Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
File: fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft (raw, json)
Hash identifier: GCHLLWoyD5y6gp3jADpBF/XfS5Bq+ww3XGylN4Q7kL0=
Subject key identifier: DD:4C:AA:71:A7:4C:EE:5D:0A:7C:F8:EF:51:7B:CA:12:17:2B:25:75
Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Certificate serial: 019DA4540F9D6EDFC028678834D5E7AAD6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
Manifest number: 1650
Signing time: Sun 19 Apr 2026 06:01:05 +0000
Manifest this update: Sun 19 Apr 2026 06:01:05 +0000
Manifest next update: Mon 20 Apr 2026 06:01:05 +0000
Files and hashes: 1: IBfMvbxboT7q07qmRd-Z-auoMxY.roa (hash: M2necPHfBLeWIy1vVtOPQiCkqRUXkFRpCHpeFgAr5p4=)
2: fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl (hash: MwvDqbuwLE/RGtIiQ7qpsRS07xqF+lvkSG67EZhKo+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:0f:9d:6e:df:c0:28:67:88:34:d5:e7:aa:d6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967
Validity
Not Before: Apr 19 06:01:05 2026 GMT
Not After : Apr 20 06:01:05 2026 GMT
Subject: CN=dd4caa71a74cee5d0a7cf8ef517bca12172b2575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:51:7f:e7:48:b2:74:bd:86:cb:c5:dd:50:21:
fb:c2:5b:9e:38:1a:e2:05:8f:9f:7e:40:a5:f0:05:
5b:2f:fe:1a:91:51:26:37:4a:a7:60:75:31:88:d1:
ed:76:f1:c7:ff:ac:bf:4c:43:ff:e0:0c:72:e1:f0:
d7:d4:02:a2:d3:2e:f9:fb:4b:de:db:17:ec:2c:58:
7d:26:34:39:93:0d:8e:f5:bb:c2:4f:30:29:42:12:
89:52:b0:3b:48:41:41:03:58:db:40:20:4e:ab:2b:
af:39:be:f4:e6:0b:60:a2:75:27:45:b2:28:15:57:
ca:f3:42:67:83:1b:17:2c:0d:9f:41:3a:60:1d:aa:
96:b0:29:11:b4:24:6e:3f:f5:e4:73:18:bc:5e:ba:
6b:99:7d:b9:54:05:7d:24:b8:68:97:00:62:d4:77:
84:10:df:a0:c6:65:17:33:fc:ea:26:4f:13:40:f5:
d3:9f:70:6b:7e:6f:95:04:0c:15:4a:42:39:a1:7b:
00:c4:5d:8d:37:d3:14:c4:a9:ba:76:de:3c:ad:8a:
b2:66:2c:d0:58:7c:26:b6:ce:96:50:45:d5:2a:6f:
31:a6:4a:8e:35:77:35:04:eb:ad:b9:1c:60:b7:e4:
12:bf:d7:9a:ba:05:3a:bf:59:50:07:05:0c:03:e3:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4C:AA:71:A7:4C:EE:5D:0A:7C:F8:EF:51:7B:CA:12:17:2B:25:75
X509v3 Authority Key Identifier:
keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a3:60:bc:f7:9d:28:d2:6a:b7:b1:a3:b3:20:7a:3d:53:9b:
3b:e9:f2:c4:ba:00:1d:8f:7c:f6:5f:8f:3b:be:7b:64:07:47:
ef:de:12:36:8c:ca:96:4c:62:12:c5:74:4d:83:fa:12:48:4a:
ef:64:b2:e6:6b:96:87:03:ff:3b:8f:9f:e0:54:03:84:d2:3b:
53:d3:43:5a:d3:96:1f:5f:cf:97:b6:b3:b0:f5:19:13:e0:98:
e4:41:06:31:44:5d:5e:37:3c:38:27:4a:56:69:1b:77:8c:86:
e9:04:1f:87:0f:54:c5:7d:12:00:41:bf:40:bf:1e:75:14:66:
2f:eb:ee:e7:2a:2d:c6:14:1f:61:32:8f:83:8b:13:56:d1:b3:
31:de:33:6b:7c:b7:4f:68:06:97:2f:93:55:99:3a:83:d2:03:
c1:02:a8:d1:c5:dd:9d:a2:31:97:c4:cd:8b:6b:a5:83:10:88:
77:29:c1:f9:99:5d:bf:99:88:7c:bb:af:3e:89:6b:41:74:82:
de:a4:5d:67:c0:7a:76:e5:c0:65:c4:88:bc:ed:1b:af:0a:62:
75:f5:f0:1f:46:a8:2f:57:bd:57:1b:55:f1:9d:4b:36:0e:d5:
c0:9f:42:b3:50:9a:ad:18:07:d5:f8:b3:ff:fb:99:e0:57:ae:
d6:c8:eb:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVA+dbt/AKGeINNXnqtbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMzEzNjBmZmMxYWZkNWYxZGE2NmQ4MTQwNGU0NjYzNTEy
ZDQ5NjcwHhcNMjYwNDE5MDYwMTA1WhcNMjYwNDIwMDYwMTA1WjAzMTEwLwYDVQQD
EyhkZDRjYWE3MWE3NGNlZTVkMGE3Y2Y4ZWY1MTdiY2ExMjE3MmIyNTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFF/50iydL2Gy8XdUCH7wlueOBri
BY+ffkCl8AVbL/4akVEmN0qnYHUxiNHtdvHH/6y/TEP/4Axy4fDX1AKi0y75+0ve
2xfsLFh9JjQ5kw2O9bvCTzApQhKJUrA7SEFBA1jbQCBOqyuvOb705gtgonUnRbIo
FVfK80JngxsXLA2fQTpgHaqWsCkRtCRuP/Xkcxi8XrprmX25VAV9JLholwBi1HeE
EN+gxmUXM/zqJk8TQPXTn3Brfm+VBAwVSkI5oXsAxF2NN9MUxKm6dt48rYqyZizQ
WHwmts6WUEXVKm8xpkqONXc1BOutuRxgt+QSv9eaugU6v1lQBwUMA+NsZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1MqnGnTO5dCnz471F7yhIXKyV1MB8GA1UdIwQY
MBaAFH8xNg/8Gv1fHaZtgUBORmNRLUlnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnpFMkRfd2FfVjhkcG0yQlFFNUdZMUV0U1djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mZWY1ZGQtMzhlZS00YmM1LTgyZmYt
NTg0ZDc4YTI1ZjhjLzEvZnpFMkRfd2FfVjhkcG0yQlFFNUdZMUV0U1djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mZWY1ZGQtMzhlZS00YmM1LTgyZmYtNTg0ZDc4YTI1Zjhj
LzEvZnpFMkRfd2FfVjhkcG0yQlFFNUdZMUV0U1djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6NgvPed
KNJqt7GjsyB6PVObO+nyxLoAHY989l+PO757ZAdH794SNozKlkxiEsV0TYP6EkhK
72Sy5muWhwP/O4+f4FQDhNI7U9NDWtOWH1/Pl7azsPUZE+CY5EEGMURdXjc8OCdK
Vmkbd4yG6QQfhw9UxX0SAEG/QL8edRRmL+vu5yotxhQfYTKPg4sTVtGzMd4za3y3
T2gGly+TVZk6g9IDwQKo0cXdnaIxl8TNi2ulgxCIdynB+Zldv5mIfLuvPolrQXSC
3qRdZ8B6duXAZcSIvO0brwpidfXwH0aoL1e9VxtV8Z1LNg7VwJ9Cs1CarRgH1fiz
//uZ4Feu1sjrKw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:58 2026 by rpki-client