Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: n7XPPZnuuUeBpT3MrKnHRMiDwNtKLFJHHr4w5J0a41A=
Subject key identifier: 24:48:B5:1A:AA:CA:17:0E:B9:41:33:84:AA:3E:92:28:95:41:A0:01
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019D29297D3700670CA7B1A1998AA9AB0175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0AE7
Signing time: Thu 26 Mar 2026 08:01:17 +0000
Manifest this update: Thu 26 Mar 2026 08:01:17 +0000
Manifest next update: Fri 27 Mar 2026 08:01:17 +0000
Files and hashes: 1: QxPgQhLZSciZvWPoXaWmbFy5GQE.roa (hash: 2+siJJXulwAfsr5WZH3cVtlll3XHnNe+UHkOgJC93jY=)
2: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: 3DPd4jy3LeLCo6NzmeRWtDhV4axuIpt0X905UDYcWJ0=)
3: oDJd8k7v9hL4ELhX81UKtkrtMzs.roa (hash: ABmbVakjWPfaGm1nLXm6gvNYxUl2NncxIiAinPvtap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:7d:37:00:67:0c:a7:b1:a1:99:8a:a9:ab:01:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Mar 26 08:01:17 2026 GMT
Not After : Mar 27 08:01:17 2026 GMT
Subject: CN=2448b51aaaca170eb9413384aa3e92289541a001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:af:0e:f7:0e:ff:8a:b0:1c:1a:92:e4:c1:
4d:b4:60:d2:e3:12:d4:46:91:1a:78:4d:c9:c4:60:
f5:8d:96:17:2c:42:29:dd:7b:20:0d:e2:38:42:59:
10:9d:3d:bb:36:64:f7:48:bc:9e:75:4d:25:ed:76:
c0:07:ef:e9:dd:1f:d2:c6:b6:b6:3d:92:94:e0:30:
1e:64:85:dc:c3:57:91:83:ba:1d:fb:8f:98:5a:b9:
a8:17:16:14:2d:3d:85:1f:3b:08:02:09:85:d5:ca:
e5:43:4d:f3:a2:1b:f5:77:7f:9f:1a:04:63:19:3a:
bc:24:ca:86:f9:ff:53:c6:44:b6:f8:75:a8:d7:31:
18:52:38:88:c6:ac:94:5f:e6:c2:94:0f:38:b8:3c:
04:fb:4d:4a:b7:c6:cb:bc:50:64:01:14:9a:41:14:
e1:0b:82:b1:53:69:c4:76:a4:bb:78:a4:3f:1b:fa:
f7:31:8b:1a:9e:b4:77:91:fa:8f:6a:c9:a0:26:a1:
72:b1:02:a4:91:c8:18:b7:e6:85:53:eb:d2:4b:f3:
2f:6d:da:bf:58:05:23:3b:ea:9a:c0:7b:a8:1d:17:
23:c3:97:3a:18:cf:da:8b:08:83:9c:6d:cf:49:55:
85:1b:b7:63:56:25:ff:25:39:c9:62:ce:10:b5:81:
db:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:48:B5:1A:AA:CA:17:0E:B9:41:33:84:AA:3E:92:28:95:41:A0:01
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:96:91:10:9b:d1:78:9e:3f:b1:1f:fd:b0:e5:fc:54:c5:db:
52:69:b6:98:8f:5e:f7:c2:c0:fc:36:40:c8:7d:b7:4c:28:28:
8d:6f:ef:c5:c7:ee:d6:13:60:8b:3a:a0:e3:98:92:9c:0d:89:
c9:41:5e:7f:2d:71:c1:43:93:5b:25:25:76:b1:04:24:72:59:
8e:44:b8:6e:0e:7f:df:55:71:ab:33:0f:66:5a:eb:0a:03:6f:
75:2c:de:00:3e:b9:1e:8d:64:ee:6f:c5:fd:8d:e8:f4:43:13:
98:6d:83:79:b1:96:3a:2c:9d:45:2c:1b:f8:a4:e6:6d:0b:25:
60:ef:b7:d9:11:95:d8:b4:90:af:b1:b8:ce:53:2c:bf:0c:c2:
c2:84:33:9e:91:56:65:f4:1e:bf:1e:53:12:b0:2c:7d:a0:b9:
16:bc:89:12:43:a5:3a:71:68:67:a9:95:13:7b:32:a3:12:69:
86:61:10:a8:16:00:88:fa:d7:e2:d7:a5:7c:8b:5b:5d:5d:6f:
45:ec:a0:a0:df:6c:fc:dd:81:aa:41:5d:e9:95:db:40:6a:ba:
03:d5:83:b8:19:8c:04:6f:bd:da:35:58:01:9a:a6:9e:d1:95:
b4:0e:9d:d9:ae:14:45:cc:12:71:8d:f3:3f:2b:37:38:0d:79:
59:e7:17:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKX03AGcMp7GhmYqpqwF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGQyMzZkODA0ZDVhYTlhMmNhYjM5Y2Y1MTAyMmFjMDVl
MGIxODMwHhcNMjYwMzI2MDgwMTE3WhcNMjYwMzI3MDgwMTE3WjAzMTEwLwYDVQQD
EygyNDQ4YjUxYWFhY2ExNzBlYjk0MTMzODRhYTNlOTIyODk1NDFhMDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohuvDvcO/4qwHBqS5MFNtGDS4xLU
RpEaeE3JxGD1jZYXLEIp3XsgDeI4QlkQnT27NmT3SLyedU0l7XbAB+/p3R/Sxra2
PZKU4DAeZIXcw1eRg7od+4+YWrmoFxYULT2FHzsIAgmF1crlQ03zohv1d3+fGgRj
GTq8JMqG+f9TxkS2+HWo1zEYUjiIxqyUX+bClA84uDwE+01Kt8bLvFBkARSaQRTh
C4KxU2nEdqS7eKQ/G/r3MYsanrR3kfqPasmgJqFysQKkkcgYt+aFU+vSS/Mvbdq/
WAUjO+qawHuoHRcjw5c6GM/aiwiDnG3PSVWFG7djViX/JTnJYs4QtYHbtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRItRqqyhcOuUEzhKo+kiiVQaABMB8GA1UdIwQY
MBaAFH3dI22ATVqposqznPUQIqwF4LGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2Mt
ODU1ZTYwNzJlZjM2LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2MtODU1ZTYwNzJlZjM2
LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJaREJvR
eJ4/sR/9sOX8VMXbUmm2mI9e98LA/DZAyH23TCgojW/vxcfu1hNgizqg45iSnA2J
yUFefy1xwUOTWyUldrEEJHJZjkS4bg5/31VxqzMPZlrrCgNvdSzeAD65Ho1k7m/F
/Y3o9EMTmG2DebGWOiydRSwb+KTmbQslYO+32RGV2LSQr7G4zlMsvwzCwoQznpFW
ZfQevx5TErAsfaC5FryJEkOlOnFoZ6mVE3syoxJphmEQqBYAiPrX4telfItbXV1v
ReygoN9s/N2BqkFd6ZXbQGq6A9WDuBmMBG+92jVYAZqmntGVtA6d2a4URcwScY3z
Pys3OA15WecX9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:31 2026 by rpki-client