Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json)
Hash identifier: 6iQbKqNmF/RYU7qeAAC6cLd5iyZrjE9QEZJJBaEs/oQ=
Subject key identifier: 3A:D5:F2:54:BA:B3:0B:D2:F5:33:CC:1E:6A:0B:40:52:7F:C3:08:CE
Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b
Certificate serial: 019EC5CA8F198AAF86EAA7E17578F9D8E35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
Manifest number: 0A6F
Signing time: Sun 14 Jun 2026 11:00:46 +0000
Manifest this update: Sun 14 Jun 2026 11:00:46 +0000
Manifest next update: Mon 15 Jun 2026 11:00:46 +0000
Files and hashes: 1: Wx2W2x44SbNMpet_nxHfcd54RRg.roa (hash: RaqqpE5anacxSOoNS8mABkC5o0iVF+x65+b349Ql+4w=)
2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: I7b8w83JtPlV2xfU7jnHJeOoC+oEX4fSLZG+RJV4d70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 09:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c5:ca:8f:19:8a:af:86:ea:a7:e1:75:78:f9:d8:e3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b
Validity
Not Before: Jun 14 11:00:46 2026 GMT
Not After : Jun 15 11:00:46 2026 GMT
Subject: CN=3ad5f254bab30bd2f533cc1e6a0b40527fc308ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:37:f0:5d:ac:6a:c9:8e:65:2a:00:45:ce:
b0:b1:5e:c6:21:97:77:d9:7d:0d:04:be:c9:03:60:
cc:85:a8:26:bb:31:cf:04:20:83:e0:9f:8f:56:1d:
64:38:c0:87:8f:af:0a:97:56:39:14:87:0b:72:04:
86:0e:b7:da:d3:4b:a0:b3:e9:5a:35:f0:4b:e2:8b:
65:89:7c:04:c4:32:c0:36:84:c9:85:30:f0:40:fd:
07:1b:09:79:92:6e:2f:cb:9f:ab:26:d1:12:0a:78:
9c:27:c7:d2:f1:98:4d:15:72:ae:c7:d4:0d:0d:40:
86:cb:39:60:07:ac:4a:30:22:8d:86:5b:5e:13:7e:
02:58:f6:39:26:b6:48:d1:0d:a3:11:92:36:0e:0a:
15:64:dc:0b:a7:fd:2c:2a:9a:42:13:12:cc:14:c6:
e9:d5:df:82:84:d0:24:91:e7:48:46:b5:37:ac:6d:
d1:b3:ae:47:2c:c4:ff:f3:67:d5:a3:71:c0:0a:e2:
0f:55:de:bf:a2:80:76:b8:27:77:4f:76:9e:3a:b0:
79:3d:65:df:5e:93:29:23:0a:86:f8:39:dc:ae:15:
b4:cb:ce:d5:5a:f4:63:66:f3:36:70:98:70:f5:73:
09:46:eb:db:6d:c3:49:d0:1a:35:4c:d6:13:5f:61:
0a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D5:F2:54:BA:B3:0B:D2:F5:33:CC:1E:6A:0B:40:52:7F:C3:08:CE
X509v3 Authority Key Identifier:
keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9b:c5:96:c8:5d:cf:67:10:c5:c5:f3:a6:47:09:08:f1:f5:
f2:f0:99:86:36:04:28:b8:cb:68:2b:1b:2e:eb:da:2e:9a:b0:
3c:ba:8f:41:ec:dc:f6:b8:fc:69:69:3e:59:8a:26:92:58:64:
ea:36:db:8a:5c:55:0c:f9:3d:ea:6d:61:26:6e:75:95:7b:60:
29:25:9d:00:c3:18:dd:bd:f8:69:26:78:d5:be:c3:4e:d0:91:
a1:5e:bc:fd:95:50:f1:c5:8d:08:52:b3:d9:5d:bf:aa:27:03:
d8:fb:1b:a7:89:35:70:fb:ba:8d:e1:c6:22:89:e6:c4:b7:85:
ef:24:a5:fb:b3:31:c3:8f:db:8d:53:b6:f9:0a:cd:8a:83:61:
fd:6e:dd:04:c1:b0:3a:94:d8:67:23:c0:77:f8:db:75:81:be:
68:c8:a6:e1:63:b9:06:f6:11:be:b7:4a:ae:4c:fc:e4:c5:88:
5e:70:b1:12:73:09:51:c0:3d:72:b3:03:f4:6d:48:2c:d2:1e:
91:5e:62:00:37:10:4d:3f:7d:55:42:95:15:88:39:8e:1d:4e:
51:33:3e:d8:72:81:53:8b:b2:25:fe:8e:59:f5:93:1b:03:ac:
35:4a:d4:91:a2:22:2f:1c:56:0b:76:c3:8a:22:d0:b6:84:e6:
9d:0e:47:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 15:36:15 2026 by rpki-client