Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File: Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier: Mi9Y/KDqZSmAIqenALPQ9B/S8H9U0X6OwWsDhc4Oosk=
Subject key identifier: 5B:17:C8:ED:EC:DC:A7:6A:B7:94:B4:46:0C:23:20:AE:76:6F:44:B3
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 019D26CCCBB9D829E023DB2936C771F85989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number: 1898
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: C9mSTrCzkvpuCYLR+VMKtqT9N9y+fRxQy9pA/0uJh40=)
2: WDUelmNWtMrCQbOJvUmN2XaStwI.roa (hash: KWgWYImtf/YNaXBplwW65YCHE6E/0lUKm659Dqli3Kc=)
3: Wt_ouvMs8E7XNhDiQlEIBb5_EdQ.roa (hash: XqNX6SSr2Oq+GTNhsHhbudiKIR3OH7BFPiSnD24oL6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:cb:b9:d8:29:e0:23:db:29:36:c7:71:f8:59:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=5b17c8edecdca76ab794b4460c2320ae766f44b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e0:b2:84:28:af:3c:73:db:64:0e:b4:31:5c:
04:a2:17:36:4b:9f:90:bf:8e:ad:09:d4:2a:ee:85:
2d:ba:30:5a:38:28:1e:a0:83:34:48:54:2e:88:7b:
31:9a:fa:8a:69:6e:83:7c:8c:de:56:c5:65:57:ac:
3e:86:4b:d8:07:ad:4c:7f:dc:fa:c6:2a:15:c4:d4:
14:6e:1c:4a:ed:49:7a:7b:d0:f0:63:de:c0:12:11:
60:f2:b1:93:88:35:72:42:33:46:8d:54:3e:a9:b0:
49:07:4b:2e:4f:1d:5e:05:cb:b3:b0:4d:6e:2e:c2:
78:bf:cd:4b:22:f9:78:b9:6a:40:9f:84:2f:1b:84:
ad:78:58:c8:b6:85:09:89:f2:6d:5c:95:89:20:ca:
77:73:03:85:0e:5a:1e:97:65:0e:37:36:b7:e0:96:
b1:0f:14:f4:3e:5d:07:75:63:df:21:61:f4:1b:b1:
02:c8:04:7e:1e:42:b2:f2:81:cb:4a:ef:d4:26:7a:
e1:32:d2:f7:d1:95:d9:dc:b3:c9:b8:b7:57:64:70:
26:a5:29:e9:bd:28:b9:7c:c4:c0:f3:45:77:f5:41:
5b:f8:57:49:bb:21:b5:93:da:4e:02:55:d9:c0:58:
87:21:82:a9:d4:c9:af:01:98:85:33:a8:d4:f4:f0:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:17:C8:ED:EC:DC:A7:6A:B7:94:B4:46:0C:23:20:AE:76:6F:44:B3
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:96:a6:06:d3:1c:2a:79:03:4b:c7:65:92:c4:17:67:73:ac:
2d:58:09:da:0b:21:ee:52:73:66:9e:b4:1a:2d:d0:22:3e:27:
4e:b3:0e:5c:e2:17:b4:29:d4:6d:6e:e2:bb:51:81:6d:58:a2:
40:ca:7d:16:ff:94:32:d3:a5:44:bb:50:4c:50:2b:08:cd:64:
18:3b:80:8a:2c:af:f6:86:65:2f:3d:39:e5:69:c2:37:43:72:
1d:9f:e8:2c:d2:c7:f0:0d:53:fa:9a:6a:49:71:b1:00:6a:80:
0e:5b:43:1c:33:5c:35:49:16:df:7c:53:c6:a0:40:1d:90:02:
b9:32:da:43:db:20:bc:81:f1:13:41:62:03:14:8b:df:00:be:
3c:d5:d9:f1:19:04:9b:42:45:8a:ec:49:52:41:8d:71:7d:55:
48:f5:e0:1d:92:bb:c1:e2:41:c3:07:72:86:84:be:7c:db:6a:
bd:fd:28:8a:86:d7:f0:d4:41:74:29:c3:25:31:15:d2:dc:37:
f0:6e:96:37:00:ef:17:93:84:72:26:0b:2f:2e:d7:99:5f:41:
06:55:1d:c0:c5:16:3d:7b:d3:07:50:f4:87:ba:fe:53:82:1f:
86:c1:28:90:00:db:60:6d:2e:be:e1:a0:7c:44:92:4a:67:c3:
21:52:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:16 2026 by rpki-client