Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
File: fdq9ZIcR0M5WmJiW77c6DmXpczk.mft (raw, json)
Hash identifier: oAGYY5sd6ndqWR7IcLbQkLuGxhmy70/WxhZwqRbKRyY=
Subject key identifier: E7:86:A8:2D:7C:52:8E:EC:46:92:76:05:C4:2F:C2:FE:DD:53:F7:FA
Authority key identifier: 7D:DA:BD:64:87:11:D0:CE:56:98:98:96:EF:B7:3A:0E:65:E9:73:39
Certificate issuer: /CN=7ddabd648711d0ce56989896efb73a0e65e97339
Certificate serial: 01A0ED0AF46A88E793D48717A0A17C33BDC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
Manifest number: EE
Signing time: Tue 29 Sep 2026 12:01:53 +0000
Manifest this update: Tue 29 Sep 2026 12:01:53 +0000
Manifest next update: Wed 30 Sep 2026 12:01:53 +0000
Files and hashes: 1: K60hVPLSPVtUpielhkzPMTSO0aM.roa (hash: G37NAr4nS+/pnxGye8gLOv9acyLCoKW6Bim3ph2z7sw=)
2: fdq9ZIcR0M5WmJiW77c6DmXpczk.crl (hash: 3Z2vj5bJKhdZqeK4ikgzdulwNeKCjerzFhHlegI08R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 12:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:f4:6a:88:e7:93:d4:87:17:a0:a1:7c:33:bd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddabd648711d0ce56989896efb73a0e65e97339
Validity
Not Before: Sep 29 12:01:53 2026 GMT
Not After : Sep 30 12:01:53 2026 GMT
Subject: CN=e786a82d7c528eec46927605c42fc2fedd53f7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:64:de:78:c5:85:2f:c6:8c:c8:7b:d5:73:
30:05:c7:3e:39:cb:d7:64:48:ca:49:f5:f2:f3:b7:
d0:37:1e:8d:2b:66:b0:a5:4b:d3:27:ff:79:16:f2:
dc:78:96:31:09:8c:b0:de:4d:ed:65:d2:f1:fa:d0:
1f:c1:b3:26:54:70:7a:3c:39:2b:65:e4:31:78:b2:
b3:41:6f:42:f0:10:87:c5:ee:d4:28:ff:58:2e:56:
4a:f6:6e:3e:be:74:83:1f:75:9a:73:44:c2:61:0e:
67:8d:76:36:e1:40:a9:04:b8:b2:5e:6a:97:a5:63:
0f:c7:98:9e:c5:49:cd:cc:72:26:26:19:ff:f7:0a:
c3:64:75:96:64:43:8c:0f:3f:ce:19:00:4e:52:dd:
c6:b9:2b:46:e9:9f:f8:df:5b:48:fa:4b:ea:23:94:
4d:ac:bf:0e:a7:04:b1:61:8b:28:e0:42:42:be:77:
85:40:a9:3a:fa:13:9b:57:9c:8e:0a:bc:88:5b:d2:
c5:c8:e5:78:d9:eb:44:bc:e4:02:c0:71:cd:96:78:
57:49:65:73:92:88:62:4b:23:7c:aa:e8:6c:ea:15:
2a:cc:b3:1e:8f:9a:83:bc:b5:33:f1:56:7c:d5:bb:
83:15:1b:02:8a:25:d6:42:30:f5:02:fb:3e:0e:68:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:86:A8:2D:7C:52:8E:EC:46:92:76:05:C4:2F:C2:FE:DD:53:F7:FA
X509v3 Authority Key Identifier:
keyid:7D:DA:BD:64:87:11:D0:CE:56:98:98:96:EF:B7:3A:0E:65:E9:73:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdq9ZIcR0M5WmJiW77c6DmXpczk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1be37-6eb5-4be7-b06a-f958a0ed0a46/1/fdq9ZIcR0M5WmJiW77c6DmXpczk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:12:7e:a0:44:a7:fb:9c:00:72:0a:55:8c:39:8f:55:24:1f:
74:b1:cc:0c:7d:38:e9:70:19:ba:04:36:f5:7f:b3:5f:9e:c2:
a7:3f:49:de:cc:53:fa:23:b4:96:70:93:bc:ef:e1:85:03:bd:
5c:ee:23:08:85:29:b1:4d:4c:c1:36:64:20:ec:e6:68:4b:43:
ac:56:66:eb:91:e0:a6:a8:4b:32:30:b9:a2:94:99:03:4b:02:
52:08:01:f3:05:be:1d:69:cd:c1:24:c3:40:46:28:e5:c0:1e:
d0:c5:6e:9a:f3:19:77:ab:3b:06:ab:4d:d2:f4:bd:2f:d1:b7:
9f:c7:01:d5:a6:b2:04:d3:b8:2d:f3:a0:2d:34:34:0a:64:a6:
77:27:d1:35:08:03:ca:3f:d6:8f:65:ab:3a:c7:50:0a:31:0d:
55:70:63:c1:e4:e7:44:66:2f:26:c6:bb:cf:9c:81:df:57:d9:
a8:44:ab:5e:a7:db:c9:e8:98:23:b4:31:96:05:54:da:80:c6:
b3:29:b1:97:1a:2f:70:90:7e:b2:a3:e6:d1:0e:52:08:99:79:
89:5b:42:42:73:ea:2b:bf:ae:23:61:fc:cf:19:29:d1:7c:00:
5a:61:b5:18:c1:c7:aa:08:85:c2:2f:40:90:ee:d9:98:e0:a1:
53:24:e8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 21:17:13 2026 by rpki-client