Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: l3NC3YSz15xV8HZOuGAy4AZ6xe/je/ru/ZOtBpLFiUs=
Subject key identifier: E8:A3:6A:89:7D:72:1C:7A:C8:55:59:29:21:83:D1:5C:DD:8F:02:58
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 019FAA50FDB360DCE552D6EAF9F551A18232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0C33
Signing time: Tue 28 Jul 2026 20:01:02 +0000
Manifest this update: Tue 28 Jul 2026 20:01:02 +0000
Manifest next update: Wed 29 Jul 2026 20:01:02 +0000
Files and hashes: 1: QxPgQhLZSciZvWPoXaWmbFy5GQE.roa (hash: 2+siJJXulwAfsr5WZH3cVtlll3XHnNe+UHkOgJC93jY=)
2: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: SYDB9LcXpW9W/MPigIXYGBMKLN+pPFKW9njwuVKqdmA=)
3: oDJd8k7v9hL4ELhX81UKtkrtMzs.roa (hash: ABmbVakjWPfaGm1nLXm6gvNYxUl2NncxIiAinPvtap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:fd:b3:60:dc:e5:52:d6:ea:f9:f5:51:a1:82:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Jul 28 20:01:02 2026 GMT
Not After : Jul 29 20:01:02 2026 GMT
Subject: CN=e8a36a897d721c7ac85559292183d15cdd8f0258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:61:08:1d:90:ec:13:4b:e8:d1:c6:b6:5a:
9e:b0:42:72:87:e1:2b:69:42:7a:ac:da:aa:e1:34:
16:42:03:ec:4b:c1:21:9e:ff:66:0b:91:cc:d6:8f:
c1:23:1b:26:a6:2e:3f:84:5d:7e:95:6b:0e:8d:dc:
dd:c5:c2:ba:d3:c9:00:cd:06:7f:43:c1:10:8b:5a:
b7:47:aa:ae:30:f7:84:3c:41:7f:0e:93:a2:8f:5d:
80:81:83:36:67:5e:44:ca:f3:f6:04:fe:fd:72:ee:
ca:1f:01:c1:86:54:33:85:86:6e:b7:b8:a7:8c:cd:
39:8c:cc:70:63:a0:7c:1f:00:d5:5c:4a:e7:5a:c9:
90:61:18:fd:08:1c:43:4a:63:04:5b:72:30:9c:b5:
4d:3d:81:b5:06:89:b0:1d:71:49:6d:1c:6a:86:c0:
00:39:54:46:b7:2d:0d:63:6a:de:c1:fc:d9:c7:d1:
80:4f:4f:9f:6c:d2:d4:d8:f1:2a:99:80:8a:2e:0a:
6e:2d:6e:37:3e:c2:bc:4f:32:76:3f:cb:d8:c9:10:
0d:ed:f3:16:1c:20:d9:c3:55:a9:f5:68:94:22:88:
b4:2e:61:52:ee:52:db:f2:64:42:e6:4b:d0:d0:b3:
7c:6b:33:94:04:c4:f0:4f:7e:3a:4c:c5:cc:81:3f:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A3:6A:89:7D:72:1C:7A:C8:55:59:29:21:83:D1:5C:DD:8F:02:58
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:60:12:96:79:e4:81:6a:3d:e6:68:a6:67:93:30:2e:7e:1c:
02:9d:51:12:be:c0:bc:94:2a:0b:98:27:1e:f8:eb:e6:3c:ba:
3d:8f:61:4a:d4:29:43:17:90:a4:d9:2a:73:93:58:8f:37:7a:
df:69:51:8e:b5:53:5c:ef:d4:f1:3d:e2:83:b1:71:76:eb:c7:
85:b1:13:9b:4c:0d:d1:a1:f0:09:5e:4a:8c:b0:eb:c7:ea:cf:
22:38:e9:5e:c6:db:79:14:b0:56:33:65:da:7e:3a:80:55:ea:
c4:5e:15:de:41:5f:01:62:07:3e:9a:a7:93:e4:9d:35:a2:fc:
ba:a3:34:47:e9:b7:9c:50:ac:4d:8b:45:7e:f9:db:c7:52:b8:
0f:24:e2:db:f1:70:61:89:20:6f:0f:43:63:e0:7d:58:3b:fd:
2d:78:46:fb:85:23:ae:d4:9f:ae:d4:44:e6:b1:28:cf:80:79:
5d:5a:24:33:df:4c:e9:47:7b:da:e0:b9:76:6f:36:69:2e:e0:
d9:b3:cd:07:a2:c8:d1:06:c5:2c:03:11:4b:4f:88:ef:a6:c1:
f4:0a:f2:58:e9:3c:1d:9f:be:63:35:3a:2b:ca:7c:69:b2:be:
fc:61:ef:fe:01:71:b8:99:a5:c0:e7:ee:b0:ce:1e:5c:8a:bd:
61:bf:b9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:32 2026 by rpki-client