Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier: Z7FU5GSb7qX8TPGj3t2EINjXO5Q4PineoLY/ZMtptDc=
Subject key identifier: B4:54:23:E0:95:37:51:8C:47:75:74:AE:D9:A7:63:6E:F0:96:CE:41
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 019D98866C340262B28E26F5FB88E744AB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number: 09D3
Signing time: Thu 16 Apr 2026 23:00:39 +0000
Manifest this update: Thu 16 Apr 2026 23:00:39 +0000
Manifest next update: Fri 17 Apr 2026 23:00:39 +0000
Files and hashes: 1: Wx2W2x44SbNMpet_nxHfcd54RRg.roa (hash: RaqqpE5anacxSOoNS8mABkC5o0iVF+x65+b349Ql+4w=)
2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: +tXRgzlNSoH16feN/550TM8bcrkkum8sZouU/eKVX5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:6c:34:02:62:b2:8e:26:f5:fb:88:e7:44:ab:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: Apr 16 23:00:39 2026 GMT
Not After : Apr 17 23:00:39 2026 GMT
Subject: CN=b45423e09537518c477574aed9a7636ef096ce41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:13:67:b7:f6:2d:18:04:6f:ad:56:7d:90:
d4:ba:32:dd:bf:b2:37:b4:32:46:e8:f9:a7:08:82:
f0:8d:a8:40:8f:90:56:b3:c3:6b:58:01:62:d9:0f:
b8:83:9a:2a:d9:c1:65:8f:f5:37:59:fe:80:85:e1:
6f:5e:1a:db:40:83:6e:b4:ea:f1:a6:bc:2f:5c:b9:
3f:e3:d5:d4:51:aa:b5:52:ff:57:99:5f:9f:aa:a9:
16:73:41:f4:28:0d:96:0d:fb:fe:8d:ec:86:10:1b:
f4:38:3a:b3:7b:52:50:a0:18:af:dd:a3:98:32:b5:
83:95:08:81:37:38:39:8b:df:da:eb:b5:b5:83:11:
c2:2a:36:5d:c6:30:e0:26:6f:e1:2c:0f:7a:47:b6:
b3:cb:5b:b0:d2:65:d2:26:83:ea:c6:3c:a0:7d:d9:
cb:38:fe:ab:6d:10:86:57:7f:b4:74:44:ad:d6:93:
07:c7:dd:a8:38:5c:16:a2:44:ea:53:49:00:09:c4:
ae:b9:24:af:0c:b3:fd:3d:b7:15:8d:b0:f4:69:72:
6f:eb:37:3e:f7:4d:ec:5c:f3:01:2c:fd:dd:e0:13:
e3:3f:0e:28:38:2a:52:b8:90:fd:8a:44:e3:0a:7f:
98:55:d8:ca:79:30:d3:bd:62:a3:1c:a8:55:17:d5:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:54:23:E0:95:37:51:8C:47:75:74:AE:D9:A7:63:6E:F0:96:CE:41
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fb:31:44:31:05:03:9a:2e:08:6b:55:78:3d:e0:42:12:2b:
3b:74:6f:fe:9e:9f:fc:0e:7b:49:26:6b:ef:a7:58:40:13:66:
d7:d6:97:91:82:ba:28:d8:96:cb:5b:57:61:67:2f:39:3c:80:
b3:0e:ed:51:f7:cc:41:08:c4:a5:b2:fe:c4:f9:1f:e0:a3:cb:
98:55:b0:6a:ec:57:ac:40:a1:d8:59:32:e2:33:c8:3b:b8:dc:
45:a2:44:ef:c5:6f:e1:8c:f5:86:58:7c:2d:e0:1e:25:46:87:
c4:e1:a8:6b:fd:00:4c:a8:8b:ba:4d:c4:21:1b:7f:1b:38:d9:
a0:0e:c1:cc:6b:93:c1:b9:fb:b5:a3:f6:6a:e4:8a:ac:1b:84:
ec:08:9b:75:0c:b8:a8:27:99:44:e5:79:a2:53:a5:ec:c2:8c:
4e:c7:c4:24:b3:29:a2:72:77:6a:87:6b:00:c6:b3:66:e9:65:
2a:2b:16:26:51:20:9c:c5:b6:e9:af:4d:a4:c1:b7:6b:8a:6a:
51:66:a4:17:b4:ad:04:e6:3a:fa:32:21:da:1a:05:69:dc:e5:
2d:a8:91:e3:75:7f:22:b4:ba:d8:99:b9:db:55:89:7b:db:89:
cf:eb:98:87:83:7e:1f:15:26:3d:5a:0e:8b:dc:2f:7b:1b:77:
eb:fd:b5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yhmw0AmKyjib1+4jnRKt+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZDUxZGMxMDJhNDk3NTE4ZTE2MDkxZTY1ZTgwNWMyNDM4
ZWYyNWIwHhcNMjYwNDE2MjMwMDM5WhcNMjYwNDE3MjMwMDM5WjAzMTEwLwYDVQQD
EyhiNDU0MjNlMDk1Mzc1MThjNDc3NTc0YWVkOWE3NjM2ZWYwOTZjZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNkTZ7f2LRgEb61WfZDUujLdv7I3
tDJG6PmnCILwjahAj5BWs8NrWAFi2Q+4g5oq2cFlj/U3Wf6AheFvXhrbQINutOrx
prwvXLk/49XUUaq1Uv9XmV+fqqkWc0H0KA2WDfv+jeyGEBv0ODqze1JQoBiv3aOY
MrWDlQiBNzg5i9/a67W1gxHCKjZdxjDgJm/hLA96R7azy1uw0mXSJoPqxjygfdnL
OP6rbRCGV3+0dESt1pMHx92oOFwWokTqU0kACcSuuSSvDLP9PbcVjbD0aXJv6zc+
903sXPMBLP3d4BPjPw4oOCpSuJD9ikTjCn+YVdjKeTDTvWKjHKhVF9W6NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRUI+CVN1GMR3V0rtmnY27wls5BMB8GA1UdIwQY
MBaAFH3VHcECpJdRjhYJHmXoBcJDjvJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGIt
NzZlNGUxYzkzNjA2LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGItNzZlNGUxYzkzNjA2
LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPsxRDEF
A5ouCGtVeD3gQhIrO3Rv/p6f/A57SSZr76dYQBNm19aXkYK6KNiWy1tXYWcvOTyA
sw7tUffMQQjEpbL+xPkf4KPLmFWwauxXrECh2Fky4jPIO7jcRaJE78Vv4Yz1hlh8
LeAeJUaHxOGoa/0ATKiLuk3EIRt/GzjZoA7BzGuTwbn7taP2auSKrBuE7AibdQy4
qCeZROV5olOl7MKMTsfEJLMponJ3aodrAMazZullKisWJlEgnMW26a9NpMG3a4pq
UWakF7StBOY6+jIh2hoFadzlLaiR43V/IrS62Jm521WJe9uJz+uYh4N+HxUmPVoO
i9wvext36/21mg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:01 2026 by rpki-client