Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: Pk5dAUMiIdZlFZ7pFCZVp2xqLWggejqkEZJZWByL04c=
Subject key identifier: 31:30:C8:19:46:CF:CB:18:F2:87:95:41:C7:35:73:20:CF:28:C7:54
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019D992B4A9EFD1F21D996D6427BB7C8656D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0B21
Signing time: Fri 17 Apr 2026 02:00:44 +0000
Manifest this update: Fri 17 Apr 2026 02:00:44 +0000
Manifest next update: Sat 18 Apr 2026 02:00:44 +0000
Files and hashes: 1: QxPgQhLZSciZvWPoXaWmbFy5GQE.roa (hash: 2+siJJXulwAfsr5WZH3cVtlll3XHnNe+UHkOgJC93jY=)
2: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: 3kNHy0ZbSdYeC0LBLBU/1tAnqoHqO+NqQVvRJS2nzto=)
3: oDJd8k7v9hL4ELhX81UKtkrtMzs.roa (hash: ABmbVakjWPfaGm1nLXm6gvNYxUl2NncxIiAinPvtap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4a:9e:fd:1f:21:d9:96:d6:42:7b:b7:c8:65:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Apr 17 02:00:44 2026 GMT
Not After : Apr 18 02:00:44 2026 GMT
Subject: CN=3130c81946cfcb18f2879541c7357320cf28c754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:c4:25:5b:2b:72:d7:df:8f:98:ab:aa:e1:
5f:29:38:71:d1:3d:ec:5a:ad:8a:2d:19:07:07:a2:
97:dc:20:f2:b0:e1:a3:4a:d8:5f:7a:ba:b4:92:1e:
a7:a9:67:6d:55:bd:59:75:54:da:7c:5d:fe:ac:19:
d0:3c:dc:b3:0c:16:55:62:36:7a:b4:48:78:44:44:
b2:d1:9c:bf:66:db:ec:61:7c:a3:99:2d:85:f7:9e:
e6:19:a1:b8:93:c8:ba:a7:a5:a1:9e:dc:e8:4c:bf:
81:88:c1:57:44:3f:e9:d0:39:36:39:79:ef:95:aa:
a5:42:95:c3:c3:1a:5d:bd:e4:dd:fc:a9:7a:db:2d:
9c:ea:2d:63:08:9f:c7:41:38:07:c2:5e:be:d3:91:
8c:d8:55:27:ac:fa:6b:13:20:ea:53:f5:af:4e:ae:
f4:ad:c3:c9:78:53:74:4d:c4:45:47:61:85:06:08:
77:16:df:03:eb:b0:16:04:e7:9b:d7:3f:bf:56:c5:
aa:5f:30:19:0c:c5:d2:7e:03:33:02:75:89:85:d8:
e1:1d:ac:d1:f5:8f:96:1d:83:17:fd:7f:8f:e3:16:
7b:47:6e:25:6d:0f:e1:b9:20:b3:bd:db:c1:cf:cb:
db:02:d7:7b:2f:fc:1f:e6:97:61:4e:cb:ae:45:7d:
75:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:30:C8:19:46:CF:CB:18:F2:87:95:41:C7:35:73:20:CF:28:C7:54
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:98:79:58:93:60:12:d4:6c:7c:ad:0e:15:db:40:84:db:1e:
f9:e8:85:de:8b:66:0a:5a:be:f3:c2:d7:d0:93:e0:50:cb:17:
a4:ce:7d:af:82:5c:fb:00:92:a7:2a:ad:f5:f4:d6:c2:35:73:
81:88:47:69:cb:66:6c:be:49:b9:a9:99:9e:1e:94:12:91:3e:
91:1e:ac:f8:fc:2b:d6:27:6a:d1:1d:02:47:43:76:23:30:35:
f9:bd:8b:6c:45:99:c2:90:55:bb:b6:be:f0:e5:70:79:c1:07:
aa:0a:e7:5f:08:fb:da:43:62:0f:13:f7:31:87:b6:eb:a1:9c:
8e:71:b7:fe:36:dc:c5:fb:6f:ac:49:9f:82:45:44:54:37:9d:
5a:fa:32:09:a4:02:30:74:85:8d:75:6a:8f:57:99:0f:94:a2:
06:f8:dc:62:64:c2:c0:2c:ed:c7:9d:42:10:54:f3:50:41:ab:
2d:7a:9f:e0:fa:bc:08:6e:51:57:6b:36:dc:94:e1:fe:0b:6d:
f1:c9:29:23:49:72:35:81:d2:1e:8c:c9:97:43:da:bb:87:52:
96:de:78:82:ce:0a:81:69:9f:ea:87:67:10:30:a4:f8:7f:a0:
f9:98:5c:23:86:e0:00:01:95:bf:03:1c:39:16:94:f7:54:3c:
ea:32:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:43 2026 by rpki-client