Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
File: fQDvTzv2W4fPoC73tKZYm6LeT_c.mft (raw, json)
Hash identifier: kEvZo8bvX3lNVhUWCDJZNvCANP/FfiaPA4BkP1S289w=
Subject key identifier: D2:5B:42:5B:57:80:FD:66:99:F0:3E:D8:8E:8F:B1:A8:BA:F9:E5:91
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Certificate issuer: /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial: 019D9962FABC8C3B438B694DC91E01F088E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
Manifest number: 10C7
Signing time: Fri 17 Apr 2026 03:01:33 +0000
Manifest this update: Fri 17 Apr 2026 03:01:33 +0000
Manifest next update: Sat 18 Apr 2026 03:01:33 +0000
Files and hashes: 1: fQDvTzv2W4fPoC73tKZYm6LeT_c.crl (hash: HF54SRALb8OoWIj4BuKsfEpcRGgxkBzjsCgAM6J7i8U=)
2: hGI3ocS-L58v4Or7ijp-3kbHDDI.roa (hash: KGbTVHSNg2+WZM2vF2JiCGPUm6fdzfEhTo+s9xkWkXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:fa:bc:8c:3b:43:8b:69:4d:c9:1e:01:f0:88:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Validity
Not Before: Apr 17 03:01:33 2026 GMT
Not After : Apr 18 03:01:33 2026 GMT
Subject: CN=d25b425b5780fd6699f03ed88e8fb1a8baf9e591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:6d:80:2d:be:7a:66:e8:98:3f:8c:ff:23:
fd:15:6c:52:e8:0f:5b:22:f0:cb:b1:ed:25:ec:c8:
b1:05:9d:18:cf:52:37:cd:8e:7a:d6:73:7d:93:29:
90:5c:7e:68:05:17:10:2f:3c:e2:a4:45:82:ef:57:
41:78:23:4a:db:c0:18:4b:d4:0c:3c:b0:1f:82:1b:
5e:9e:5a:31:f4:dc:d5:16:1a:f0:e6:02:d9:7b:b7:
d7:19:37:c2:ef:5a:e2:18:55:ce:fd:81:16:27:b2:
9a:43:00:8c:ea:e5:1f:1e:12:c9:e8:57:04:54:31:
6e:78:5c:76:8a:b8:ab:84:a2:0e:10:74:d8:59:de:
a0:27:50:63:c5:35:a5:18:45:f7:42:b5:26:5a:f0:
18:d7:c3:34:29:47:40:6b:b6:6d:27:20:7e:1e:dd:
9c:c1:c6:da:64:a8:39:c8:76:7a:63:74:5e:e1:44:
3d:48:33:03:cd:26:7b:4f:a6:50:80:aa:ac:7b:19:
82:3b:33:a8:60:1d:18:62:2b:ef:cc:79:35:56:ac:
a5:e0:75:78:bd:67:4e:ec:c3:c6:8d:a0:5c:49:d4:
d6:cd:90:02:0d:39:6c:50:60:fc:3c:0d:08:cd:35:
97:80:aa:38:c0:5d:3a:bf:db:9b:c2:e5:9a:5a:9b:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:42:5B:57:80:FD:66:99:F0:3E:D8:8E:8F:B1:A8:BA:F9:E5:91
X509v3 Authority Key Identifier:
keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e0:3d:71:bf:5b:9a:dd:2f:b0:bf:71:98:90:40:c3:8f:7c:
10:fb:a6:e9:5f:86:29:67:56:11:f6:d0:82:4b:cb:c7:f2:40:
1e:fd:b7:ae:fd:7b:54:e5:a1:c0:f9:ad:1c:49:e5:6a:0d:fc:
cd:18:c3:5d:a7:32:87:b0:6b:2a:a0:3f:76:ad:49:40:64:84:
7b:49:e1:f2:c2:48:64:66:31:3f:2d:e7:2e:e7:b1:72:8e:2a:
20:af:d8:d1:b9:1d:71:de:04:7d:f1:1a:67:b0:83:72:82:72:
c3:67:dd:e7:1b:55:51:64:e5:b9:58:34:81:d5:6c:98:8d:ca:
5a:8c:9c:00:8f:14:24:05:ce:e9:2c:03:1f:c2:33:7e:a9:b7:
02:7f:13:af:6b:c5:d1:66:dc:28:2a:31:c6:79:00:3a:37:46:
57:0b:6e:b5:d2:3a:9a:3b:63:dd:6e:28:e6:83:3a:ed:6d:75:
86:3d:ab:f6:e0:47:2a:4c:52:80:62:d2:7f:cf:17:ec:2f:22:
a6:7a:c5:20:3e:2f:e2:a8:58:a0:98:73:05:e0:cd:e9:3e:1c:
f9:ef:9e:65:38:ee:b1:3f:37:93:91:e2:71:82:45:92:fa:b6:
9c:b2:88:f1:a2:7f:88:8c:bf:c9:6b:22:09:dc:70:a5:be:2c:
dd:82:f8:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYvq8jDtDi2lNyR4B8IjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDBlZjRmM2JmNjViODdjZmEwMmVmN2I0YTY1ODliYTJk
ZTRmZjcwHhcNMjYwNDE3MDMwMTMzWhcNMjYwNDE4MDMwMTMzWjAzMTEwLwYDVQQD
EyhkMjViNDI1YjU3ODBmZDY2OTlmMDNlZDg4ZThmYjFhOGJhZjllNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooltgC2+embomD+M/yP9FWxS6A9b
IvDLse0l7MixBZ0Yz1I3zY561nN9kymQXH5oBRcQLzzipEWC71dBeCNK28AYS9QM
PLAfghtenlox9NzVFhrw5gLZe7fXGTfC71riGFXO/YEWJ7KaQwCM6uUfHhLJ6FcE
VDFueFx2irirhKIOEHTYWd6gJ1BjxTWlGEX3QrUmWvAY18M0KUdAa7ZtJyB+Ht2c
wcbaZKg5yHZ6Y3Re4UQ9SDMDzSZ7T6ZQgKqsexmCOzOoYB0YYivvzHk1Vqyl4HV4
vWdO7MPGjaBcSdTWzZACDTlsUGD8PA0IzTWXgKo4wF06v9ubwuWaWpvLGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJbQltXgP1mmfA+2I6Psai6+eWRMB8GA1UdIwQY
MBaAFH0A70879luHz6Au97SmWJui3k/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kZDYxZTMtZjhjYy00ZjgzLWE4YzQt
ZGU5ZDA0MDFhNmY2LzEvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kZDYxZTMtZjhjYy00ZjgzLWE4YzQtZGU5ZDA0MDFhNmY2
LzEvZlFEdlR6djJXNGZQb0M3M3RLWlltNkxlVF9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOA9cb9b
mt0vsL9xmJBAw498EPum6V+GKWdWEfbQgkvLx/JAHv23rv17VOWhwPmtHEnlag38
zRjDXacyh7BrKqA/dq1JQGSEe0nh8sJIZGYxPy3nLuexco4qIK/Y0bkdcd4EffEa
Z7CDcoJyw2fd5xtVUWTluVg0gdVsmI3KWoycAI8UJAXO6SwDH8Izfqm3An8Tr2vF
0WbcKCoxxnkAOjdGVwtutdI6mjtj3W4o5oM67W11hj2r9uBHKkxSgGLSf88X7C8i
pnrFID4v4qhYoJhzBeDN6T4c+e+eZTjusT83k5HicYJFkvq2nLKI8aJ/iIy/yWsi
Cdxwpb4s3YL4mw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:00 2026 by rpki-client