Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier: lfBGwoZ2Z4qZpfr17qq8jBdK8dg3Znl1dq+qSBh5r6k=
Subject key identifier: 8C:0B:7F:D6:58:D6:FD:A2:B2:CF:4B:D8:6F:B3:8E:AE:39:0E:88:EB
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 019D27DF62A0224AAE4749C6249E13934D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:00:44 +0000
Manifest this update: Thu 26 Mar 2026 02:00:44 +0000
Manifest next update: Fri 27 Mar 2026 02:00:44 +0000
Files and hashes: 1: c7Yx8OXgZDt8m0xgBRRRBHak7tc.roa (hash: t4bLovDufBExbhkrhfSHs58+VNj/VxtITodpGthPLYM=)
2: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: PIcf6Qi8SpomJZ4Z0RsmQhhP7tgGHZ0Dm3DQKMbSTOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:62:a0:22:4a:ae:47:49:c6:24:9e:13:93:4d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Mar 26 02:00:44 2026 GMT
Not After : Mar 27 02:00:44 2026 GMT
Subject: CN=8c0b7fd658d6fda2b2cf4bd86fb38eae390e88eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:f3:05:a5:1e:e7:8b:f0:43:56:11:27:2f:
8d:6a:ae:23:3c:c9:76:d7:ea:00:9d:b7:a1:16:a0:
bd:92:cd:42:41:b3:73:b9:22:da:6a:4c:0d:8d:67:
04:0f:a6:7b:45:fc:a9:e2:8f:ee:fd:92:c0:65:04:
11:11:ee:13:39:0a:0a:94:ef:56:3c:d7:65:5e:90:
09:f3:54:9d:5e:4e:9e:5f:07:87:a3:61:03:e2:f9:
dc:65:ef:98:4f:4c:83:4b:97:8b:37:6d:9a:e1:b9:
08:e5:1a:a7:e8:ba:41:28:ab:e2:a2:02:87:d3:03:
41:b7:81:06:8c:20:6b:1b:8f:28:1f:6c:9f:dc:1d:
48:0c:1a:f8:fa:66:fe:eb:59:96:76:2f:75:e7:76:
c1:e9:d2:74:ef:32:3a:a8:74:12:24:c7:b4:74:0e:
3b:2e:16:f4:bc:98:0a:c0:44:68:f2:c3:c9:a2:be:
ce:78:2e:75:bf:a5:63:ee:7f:c4:58:b6:cb:73:39:
db:d8:7c:92:f6:00:8e:f4:cd:9b:73:3e:7a:64:6c:
27:2d:57:89:ac:be:d7:72:01:80:28:2f:41:bd:46:
17:f8:3d:45:f1:1b:98:39:c8:97:a5:e7:37:f8:03:
5b:3d:b4:60:e0:0b:ea:a2:94:78:79:60:4d:58:62:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0B:7F:D6:58:D6:FD:A2:B2:CF:4B:D8:6F:B3:8E:AE:39:0E:88:EB
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:80:6d:a8:d5:b1:31:fd:2f:4a:14:61:d7:b3:fa:53:09:1b:
a4:a8:86:4b:2b:94:af:b3:f2:7c:0a:5b:64:de:bc:60:30:bb:
cf:7a:10:40:c9:97:50:26:ce:09:c0:dc:9c:a4:18:f7:dc:5c:
51:58:d0:ea:c7:bc:7c:1b:a8:cd:43:ea:af:dd:b9:82:fb:1f:
85:9e:91:2a:27:68:78:e7:38:36:d6:b5:1a:1e:cd:ad:d0:2e:
df:df:51:bb:3e:5b:81:aa:61:39:5e:b4:1a:52:38:73:35:ac:
ed:56:39:73:75:e2:0e:69:7e:f8:9f:d3:12:50:28:3c:0a:2a:
fb:96:e6:ef:b2:08:53:44:a4:11:83:32:06:24:1a:f8:f6:c9:
e9:3f:bc:91:04:0b:ae:76:fb:fc:07:be:7d:f5:14:ab:b3:32:
29:9a:85:68:b6:5a:40:7f:44:88:7c:16:5c:d2:4f:0a:96:d6:
48:4a:af:50:08:5b:43:1a:4c:06:eb:3d:b7:c3:43:0f:80:c7:
f8:b3:c1:be:48:58:fe:07:56:43:9c:44:ed:4f:3d:1b:29:d0:
56:8a:77:69:61:5b:c3:55:4a:8d:ab:94:f9:76:fe:bf:ae:4e:
05:8f:9a:30:f0:6c:3b:05:4e:36:91:72:0e:ef:6d:c9:dc:4b:
4e:31:b6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:52:28 2026 by rpki-client