Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier: 1JRhudnfxn7v1hJqn5R2k7rGUbUAtUfSiouGmSlb4qs=
Subject key identifier: 23:48:97:11:B6:4E:BB:CB:0B:55:6F:DB:1A:B6:12:5A:A8:45:CD:40
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 019D2695F183E49E1C8A27E21DDE1ACA638A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number: 0998
Signing time: Wed 25 Mar 2026 20:00:54 +0000
Manifest this update: Wed 25 Mar 2026 20:00:54 +0000
Manifest next update: Thu 26 Mar 2026 20:00:54 +0000
Files and hashes: 1: Wx2W2x44SbNMpet_nxHfcd54RRg.roa (hash: RaqqpE5anacxSOoNS8mABkC5o0iVF+x65+b349Ql+4w=)
2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: kO6nTULa+mFuxiP/2uexEzGNWtcfnAokkzEXaIPYaO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f1:83:e4:9e:1c:8a:27:e2:1d:de:1a:ca:63:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: Mar 25 20:00:54 2026 GMT
Not After : Mar 26 20:00:54 2026 GMT
Subject: CN=23489711b64ebbcb0b556fdb1ab6125aa845cd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:95:38:45:8e:65:5c:60:39:a0:27:17:b7:
63:77:18:1f:b4:06:27:ae:38:76:51:32:3e:8c:49:
b9:ac:07:81:2c:c7:a2:1a:ff:d1:11:6f:45:41:28:
b0:30:e2:62:26:ca:69:1f:5a:b8:5d:5e:26:c9:77:
8c:bc:ac:74:65:e2:4e:9b:c2:f1:c0:12:ab:c2:2a:
e9:da:77:0a:2a:1d:86:f9:19:b8:a0:e5:b1:31:f9:
ef:c4:d0:61:ac:c1:26:6a:9e:e6:94:4f:e9:22:18:
17:5b:a0:0f:3a:5f:e2:ec:8f:d1:31:40:b6:ba:7e:
2b:18:9f:21:71:5b:2b:97:3b:9b:77:ea:96:96:ca:
68:c4:47:61:f7:0c:0a:52:16:9b:f9:12:cb:85:96:
b7:80:26:ed:9a:e5:9e:13:6b:a9:87:96:0d:b7:cd:
9b:da:58:f1:d8:ca:af:59:6c:74:32:6b:87:10:75:
f8:64:d4:68:46:89:1e:2a:f0:93:c1:e9:60:03:ab:
da:91:9e:8a:2b:67:5e:70:39:5e:02:15:a2:f7:cd:
9c:ec:68:ae:8e:c2:7b:11:d3:53:54:df:ef:ca:73:
75:d7:96:97:31:02:42:3e:cd:c9:b8:e1:95:c4:a1:
74:54:4f:6c:50:c1:f4:61:fb:da:ca:e7:95:7f:ce:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:48:97:11:B6:4E:BB:CB:0B:55:6F:DB:1A:B6:12:5A:A8:45:CD:40
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:51:72:5a:79:eb:47:08:8a:b9:02:3a:4e:37:18:e7:c1:d6:
11:f5:31:de:3f:99:5f:96:80:04:02:98:6b:49:c5:f1:0b:ac:
6f:07:96:ff:64:ab:f0:ab:a3:5b:2b:00:9b:a4:a5:38:17:9a:
61:47:17:b4:33:3f:ec:46:e3:10:ae:ca:bf:83:a4:fd:b5:ea:
a9:ab:f9:5a:f0:bb:d0:c7:16:d7:88:be:e2:fe:ca:8f:aa:c7:
d5:02:5f:7f:88:21:60:c2:2c:1c:b8:40:a0:f9:45:98:20:59:
cc:44:f6:ee:b9:3a:46:0b:2f:50:96:6d:d0:01:9e:dc:a0:12:
0d:e8:97:cc:42:9b:fc:0a:fc:db:e7:0b:92:ca:88:a5:6d:12:
4d:b8:07:e9:e3:a0:f8:d5:68:9a:05:c9:e4:5b:bc:19:ef:06:
76:07:00:5b:a7:75:f6:ce:a2:d0:a4:f6:bf:68:0c:a3:51:5f:
39:3c:24:1b:8c:94:53:77:b0:91:45:ae:c0:eb:57:17:32:2d:
95:ae:a3:12:96:2a:ed:3b:40:eb:14:9d:72:2d:b1:86:52:8e:
04:ff:06:a1:a9:ee:d3:5c:59:ef:2f:f6:aa:cf:77:7b:d9:5e:
d7:23:59:0a:8a:6f:ca:ec:53:33:8e:cb:a3:1e:67:98:3d:90:
f0:82:38:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlfGD5J4ciifiHd4aymOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZDUxZGMxMDJhNDk3NTE4ZTE2MDkxZTY1ZTgwNWMyNDM4
ZWYyNWIwHhcNMjYwMzI1MjAwMDU0WhcNMjYwMzI2MjAwMDU0WjAzMTEwLwYDVQQD
EygyMzQ4OTcxMWI2NGViYmNiMGI1NTZmZGIxYWI2MTI1YWE4NDVjZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8yVOEWOZVxgOaAnF7djdxgftAYn
rjh2UTI+jEm5rAeBLMeiGv/REW9FQSiwMOJiJsppH1q4XV4myXeMvKx0ZeJOm8Lx
wBKrwirp2ncKKh2G+Rm4oOWxMfnvxNBhrMEmap7mlE/pIhgXW6APOl/i7I/RMUC2
un4rGJ8hcVsrlzubd+qWlspoxEdh9wwKUhab+RLLhZa3gCbtmuWeE2uph5YNt82b
2ljx2MqvWWx0MmuHEHX4ZNRoRokeKvCTwelgA6vakZ6KK2decDleAhWi982c7Giu
jsJ7EdNTVN/vynN115aXMQJCPs3JuOGVxKF0VE9sUMH0YfvayueVf8576QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNIlxG2TrvLC1Vv2xq2ElqoRc1AMB8GA1UdIwQY
MBaAFH3VHcECpJdRjhYJHmXoBcJDjvJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGIt
NzZlNGUxYzkzNjA2LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGItNzZlNGUxYzkzNjA2
LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFFyWnnr
RwiKuQI6TjcY58HWEfUx3j+ZX5aABAKYa0nF8QusbweW/2Sr8KujWysAm6SlOBea
YUcXtDM/7EbjEK7Kv4Ok/bXqqav5WvC70McW14i+4v7Kj6rH1QJff4ghYMIsHLhA
oPlFmCBZzET27rk6RgsvUJZt0AGe3KASDeiXzEKb/Ar82+cLksqIpW0STbgH6eOg
+NVomgXJ5Fu8Ge8GdgcAW6d19s6i0KT2v2gMo1FfOTwkG4yUU3ewkUWuwOtXFzIt
la6jEpYq7TtA6xSdci2xhlKOBP8Goanu01xZ7y/2qs93e9le1yNZCopvyuxTM47L
ox5nmD2Q8II4Rg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:45 2026 by rpki-client