Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: VOEnWAr/mHSlofx/znlaXNZTE9YfrXz3jL81dAK6zhE=
Subject key identifier: 29:CE:8C:D1:4E:12:7E:B4:D6:38:09:71:70:20:24:F5:3F:33:93:64
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 01A0CDECC096C06AA2F8029D86C03C9F810A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0CCA
Signing time: Wed 23 Sep 2026 11:00:40 +0000
Manifest this update: Wed 23 Sep 2026 11:00:40 +0000
Manifest next update: Thu 24 Sep 2026 11:00:40 +0000
Files and hashes: 1: QxPgQhLZSciZvWPoXaWmbFy5GQE.roa (hash: 2+siJJXulwAfsr5WZH3cVtlll3XHnNe+UHkOgJC93jY=)
2: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: /dtbAXvvZRgcKw4w+I5kZiuEEe8PCbhCCjp0VGSzpgo=)
3: oDJd8k7v9hL4ELhX81UKtkrtMzs.roa (hash: ABmbVakjWPfaGm1nLXm6gvNYxUl2NncxIiAinPvtap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:c0:96:c0:6a:a2:f8:02:9d:86:c0:3c:9f:81:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Sep 23 11:00:40 2026 GMT
Not After : Sep 24 11:00:40 2026 GMT
Subject: CN=29ce8cd14e127eb4d6380971702024f53f339364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:b9:f4:54:56:8a:7a:bd:27:c3:f4:7f:68:
db:fc:d2:3f:c0:82:df:a3:57:b7:31:82:de:34:28:
e1:04:ed:f7:99:0e:27:1d:3c:85:92:be:18:e1:22:
7f:e1:94:ee:ca:33:13:eb:4b:c1:5f:4f:fc:3b:85:
cf:52:a8:bc:a9:7c:cc:87:d8:df:8d:7b:28:28:34:
15:16:4e:7e:08:bf:92:f2:98:63:cb:55:a3:85:af:
c0:64:12:cc:98:fa:28:3b:2f:ba:94:75:c0:c7:64:
22:41:88:aa:0e:c4:ad:59:ef:5c:17:c7:c9:81:1d:
62:45:35:56:74:ab:e9:aa:0f:74:86:36:c1:24:9e:
03:6a:24:35:97:5b:0b:03:33:9f:5c:3b:5c:de:a7:
07:26:ca:87:db:f5:05:8b:1c:db:14:7f:45:76:5b:
10:6f:ca:ce:4f:7b:98:41:69:05:37:ec:4c:bc:d7:
74:d3:ba:97:28:0c:a2:8e:60:96:b3:ba:bd:11:d0:
cc:14:41:84:11:ce:80:ae:0b:39:43:03:f2:f1:0d:
ed:8c:16:e3:1b:ee:de:48:28:b9:9a:69:43:89:8f:
47:5a:57:fd:5f:88:05:4b:3d:eb:a0:10:57:9f:9c:
54:7b:33:df:a4:a5:82:86:2f:ae:f8:fb:e2:d7:b3:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CE:8C:D1:4E:12:7E:B4:D6:38:09:71:70:20:24:F5:3F:33:93:64
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ab:1d:26:95:1f:b5:83:a8:92:ba:6a:0d:88:3e:ae:17:f4:
fa:f0:8c:1d:c8:ba:21:cf:64:d9:d1:58:cd:b4:49:06:ee:1c:
48:96:b0:b5:10:b2:2e:40:7c:47:55:89:7f:62:1f:e0:1e:d4:
41:15:c8:09:52:52:ad:d9:53:b9:93:68:26:52:87:71:0e:4c:
28:17:e6:a8:8a:27:de:ca:40:5c:76:a4:3d:cf:6e:64:78:b1:
12:23:a4:29:0f:14:a0:27:59:35:78:ff:05:4a:c8:04:e8:f9:
28:08:f5:fa:6e:04:63:1d:f2:88:73:06:b0:b3:61:88:46:96:
6d:b2:37:d8:f8:98:3c:5a:f7:bf:1c:95:62:19:08:4a:1e:20:
fc:67:8a:ff:d8:46:f4:d4:24:c1:20:31:bf:66:d1:db:86:b4:
be:0f:b5:ae:06:d4:c7:58:57:bf:f7:27:f1:f1:09:ac:c6:b6:
6b:ab:ae:f6:22:cf:88:ab:62:74:52:fe:3d:dd:b0:ec:ec:05:
bc:b9:28:b8:7e:b3:d1:eb:26:c8:f0:ca:c2:e0:03:73:15:e6:
43:01:6f:ee:3e:52:93:4d:eb:73:63:6e:30:45:6a:83:8f:4b:
e7:79:a3:08:48:74:94:53:74:a0:71:f6:b6:b7:5f:c6:02:24:
6a:68:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:03:05 2026 by rpki-client