Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json)
Hash identifier: oXga7goL3MmcQSfHJ9H0k4FrJ4DbwD1Vd0aG0Fb7Qrw=
Subject key identifier: 34:E9:5F:94:15:55:0C:82:A1:FA:8E:9D:39:A2:F2:AA:E5:4C:3F:E4
Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Certificate serial: 01A0CFDB41F7149505031FF99EF900A29C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
Manifest number: 0CCB
Signing time: Wed 23 Sep 2026 20:00:47 +0000
Manifest this update: Wed 23 Sep 2026 20:00:47 +0000
Manifest next update: Thu 24 Sep 2026 20:00:47 +0000
Files and hashes: 1: QxPgQhLZSciZvWPoXaWmbFy5GQE.roa (hash: 2+siJJXulwAfsr5WZH3cVtlll3XHnNe+UHkOgJC93jY=)
2: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: W0btCUNqKbXvdtnC2hHpFvnZBTGQkrvyGx+yXh+MSBI=)
3: oDJd8k7v9hL4ELhX81UKtkrtMzs.roa (hash: ABmbVakjWPfaGm1nLXm6gvNYxUl2NncxIiAinPvtap4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:41:f7:14:95:05:03:1f:f9:9e:f9:00:a2:9c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183
Validity
Not Before: Sep 23 20:00:47 2026 GMT
Not After : Sep 24 20:00:47 2026 GMT
Subject: CN=34e95f9415550c82a1fa8e9d39a2f2aae54c3fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:24:b0:af:bd:ed:1f:9e:59:01:1a:94:73:
a1:d2:a9:a3:04:bf:31:33:2e:7d:05:37:02:22:91:
54:a0:ec:28:cf:c7:5a:4e:f0:24:23:4b:45:bf:08:
82:f8:b8:c6:c9:86:4b:51:3e:cf:fe:7a:38:e5:06:
2f:60:c3:2f:7e:65:99:28:c6:82:a6:10:53:43:da:
b3:0a:ee:c9:f9:9d:76:63:17:f9:b4:a3:6e:aa:b6:
9f:4e:f7:b7:59:c2:d4:19:42:71:26:93:53:d9:8f:
b2:e4:e6:86:a5:b3:5f:7e:b4:5c:84:56:84:75:3a:
9e:f2:bd:d9:4b:1e:94:07:03:59:5a:4f:73:ff:99:
81:f6:34:0b:8b:e5:61:2e:20:1d:5a:10:3d:5e:f8:
b4:4b:15:11:35:41:2e:51:39:da:4a:ca:e0:13:4c:
f0:83:90:48:98:ca:3f:5c:99:6b:b4:ce:fe:83:77:
e8:ba:5a:d5:eb:94:19:ff:16:0d:ce:84:2b:60:ae:
9a:dc:9c:81:a2:e7:6f:8f:b4:95:65:44:c8:65:d2:
9f:18:f7:e7:93:df:3f:07:15:ba:b0:b3:54:b5:ac:
68:76:44:78:14:2a:45:e2:00:9b:aa:82:b6:e5:8b:
96:3c:61:d6:e1:26:bd:f1:c7:d3:06:fc:a8:20:8a:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E9:5F:94:15:55:0C:82:A1:FA:8E:9D:39:A2:F2:AA:E5:4C:3F:E4
X509v3 Authority Key Identifier:
keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:27:f4:d8:a9:f7:fb:ba:3f:b7:49:1c:5e:81:c7:64:4d:84:
8d:d7:17:dc:c2:be:c1:fa:18:c1:e0:67:86:a0:3c:58:13:c2:
54:28:db:79:fd:2a:ed:fe:db:c0:48:2c:59:18:fc:a7:c5:68:
ab:18:ae:b9:36:9e:68:40:21:87:c7:2f:80:eb:36:51:f3:69:
aa:d0:b6:e7:d9:ce:1a:05:27:bf:72:12:86:84:fc:d9:dd:4a:
df:40:95:ab:f0:54:da:d9:af:cd:ad:32:ee:4b:de:13:36:e5:
31:9b:fa:ab:31:69:41:47:2f:a6:d1:7c:95:af:4f:2b:14:11:
18:26:3b:bf:d9:db:8d:1e:64:55:25:65:4c:88:5a:a6:90:2d:
31:5f:91:a8:86:e4:71:c2:10:1e:9d:2f:95:2e:fe:7a:1e:98:
e0:ea:e9:d5:a0:0c:a5:93:3c:18:b5:c7:1c:ef:12:e0:c3:c9:
62:a9:cd:69:d5:be:f7:75:6f:27:3a:ff:e0:20:0a:46:3a:9e:
61:c4:ea:e2:13:5b:8e:2d:fc:48:24:0c:16:98:a4:b6:cc:b7:
ed:2f:1e:27:2d:0e:17:df:6f:ae:67:ad:24:e0:8f:da:d8:22:
d2:e5:8b:b6:23:e8:5f:e7:8e:c1:3f:bf:7b:0e:70:3b:eb:4a:
f0:ed:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:16:34 2026 by rpki-client