Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier: uXIN316mfBR/TvrYjkTBN0Lvovu+eDrZX9d8pDABS6w=
Subject key identifier: 22:7E:9A:E3:BF:93:28:2B:88:8E:2A:D2:EF:14:6F:C5:A7:73:CA:1E
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 019D9AAC4592948CE718C352AE79ABBDB10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number: 111C
Signing time: Fri 17 Apr 2026 09:01:14 +0000
Manifest this update: Fri 17 Apr 2026 09:01:14 +0000
Manifest next update: Sat 18 Apr 2026 09:01:14 +0000
Files and hashes: 1: PC_LI5mzW33r19J5s8xktz3ZfWM.roa (hash: 89d083v0GAT00xfLKNNp4sOIB0VAv7J7O40LuyF21jA=)
2: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: GWIkLTEudmnZl3kZZrkEFw8N/+rU3YqSgpyT+ibmFbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:45:92:94:8c:e7:18:c3:52:ae:79:ab:bd:b1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: Apr 17 09:01:14 2026 GMT
Not After : Apr 18 09:01:14 2026 GMT
Subject: CN=227e9ae3bf93282b888e2ad2ef146fc5a773ca1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:76:18:3f:12:4d:14:24:8e:bd:53:57:b9:
bf:ba:65:8d:fd:a0:7e:b6:04:46:23:f4:6a:c1:88:
30:05:a8:40:4c:6a:42:28:d5:21:72:69:a8:61:a0:
fb:9e:02:12:ec:37:f4:22:92:95:96:8f:16:63:5a:
d6:8d:c3:f8:50:31:e8:7f:94:f2:03:d5:2e:e0:70:
f6:70:4a:8a:1d:38:49:ab:ed:c4:3d:2c:6a:e6:05:
db:ff:a7:e8:1f:e0:f2:af:eb:b9:40:57:01:02:d4:
4b:05:f2:ad:fa:bc:0f:58:46:66:df:9c:93:74:ff:
51:dd:a1:95:bc:e9:d0:6f:69:6d:47:a1:d9:e9:3a:
cb:dd:a1:00:e8:27:70:59:42:0a:46:75:65:31:e7:
70:01:c4:bb:04:e8:cb:bd:77:64:a0:88:30:36:33:
d6:78:c3:37:f3:df:ca:16:97:ba:39:f2:f3:2b:57:
8b:84:27:92:86:97:92:39:62:0e:49:52:d4:56:c9:
c0:fd:85:fd:0f:d7:58:38:ae:9e:69:1a:0a:f6:30:
6f:42:0d:f3:8a:66:f0:4f:96:7b:96:54:33:3e:06:
51:44:e7:ea:df:19:70:86:97:8c:26:e3:b1:8b:78:
e9:f3:31:a0:c3:10:f1:09:b5:78:83:6c:45:b8:d2:
27:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7E:9A:E3:BF:93:28:2B:88:8E:2A:D2:EF:14:6F:C5:A7:73:CA:1E
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:65:33:d0:08:4d:ef:55:f5:cf:88:e6:94:8b:18:0e:c0:5b:
b4:c3:7d:38:cd:05:d1:00:a5:75:7e:96:04:8b:50:bb:0a:a4:
b8:3b:bb:ae:e6:3e:07:6f:07:20:b2:3f:25:8f:96:1c:b2:58:
61:75:23:20:a4:ae:b6:97:62:c8:72:1e:61:e0:f2:35:20:c7:
e8:98:d6:c2:9e:b6:99:c3:d1:ca:17:88:4c:ed:bf:c7:80:32:
7e:2e:42:bc:34:a1:e5:21:32:b1:2d:ae:cb:34:2f:59:c9:8d:
a2:ad:7f:59:9e:d2:1d:4c:a2:b9:02:fc:da:47:5f:32:a0:0b:
67:d3:9f:7a:e9:81:78:89:9c:2e:f3:b2:76:66:bd:a0:14:31:
bd:b5:18:ea:51:3c:70:14:71:37:f5:fe:8f:ad:87:7f:01:94:
d4:3f:22:6c:a1:8e:17:69:65:fe:11:61:5b:4b:30:07:57:64:
13:27:da:f5:a8:92:c9:73:1f:2f:d4:e9:cc:40:88:b3:06:1e:
e2:1c:2f:66:72:87:86:7c:f9:b1:58:3c:26:a9:8d:54:46:36:
50:dc:fb:ef:a2:38:99:c1:b7:b5:6f:ad:3a:8f:bb:be:a9:82:
b5:99:71:ae:4f:fb:cd:63:39:6e:47:b1:58:4a:18:0a:f1:49:
dd:8e:b3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:57 2026 by rpki-client