Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
File: FdaRyV0UuLzeZpKgMgzA4odWsFk.mft (raw, json)
Hash identifier: B/+KfRwZnFUvWSV4PwQj8UooS6lWxYhmBSIttDQ9lxo=
Subject key identifier: 3F:3A:A7:05:31:44:7C:1B:F9:6E:5E:A6:79:54:FE:3F:83:5E:58:A4
Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
Certificate issuer: /CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Certificate serial: 019D24A79FDD69ECDC1ADC460CDE91FF1F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
Manifest number: 06B5
Signing time: Wed 25 Mar 2026 11:00:58 +0000
Manifest this update: Wed 25 Mar 2026 11:00:58 +0000
Manifest next update: Thu 26 Mar 2026 11:00:58 +0000
Files and hashes: 1: FdaRyV0UuLzeZpKgMgzA4odWsFk.crl (hash: NinYnhPs3ag8YKcoKV/5Nx7CDBWG0UNfVVDmH/MA9tw=)
2: mlDwEPyFKIVAkbAb7NWKRtLzJrA.roa (hash: kAMY1A1Garh3aSqYwq/mDKnuYkTTYygzhIcHylPq2Ik=)
3: vFYSHhL0cypMMBCS2q3wmkLPyPg.asa (hash: yXk9t8cHPwM7IZ6UgJ7PLJ3LoRzcTKQCZlHkkk3ubFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:9f:dd:69:ec:dc:1a:dc:46:0c:de:91:ff:1f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Validity
Not Before: Mar 25 11:00:58 2026 GMT
Not After : Mar 26 11:00:58 2026 GMT
Subject: CN=3f3aa70531447c1bf96e5ea67954fe3f835e58a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:69:f9:f2:e8:0f:52:79:ec:35:c5:26:e4:e5:
d9:57:55:84:8b:e6:cb:3b:db:1c:63:68:28:4b:c7:
91:71:9f:04:d9:f0:92:4c:fc:3f:6e:09:69:48:60:
92:34:24:f7:26:83:33:1b:04:3a:0c:38:4e:4a:7b:
32:31:a4:22:e9:e2:58:1e:a4:36:48:65:09:82:69:
49:4c:7d:e0:15:c6:80:ff:67:b3:bd:1e:46:3a:60:
82:b3:13:0c:69:a5:12:4f:ba:81:e6:66:d5:48:57:
f5:09:4e:61:b0:9d:1b:6e:c1:70:05:03:85:ce:b2:
07:48:20:a2:5b:24:78:98:b8:dc:f7:20:4a:24:1a:
0b:dc:f0:20:f2:46:0c:d3:8c:33:7d:3c:58:5b:60:
74:6b:39:61:8a:75:a8:0a:13:48:2a:e8:42:24:17:
6d:44:4d:2a:c7:8e:97:5e:4d:b7:c1:2e:09:0f:02:
b2:55:5f:54:c3:6e:84:6f:09:4b:04:09:3a:6c:78:
e0:3d:f6:5e:dc:db:7f:a7:a1:6e:bc:54:09:ee:07:
96:02:cb:00:8e:95:91:8e:3a:a7:8f:7d:40:06:3d:
6f:8f:bc:41:3d:05:1b:9e:aa:59:55:72:8e:ba:6b:
63:46:02:64:77:2a:5b:1b:fb:65:10:90:29:f0:3e:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:A7:05:31:44:7C:1B:F9:6E:5E:A6:79:54:FE:3F:83:5E:58:A4
X509v3 Authority Key Identifier:
keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:91:10:5f:50:65:aa:20:26:d8:eb:a2:fb:34:31:2d:76:6c:
ed:5e:d5:69:19:90:19:e3:5c:a9:67:e5:8a:ce:71:e4:cc:69:
de:b7:9b:81:6f:7d:5d:5b:14:50:c5:23:71:cb:e1:e9:29:7a:
d6:08:23:9b:4f:f4:e1:b2:db:93:b9:86:f8:29:63:d5:cc:fd:
14:47:07:68:a5:a2:c2:1a:04:13:65:80:a6:97:ad:ab:26:4b:
a0:eb:70:e1:b9:cf:e5:bd:96:d5:f0:b8:ab:2e:28:8e:97:4f:
73:32:bf:83:62:74:07:4a:c2:77:f0:06:b7:68:0f:0b:a3:03:
36:77:f5:79:fa:4a:e1:3c:da:6f:b5:86:1d:60:89:bf:19:32:
18:4f:39:3e:8a:8d:de:36:c5:25:80:bb:f2:0d:1e:3d:d2:0a:
79:74:50:dd:6c:d2:3c:67:5b:49:65:c8:9d:84:2f:e2:25:5c:
5e:a2:68:2b:70:49:66:88:90:32:33:e2:3f:75:ea:93:e0:99:
24:34:20:20:fa:80:dd:1e:5c:72:48:05:45:9a:25:20:c7:9c:
9c:0e:56:e9:96:70:6c:23:f1:77:d8:ef:6b:df:03:2f:ce:58:
01:08:d5:1c:ba:1a:88:de:a3:d1:87:22:c6:39:9e:55:54:cd:
4d:44:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:59 2026 by rpki-client