Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier: wDoC5vIKiYrROM0WV014/Up65qx+5cxuSj3NO7IGFdM=
Subject key identifier: CD:1D:DC:CC:92:7D:93:A2:9E:09:51:78:21:19:F1:E7:4B:DB:44:F7
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 019D28BBF73A01F8901DCDE074E98B23DED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number: 10E1
Signing time: Thu 26 Mar 2026 06:01:40 +0000
Manifest this update: Thu 26 Mar 2026 06:01:40 +0000
Manifest next update: Fri 27 Mar 2026 06:01:40 +0000
Files and hashes: 1: PC_LI5mzW33r19J5s8xktz3ZfWM.roa (hash: 89d083v0GAT00xfLKNNp4sOIB0VAv7J7O40LuyF21jA=)
2: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: cTpekZS/gYDCKvlaHTooXBwX+qu4dxJ+WxY3guaCNj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:f7:3a:01:f8:90:1d:cd:e0:74:e9:8b:23:de:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: Mar 26 06:01:40 2026 GMT
Not After : Mar 27 06:01:40 2026 GMT
Subject: CN=cd1ddccc927d93a29e0951782119f1e74bdb44f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:53:68:8e:97:71:df:56:80:e5:2b:62:f4:
cc:1e:3c:91:9e:3b:17:d6:c4:84:d9:d0:9a:69:59:
4a:36:b9:c5:2c:f9:85:50:3c:27:93:7a:4d:1d:f2:
13:ff:32:c1:d3:c3:76:86:9f:a8:4b:1e:b0:2b:4c:
eb:9e:6e:33:cb:ff:9d:e8:a5:28:fc:d2:6a:86:42:
c9:cc:53:0e:51:2d:d9:f4:8c:ff:7d:a6:bf:d9:b1:
ab:72:19:e0:1d:56:39:7b:24:fd:8e:f9:f9:d5:bf:
21:ce:74:a4:08:b8:61:53:bb:a6:a6:33:6b:7e:65:
9f:b8:60:6b:d7:11:4c:cf:4d:e9:be:80:fc:c8:23:
14:13:d5:96:85:20:8b:b7:23:0a:f7:5c:a7:df:9a:
69:28:8f:e4:16:29:88:91:7b:b0:9a:7e:b2:b2:22:
c6:5c:f6:ac:75:6f:22:28:46:d1:28:4c:e2:2f:68:
ec:6f:af:d8:6f:5c:cc:ae:83:e1:c8:cb:bd:46:9d:
8b:58:b7:ef:2e:84:21:14:9f:32:39:9c:3a:50:dd:
6d:1d:81:2a:bc:c1:0a:76:aa:0c:33:15:26:de:44:
45:aa:26:80:1b:04:d6:cf:c3:ca:ff:96:e9:c2:71:
fd:4c:c6:be:07:61:ff:c9:a5:b6:49:8f:84:ac:e5:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1D:DC:CC:92:7D:93:A2:9E:09:51:78:21:19:F1:E7:4B:DB:44:F7
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d9:72:3f:f2:64:b7:78:06:1e:d5:71:44:d3:1e:1f:31:71:
6f:a2:ca:ae:02:3d:d5:86:d0:98:53:ed:96:7f:51:83:86:c8:
02:a0:0a:16:57:64:9b:1d:cd:01:01:04:60:6f:f9:98:20:dd:
83:3c:8e:47:05:a6:ca:a2:eb:b4:d6:79:2a:69:c2:61:5f:33:
a8:59:76:57:23:7a:c6:4a:92:d6:0c:94:96:63:09:9b:4d:f3:
fe:e7:7f:d9:d9:f6:72:de:b6:89:94:aa:82:8c:9b:51:09:da:
27:bb:d0:77:4f:04:32:94:23:c4:1a:8f:0c:54:5f:de:27:6d:
ab:1c:4c:9e:fe:67:96:84:bd:e7:c0:37:28:2b:90:c2:6b:26:
37:d3:42:53:56:8a:9a:33:18:89:4e:4c:5f:6b:9d:41:ca:52:
d4:80:39:68:c3:91:13:ed:49:27:b2:ec:28:c2:94:f6:1d:9d:
d2:83:91:fd:fd:f9:73:34:6b:9c:e4:5c:f6:97:90:7d:1d:93:
21:d5:58:c9:7c:c9:71:fa:8b:c0:76:44:7e:f5:8f:c7:dc:90:
6f:dd:ab:21:f0:ed:d3:b7:b6:72:25:91:3f:44:6a:81:24:b7:
1c:9a:d0:83:8a:f7:d0:b8:16:2b:89:cf:6e:dc:e6:da:61:9d:
cf:3b:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:41 2026 by rpki-client