41:51:81:c5:f6:62:bb:d0:2d:11:4e:
3c:f4:3b:63:91:97:2c:8b:7d:39:7c:23:4c:1d:45:
7d:4f:eb:d0:e6:9e:24:0b:07:3e:4c:a5:8c:03:e5:
e7:4a:d0:b3:66:55:47:08:f9:4e:36:f4:ec:4b:c4:
da:31:11:30:2c:bb:31:18:8e:d7:08:be:62:d3:00:
b8:0c:0a:13:13:99:12:97:fb:30:f0:86:0b:93:02:
55:23:d7:7d:7c:83:02:ec:23:7d:48:14:29:cb:42:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A8:79:27:24:45:C1:AB:96:17:18:97:23:71:6F:C2:D9:C6:DA:BE
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d4:51:a4:83:e0:0f:0e:f0:c6:24:65:e5:e6:89:45:5a:f1:
11:01:b0:01:81:e0:eb:7d:f5:4b:6e:85:d0:a7:16:e4:0e:db:
d5:eb:f4:3f:df:ab:8a:b5:22:84:92:2d:99:35:b0:4d:41:de:
af:b6:06:bc:80:8d:06:6f:ef:a3:4f:d2:3b:e0:7f:79:4f:d9:
3c:22:e9:29:c2:42:07:97:d9:37:02:92:e6:35:a8:39:0b:c5:
7f:36:6d:06:91:1f:58:34:34:2a:51:e7:6c:ef:9e:a0:05:b5:
39:63:61:96:44:7b:91:79:80:16:54:9c:8b:ca:6d:37:00:24:
58:da:4f:b4:6d:33:48:86:cf:75:ec:20:7f:9b:e7:c6:ae:29:
49:94:12:fc:7d:98:af:0c:14:0f:3e:8b:eb:0c:40:b9:c3:f1:
ef:e5:e1:d4:b6:94:38:49:cf:26:72:83:03:7e:2d:cf:22:c4:
8c:f2:49:01:bb:22:7b:e4:83:a9:16:95:f4:5f:bb:99:5b:23:
f0:6f:dc:c6:8a:f7:98:31:30:3a:a6:14:c2:ae:38:5f:c1:0a:
7d:5f:fa:6c:08:66:33:2e:49:a8:46:a1:b8:2a:f6:0c:e0:f3:
65:2a:1b:1d:b7:dc:1f:a7:17:f4:be:52:29:49:f5:f9:0a:77:
02:c1:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:41 2026 by rpki-client