Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json)
Hash identifier: KTeagfNgk7GeTuYEn6rajkBfHraGbHG0tP35s8pGM+M=
Subject key identifier: AC:1F:F5:D0:C7:9E:5F:99:E4:00:7E:67:57:EC:50:84:96:F3:7F:18
Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Certificate serial: 019CAB347DF682A6A0E98D00884E1EA9FAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
Manifest number: 10A0
Signing time: Sun 01 Mar 2026 21:01:09 +0000
Manifest this update: Sun 01 Mar 2026 21:01:09 +0000
Manifest next update: Mon 02 Mar 2026 21:01:09 +0000
Files and hashes: 1: PC_LI5mzW33r19J5s8xktz3ZfWM.roa (hash: 89d083v0GAT00xfLKNNp4sOIB0VAv7J7O40LuyF21jA=)
2: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: 4vfkvHAsTlxgkG2vjqBnQn1PMi6+rCFFU2v+g7DQpeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:7d:f6:82:a6:a0:e9:8d:00:88:4e:1e:a9:fa:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df
Validity
Not Before: Mar 1 21:01:09 2026 GMT
Not After : Mar 2 21:01:09 2026 GMT
Subject: CN=ac1ff5d0c79e5f99e4007e6757ec508496f37f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3d:a8:11:7d:30:17:8b:cd:dc:47:6e:91:aa:
a9:ab:55:ec:90:a3:50:4a:5a:a7:0d:f0:87:a4:47:
1a:05:54:e5:ea:53:c8:8b:03:15:38:4b:60:bd:7f:
f6:ff:6b:67:fe:ef:75:45:a1:3b:4c:0b:24:02:41:
60:85:41:ea:69:f3:8e:54:f6:04:9f:20:a7:e0:d1:
4e:3e:23:f3:86:a0:7d:37:33:0b:c0:1b:fb:57:b2:
94:51:6c:55:ee:ab:db:31:a5:6d:be:db:f1:d6:f7:
99:d0:c4:cb:06:f2:d4:95:5e:a0:1c:cd:48:e0:94:
7d:2c:fe:05:da:82:bb:36:03:ed:7e:b1:2d:76:a3:
01:45:2c:9e:4a:d9:30:76:ce:02:cd:29:36:cc:80:
4b:af:49:d4:eb:29:69:c8:ec:0e:ff:6d:84:69:3b:
85:e6:43:aa:0f:ee:f5:df:f9:73:d5:30:80:66:5a:
f8:72:68:1a:1c:a3:e9:00:ec:83:d8:a0:0b:99:20:
25:54:d7:9c:ec:52:92:c9:b5:46:6b:3a:4a:01:fb:
f3:14:e8:d7:b2:0f:df:ba:f1:71:21:01:4f:35:0f:
06:be:e2:9d:65:ff:eb:d5:43:79:65:d6:57:b0:9d:
72:9f:46:50:65:20:e9:97:2e:ef:16:cf:22:04:b3:
c6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:F5:D0:C7:9E:5F:99:E4:00:7E:67:57:EC:50:84:96:F3:7F:18
X509v3 Authority Key Identifier:
keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b5:a8:66:f7:b9:3b:98:a1:38:81:5a:d1:f4:c7:98:50:c7:
f0:74:0f:c3:29:7b:30:3a:c6:a3:48:2a:27:06:fc:02:cf:62:
6c:20:fd:76:31:50:3d:3d:91:c7:69:ce:99:21:ce:f3:9f:e9:
b0:5d:1b:7f:d5:78:02:29:dc:40:2b:bf:df:0f:27:29:79:12:
35:dc:fb:79:9f:cb:a2:ff:08:5f:14:fe:ba:be:e8:9a:9a:b8:
1e:98:76:f9:4c:c5:14:ad:86:b5:64:9a:27:7c:b1:1d:56:1c:
94:82:93:fa:cd:07:8f:54:01:e8:15:74:71:cf:c8:93:d8:03:
e0:97:ab:38:36:f8:6d:9b:b5:06:d0:12:c6:63:9c:24:48:34:
4e:87:88:86:b4:17:71:81:f4:9d:6e:e5:70:3f:81:d9:f4:fc:
67:73:20:f0:94:a8:39:85:16:f0:6d:2b:06:30:b0:63:46:40:
58:a5:52:66:81:58:28:39:ee:ab:1b:d0:ba:c3:d2:2f:a8:70:
4f:7e:d4:52:84:ff:03:90:5e:46:88:62:7a:47:e8:d6:9a:10:
69:87:c5:35:f2:25:d7:87:a4:40:fa:c2:b0:69:b1:86:0c:44:
43:a3:01:e1:3a:23:72:22:ea:ec:fc:83:66:65:87:81:4e:9b:
1d:10:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:39 2026 by rpki-client