Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
File: FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft (raw, json)
Hash identifier: WCDKLheGMlaprGhEQoiRLL1E3hwXgUDpYwVGURYgLWo=
Subject key identifier: 24:00:1D:C1:28:5B:80:5F:55:40:F3:FD:AB:32:4A:8F:12:6E:E4:6D
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Certificate issuer: /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial: 019CAAC71B340034901DAB8CE34312A7E5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
Manifest number: 0CC3
Signing time: Sun 01 Mar 2026 19:01:41 +0000
Manifest this update: Sun 01 Mar 2026 19:01:41 +0000
Manifest next update: Mon 02 Mar 2026 19:01:41 +0000
Files and hashes: 1: FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl (hash: zYtwn8Egx5EKDON4XaBcwaQZ84yv51+0sRSSlbyG+fA=)
2: mpJtsbgETmC7dBt4ggwDy82h6R0.roa (hash: E+0fFewOuAbiSOJJdk0VjGz9UYn9lB3tMo/+quCRNnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:1b:34:00:34:90:1d:ab:8c:e3:43:12:a7:e5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Validity
Not Before: Mar 1 19:01:41 2026 GMT
Not After : Mar 2 19:01:41 2026 GMT
Subject: CN=24001dc1285b805f5540f3fdab324a8f126ee46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:75:b8:03:1f:dc:bd:a8:5c:2b:da:27:69:
6c:9c:6e:99:8a:26:be:d7:59:60:85:e7:97:0d:d7:
bf:72:99:17:81:96:44:6b:18:0b:09:82:5e:a3:2e:
74:1c:32:ce:c8:b0:b2:0f:f4:54:d7:7e:99:0d:a9:
b0:73:eb:14:33:8b:8a:25:9b:d6:a4:35:82:29:32:
4f:88:68:8b:26:e6:8c:61:27:72:a6:43:ac:df:88:
72:68:9d:a8:55:5c:e4:6a:a8:10:04:6a:41:71:e1:
c5:78:7e:34:dc:4b:e4:5d:97:29:70:bb:37:25:bf:
24:9d:2b:d9:31:44:4d:97:8c:bf:2f:d2:bb:09:8b:
56:0d:d7:2e:7d:0a:34:a7:26:17:25:1d:c2:74:8d:
45:cb:70:87:8b:10:fc:d3:e3:2d:8e:57:78:0a:ce:
c8:7e:10:f0:27:35:5c:a6:2a:d2:95:ff:46:c8:fe:
63:ec:51:ef:d1:b9:47:dd:ed:6e:2e:27:89:cd:f2:
0c:07:46:a8:f8:17:28:4a:28:7e:72:3a:63:cc:31:
92:45:b6:81:02:a5:4a:cc:54:24:71:e1:98:e0:93:
9c:d2:ce:09:d2:e3:b1:d5:c3:20:0f:22:a7:bc:54:
df:d0:76:aa:9a:9e:30:b5:f2:b5:c2:9f:3d:08:bb:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:00:1D:C1:28:5B:80:5F:55:40:F3:FD:AB:32:4A:8F:12:6E:E4:6D
X509v3 Authority Key Identifier:
keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:32:dd:07:27:fc:cf:cd:db:20:c0:4b:20:ff:59:bb:da:16:
8b:59:06:8d:26:85:23:a6:09:49:45:42:71:8d:94:d6:6d:2d:
c5:df:46:9c:85:de:92:c2:91:9c:b7:96:81:df:7c:a4:10:71:
ea:54:03:f7:e6:f5:2b:f3:18:55:ff:77:da:e8:50:49:b3:17:
f7:a5:86:e8:62:ee:0f:2b:3b:57:5f:01:b4:81:7e:54:43:04:
89:0c:c1:eb:9e:66:85:aa:40:c1:ee:61:ba:f7:50:5d:ff:a1:
5d:eb:6a:c1:87:6a:34:3a:c0:6f:45:c6:34:40:0b:93:2d:0b:
5c:63:59:24:d2:e7:ab:9e:f5:57:7d:78:70:5a:31:e3:d9:c9:
92:21:1d:e0:7d:3c:7d:c0:b0:fa:ed:72:70:dd:7d:f8:62:70:
24:06:01:ad:7e:37:de:1d:e9:70:0b:5e:00:d2:70:81:53:62:
cb:dd:a6:d0:56:48:5f:dd:1b:6d:6b:1b:87:23:c1:51:f9:2f:
3e:d1:01:c7:fb:4a:fc:ff:85:84:eb:d4:da:4f:ec:88:9c:12:
d0:fe:73:84:84:b8:d7:a9:4b:40:bb:dd:bf:c8:6a:73:ce:06:
e7:d0:ed:66:cd:e7:96:b2:82:0d:1a:d2:9f:af:55:c0:31:27:
51:fc:05:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxxs0ADSQHauM40MSp+X/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTc2NzU4NWRjZWY3M2UxZmE5ZjY0ZGE2YzdmMjc2ZWQ4
N2E3MWYwHhcNMjYwMzAxMTkwMTQxWhcNMjYwMzAyMTkwMTQxWjAzMTEwLwYDVQQD
EygyNDAwMWRjMTI4NWI4MDVmNTU0MGYzZmRhYjMyNGE4ZjEyNmVlNDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmat1uAMf3L2oXCvaJ2lsnG6Ziia+
11lgheeXDde/cpkXgZZEaxgLCYJeoy50HDLOyLCyD/RU136ZDamwc+sUM4uKJZvW
pDWCKTJPiGiLJuaMYSdypkOs34hyaJ2oVVzkaqgQBGpBceHFeH403EvkXZcpcLs3
Jb8knSvZMURNl4y/L9K7CYtWDdcufQo0pyYXJR3CdI1Fy3CHixD80+Mtjld4Cs7I
fhDwJzVcpirSlf9GyP5j7FHv0blH3e1uLieJzfIMB0ao+BcoSih+cjpjzDGSRbaB
AqVKzFQkceGY4JOc0s4J0uOx1cMgDyKnvFTf0Haqmp4wtfK1wp89CLveDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQAHcEoW4BfVUDz/asySo8SbuRtMB8GA1UdIwQY
MBaAFBaXZ1hdzvc+H6n2TabH8nbth6cfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBkbldGM085ejRmcWZaTnBzZnlkdTJIcHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lOGRiNmMtODFhZS00Y2UyLWFmMzAt
NDdiNjMwOTUzYzUwLzEvRnBkbldGM085ejRmcWZaTnBzZnlkdTJIcHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lOGRiNmMtODFhZS00Y2UyLWFmMzAtNDdiNjMwOTUzYzUw
LzEvRnBkbldGM085ejRmcWZaTnBzZnlkdTJIcHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjLdByf8
z83bIMBLIP9Zu9oWi1kGjSaFI6YJSUVCcY2U1m0txd9GnIXeksKRnLeWgd98pBBx
6lQD9+b1K/MYVf932uhQSbMX96WG6GLuDys7V18BtIF+VEMEiQzB655mhapAwe5h
uvdQXf+hXetqwYdqNDrAb0XGNEALky0LXGNZJNLnq571V314cFox49nJkiEd4H08
fcCw+u1ycN19+GJwJAYBrX433h3pcAteANJwgVNiy92m0FZIX90bbWsbhyPBUfkv
PtEBx/tK/P+FhOvU2k/siJwS0P5zhIS416lLQLvdv8hqc84G59DtZs3nlrKCDRrS
n69VwDEnUfwFSg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:57 2026 by rpki-client