Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json)
Hash identifier: 4TYbGb8ggq73sdgewJGOYhmZNEO/7CEiir+ztUAMZHY=
Subject key identifier: 7E:66:F5:33:5E:5E:FD:BB:98:4D:43:D4:C1:11:60:4C:1B:A0:77:79
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 019CAA5882F613C36FF022D60097AFEF710E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:00:53 +0000
Manifest this update: Sun 01 Mar 2026 17:00:53 +0000
Manifest next update: Mon 02 Mar 2026 17:00:53 +0000
Files and hashes: 1: c7Yx8OXgZDt8m0xgBRRRBHak7tc.roa (hash: t4bLovDufBExbhkrhfSHs58+VNj/VxtITodpGthPLYM=)
2: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: OKONzFTNcLl5Ldw3LMiKgSgf7I/zkTansOTzN1PPZjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:82:f6:13:c3:6f:f0:22:d6:00:97:af:ef:71:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Mar 1 17:00:53 2026 GMT
Not After : Mar 2 17:00:53 2026 GMT
Subject: CN=7e66f5335e5efdbb984d43d4c111604c1ba07779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:d1:de:30:fc:ed:89:e2:15:ed:57:03:ff:
f5:3e:8d:ea:26:da:87:f9:d2:97:15:bc:01:b4:3b:
2a:8e:7d:29:a6:3c:dd:2a:80:5b:f4:b1:b9:98:58:
71:77:7a:a7:82:de:14:50:bf:01:a6:ed:42:36:53:
fa:a7:a1:37:ac:5b:3f:41:c1:37:bd:c9:46:30:fe:
59:57:f7:38:1a:ee:76:f8:48:90:3a:1f:2f:14:52:
39:fa:f8:d1:b5:2d:a9:97:52:6e:fc:d8:a3:55:44:
32:95:78:76:39:18:00:3e:35:a5:ef:5f:ca:98:fa:
21:ee:07:cb:09:05:d8:c7:5e:6b:54:31:c9:d2:b2:
ae:78:6b:e5:19:2f:6d:eb:dc:87:14:6b:6d:46:4f:
e2:15:7d:89:53:ee:00:85:73:61:99:a3:fe:43:36:
a4:02:b0:e3:f8:23:78:9e:9f:a2:23:b1:6f:a1:17:
f8:ea:a1:fb:ff:3e:4b:6b:d5:69:fc:17:31:1f:22:
89:67:71:c0:41:5b:b3:ed:af:49:09:89:0d:9d:8b:
2b:b2:be:dd:54:87:84:e3:66:fe:24:fb:50:29:2a:
40:b0:12:13:ad:4b:aa:1d:e8:bc:21:de:99:56:24:
23:3d:e9:bc:dd:2e:7c:5e:11:e7:6f:15:69:88:f2:
c4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:66:F5:33:5E:5E:FD:BB:98:4D:43:D4:C1:11:60:4C:1B:A0:77:79
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ec:1e:20:b9:ea:cb:8c:99:51:eb:62:0d:60:16:6f:25:b7:
35:c7:1d:2a:e5:7d:46:f9:2d:97:7a:91:70:bc:4c:e2:cf:e8:
5f:e9:55:f7:7c:3f:45:41:62:4b:16:49:50:60:5e:af:68:06:
d7:28:30:2f:27:6e:dd:71:65:f4:29:8c:45:bc:5c:49:e7:db:
5c:dc:5d:9c:e8:1b:17:30:63:0e:56:ec:eb:4b:85:24:e0:71:
40:20:ad:ab:f3:fb:40:63:b2:4a:aa:20:c7:39:91:0f:a9:9b:
63:d7:44:d4:e3:a8:29:88:bf:d5:a1:e6:16:6f:c3:78:da:13:
e6:1f:06:06:83:55:1a:a6:a5:38:53:b5:5c:eb:a5:fa:fd:c7:
d5:09:0d:d1:50:82:12:ea:57:34:8d:bf:37:e1:b9:37:71:e4:
47:2e:c7:75:74:dc:67:20:ce:ec:dd:61:35:bd:1b:7e:a8:27:
13:7f:81:24:95:f6:87:ce:50:a5:10:d2:aa:dd:23:fc:fc:8f:
c5:68:8f:e9:4c:1e:43:7c:53:35:72:3d:80:98:d8:0a:b3:73:
2b:13:d4:f6:51:8d:f3:04:46:6c:a8:a6:00:70:68:70:a6:3f:
a7:cd:45:8c:46:5e:96:4b:88:9d:60:78:54:7f:11:6e:86:21:
a4:ef:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:33 2026 by rpki-client