
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File: Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier: 3PP0jOphpnz2AkOSU/e2uS7Aon/rGoP5jlE6cYh3YBg=
Subject key identifier: 49:31:4B:8A:EA:D1:E1:7D:A5:77:B6:68:87:CA:76:54:9F:4B:33:0C
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 01A0C3D6C8F37401BD05AF64E02F53983146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number: 1201
Signing time: Mon 21 Sep 2026 12:00:28 +0000
Manifest this update: Mon 21 Sep 2026 12:00:28 +0000
Manifest next update: Tue 22 Sep 2026 12:00:28 +0000
Files and hashes: 1: 3x_eNlfqr-pzS31r85Kyh1RTzhw.roa (hash: ca0B1hA6S7RSMd4p7jDgIrOLafYEE67HR7dN2aYSue0=)
2: AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa (hash: UJ521U9kX8KbpPJ5yoTgLuBYMW8RZw/CsvE9VFkznzw=)
3: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: mWuam94sR+WopLvIj83JuXPPYVYJ2fXk5fnjbrBgUuY=)
4: k3Io6XWMMdN-bVtwln4_8KO-IVA.roa (hash: Aa8iwiJFepHxrsbFSA+APkKdOhzyuMHdrvQewpxY1oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:c8:f3:74:01:bd:05:af:64:e0:2f:53:98:31:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Sep 21 12:00:28 2026 GMT
Not After : Sep 22 12:00:28 2026 GMT
Subject: CN=49314b8aead1e17da577b66887ca76549f4b330c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:e7:74:78:74:d4:02:7a:73:dd:fd:23:6b:
8d:2f:21:a2:71:c5:bb:c3:15:9c:a2:f0:4e:45:df:
c6:c0:6d:cb:a3:81:71:6d:22:2d:d8:05:d9:5c:75:
b5:f0:b6:3b:8a:90:8b:a0:d3:5b:6d:ba:d2:2f:ac:
06:26:fa:15:20:21:fd:fc:85:6d:4d:6b:54:f5:a6:
31:c6:a0:12:9b:7b:f5:b7:2b:a8:32:a7:7a:f3:43:
c5:b8:82:a0:79:21:14:fe:49:30:dd:e5:07:2f:47:
cf:36:3a:e6:2d:3c:7c:6d:57:07:23:5d:29:fb:8c:
ca:64:db:51:f3:94:ca:98:65:7e:16:24:5f:71:ea:
ac:aa:e3:d2:d5:5e:29:6d:06:b1:41:24:e6:30:e2:
4c:db:6c:a5:ba:6c:52:f5:8d:12:5a:c1:90:b4:ae:
4e:c3:88:9a:1d:a7:a0:21:14:8a:dd:ab:08:ee:5c:
de:fa:88:b4:ff:40:af:f2:93:6b:0e:7d:d6:bc:95:
be:b2:56:5e:d8:a7:52:dc:15:97:f7:fa:15:66:76:
c9:9d:6a:cd:8b:92:5c:ed:b1:0a:95:20:68:93:ed:
7a:bd:c4:c4:65:86:8b:00:cf:98:43:bc:f0:cd:95:
99:66:ee:3c:cd:40:f3:7c:e2:c3:ad:6c:53:5d:4b:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:31:4B:8A:EA:D1:E1:7D:A5:77:B6:68:87:CA:76:54:9F:4B:33:0C
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0c:27:23:83:61:6e:9f:6e:8f:87:83:10:dc:a5:cd:8b:72:
33:cf:57:ad:57:a5:28:eb:08:7c:44:dd:29:9d:98:d8:11:cc:
7b:a4:e7:2b:de:af:6c:f3:28:ec:bc:27:16:db:17:a2:25:e2:
3c:fb:14:2d:24:15:2c:1c:e7:68:cb:65:c7:72:99:10:c9:d4:
63:34:d5:f5:5e:c5:56:a4:96:43:77:ed:5c:06:f3:d9:93:55:
d3:aa:12:1f:1b:7c:87:90:b8:d2:ae:1f:b8:bd:a2:ff:2f:cf:
fc:80:67:fd:8e:4c:1c:dc:0c:e3:23:bb:ab:db:bf:62:04:a0:
d6:69:48:01:4b:27:14:c5:c0:b2:9d:da:a0:6d:49:29:cc:99:
94:6b:f8:68:58:d8:3d:79:06:30:de:3b:13:02:99:7d:09:da:
09:a9:73:ff:b2:69:71:d4:2a:48:e9:0f:da:65:2b:78:01:a1:
ff:4c:80:3b:07:97:47:3f:67:7f:7b:45:35:18:ff:07:01:04:
85:ce:5b:dc:5c:2f:60:d6:5f:39:67:46:5e:dc:0d:6f:48:83:
39:1a:03:65:01:d9:2e:f8:dd:e1:d6:61:d1:92:ea:66:29:3c:
78:08:70:2f:b3:17:78:b3:4a:84:19:62:05:20:65:28:26:a7:
69:0e:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:08:21 2026 by rpki-client