Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: JcJ7vP6lB+p4ID1UeJD1kYXxp4L2acy6mWuUzO9zVBA=
Subject key identifier: 2A:9C:7D:6E:84:8C:0D:81:A2:BB:48:27:83:2C:A2:8D:59:E3:AF:06
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019F9135C247F36F3B2B564FB31C19576E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0C26
Signing time: Thu 23 Jul 2026 23:00:47 +0000
Manifest this update: Thu 23 Jul 2026 23:00:47 +0000
Manifest next update: Fri 24 Jul 2026 23:00:47 +0000
Files and hashes: 1: QxPgQhLZSciZvWPoXaWmbFy5GQE.roa (hash: 2+siJJXulwAfsr5WZH3cVtlll3XHnNe+UHkOgJC93jY=)
2: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: 0oYit5QDtk9wMXf54NiEfotisgZiffu3qKklFggIKF4=)
3: oDJd8k7v9hL4ELhX81UKtkrtMzs.roa (hash: ABmbVakjWPfaGm1nLXm6gvNYxUl2NncxIiAinPvtap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:c2:47:f3:6f:3b:2b:56:4f:b3:1c:19:57:6e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Jul 23 23:00:47 2026 GMT
Not After : Jul 24 23:00:47 2026 GMT
Subject: CN=2a9c7d6e848c0d81a2bb4827832ca28d59e3af06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:10:2c:88:e9:3e:a4:a7:cd:56:f5:2f:dd:
86:4c:c5:8e:b1:18:ad:aa:13:fb:83:3d:00:c0:6e:
93:6b:1e:61:5d:bc:df:fc:10:7b:49:9c:14:00:32:
d0:ee:6f:f2:cc:f9:97:01:48:ab:ea:63:56:1d:e4:
82:ce:e1:b8:c3:45:19:39:06:75:1b:e6:00:f4:71:
55:8d:42:27:6f:12:b1:9a:e7:a6:f2:80:1d:47:2f:
42:d3:a6:1b:e2:10:04:55:16:f6:a1:e4:50:12:83:
7d:5d:4a:c0:f7:78:df:91:ab:40:45:61:5e:fd:57:
d8:66:ef:0c:33:5c:f7:ff:a3:4d:14:bc:7f:be:f2:
2d:53:4a:05:fa:30:f2:45:c9:b4:e2:7b:66:14:31:
13:a5:00:16:3c:1a:1d:77:50:76:9f:09:b3:9b:00:
35:8a:cc:83:f0:d8:cf:05:d7:08:b7:7c:98:d7:61:
cb:74:4f:e7:4f:91:f2:e1:e2:f2:dc:9b:84:b9:de:
9f:fe:33:a4:6b:eb:f4:c2:f3:4a:4a:79:ec:12:f6:
c3:f1:bc:46:9e:cd:d7:1b:93:cb:81:6b:f5:fc:15:
b2:61:e7:b4:6f:c7:84:58:74:07:1d:a6:96:f0:16:
95:b0:d3:9b:dd:c1:15:9c:f6:f1:3f:d9:29:a2:54:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9C:7D:6E:84:8C:0D:81:A2:BB:48:27:83:2C:A2:8D:59:E3:AF:06
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ca:b3:fb:c7:df:87:67:a5:37:59:32:bb:29:2c:f0:7a:d6:
ab:9f:0c:a8:03:d3:95:6f:63:5b:32:b2:dd:df:ed:36:cf:c0:
bd:70:f9:23:8d:66:9d:34:29:98:4b:c5:61:41:8f:75:2f:52:
e9:17:de:e6:3c:f0:7a:15:3c:ec:94:40:a4:71:8f:6f:86:4f:
f3:a2:a6:a4:22:de:76:82:bf:c8:a8:c7:0a:f5:27:30:cb:d3:
47:05:af:b7:95:8c:5c:5a:39:6f:52:4d:59:f9:83:5f:b5:2e:
88:92:3c:40:90:ab:eb:4d:17:a2:dd:c5:ea:77:6a:13:97:98:
29:da:5d:d9:a3:72:c3:6a:d9:68:93:52:e1:8c:40:74:c5:81:
35:fc:e6:87:02:ba:b4:ff:96:7d:b2:2d:6e:3a:31:45:36:fb:
49:49:3a:3a:b8:47:39:6c:65:a0:ce:25:cc:c0:a8:43:a6:db:
cf:43:7c:09:99:c2:46:0c:3a:c6:19:fe:a3:ed:e4:8a:80:0a:
e5:0a:02:85:de:c0:7a:17:ee:6f:6c:00:8b:4f:0a:ca:d8:45:
fa:f8:e2:5f:1d:ba:b4:1c:80:19:d7:c3:9d:fb:43:71:29:79:
ef:a7:dc:27:a9:06:16:19:3a:f0:73:53:98:03:3e:0b:87:0f:
f8:59:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:56 2026 by rpki-client