Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File: Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier: mZH3cx4lBjewhNjmMoX/t+t557tFYtPuZ4AlRT6SwHE=
Subject key identifier: 82:D4:40:5F:01:AE:05:97:FB:55:DC:69:86:C2:46:72:4C:93:82:BD
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 019D98BDB4B403CBA1892A07D351789109A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number: 18D3
Signing time: Fri 17 Apr 2026 00:01:02 +0000
Manifest this update: Fri 17 Apr 2026 00:01:02 +0000
Manifest next update: Sat 18 Apr 2026 00:01:02 +0000
Files and hashes: 1: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: GMhZ+Gsj3amZZq2zZZme6yQj8bV8z8yEFahULyHGeFs=)
2: WDUelmNWtMrCQbOJvUmN2XaStwI.roa (hash: KWgWYImtf/YNaXBplwW65YCHE6E/0lUKm659Dqli3Kc=)
3: Wt_ouvMs8E7XNhDiQlEIBb5_EdQ.roa (hash: XqNX6SSr2Oq+GTNhsHhbudiKIR3OH7BFPiSnD24oL6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:b4:b4:03:cb:a1:89:2a:07:d3:51:78:91:09:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Apr 17 00:01:02 2026 GMT
Not After : Apr 18 00:01:02 2026 GMT
Subject: CN=82d4405f01ae0597fb55dc6986c246724c9382bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:28:2b:a7:c6:3d:07:7a:2b:1f:07:04:a5:
eb:74:09:05:f7:bc:48:03:d8:94:0f:30:25:f7:f3:
ba:57:dd:56:8e:a1:86:75:90:72:e2:9a:85:ee:e5:
c0:ff:05:b5:06:52:08:59:c8:0a:46:6d:3e:03:23:
3b:a6:44:91:c2:1b:c8:41:94:30:6f:97:60:40:65:
e2:97:28:7b:c9:3c:a5:38:b1:21:16:11:55:81:46:
b3:5f:48:d7:12:00:b5:3c:ba:df:ae:57:e2:db:29:
f1:04:36:90:ed:cc:2c:8c:63:db:95:bd:5a:07:0d:
fe:3d:ad:29:44:3b:4e:17:3b:bc:5e:31:0b:cb:9b:
b6:fb:69:90:ef:1a:af:fb:75:da:1f:39:4a:35:64:
33:a1:dc:1f:10:d5:4f:99:57:17:59:10:25:c5:86:
3d:fa:89:10:f7:e4:c8:a4:33:39:6e:68:02:e1:ad:
d4:43:f5:44:75:1c:52:26:23:d7:77:ed:56:48:23:
12:68:eb:b6:d3:1d:0b:3f:6a:36:f0:28:3c:f2:34:
2c:61:5a:c5:d5:ac:90:24:ff:06:35:3b:a0:11:b8:
3c:c1:ef:01:ef:0d:f7:16:df:5e:be:48:17:1b:89:
c6:6f:a6:45:0c:87:d0:3e:fa:70:cb:cb:5c:37:ed:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D4:40:5F:01:AE:05:97:FB:55:DC:69:86:C2:46:72:4C:93:82:BD
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f7:85:3b:1e:4d:a2:ca:6b:c5:25:fa:5c:07:e9:55:39:ac:
3b:bd:67:01:da:4a:ca:26:d5:b8:ff:7e:68:f4:e2:30:f5:0b:
b3:7b:06:9e:a8:4d:0c:e5:94:13:cd:b7:eb:1e:d6:e3:da:79:
1e:fc:52:0b:42:cf:43:60:d2:ea:ab:63:20:86:e5:60:ff:f4:
05:60:4e:4c:ab:25:66:1d:ee:60:6c:67:7a:e4:01:13:63:15:
19:bb:96:e4:20:94:ac:d4:08:82:8e:18:3d:03:b0:07:7b:eb:
92:ac:91:11:21:78:0e:45:7f:95:c8:a7:8a:a6:0d:b9:dc:8f:
79:09:1c:24:42:c0:59:dc:c0:03:c5:15:de:77:a2:8d:8a:b2:
36:61:8e:cc:94:a0:86:0b:d4:61:92:3e:ac:c1:07:b4:92:a2:
64:7b:01:c4:be:0f:4d:21:98:83:f1:39:e3:a7:ab:97:fc:0d:
f7:55:58:23:a3:43:95:a4:4c:b6:12:26:95:ee:cd:be:9f:a4:
68:e0:a0:7b:5f:d4:41:ae:d5:ee:2d:35:65:7b:82:de:b6:d2:
4b:2a:8f:62:85:ff:c0:d0:34:a4:b3:07:f1:0c:73:0b:c9:fa:
7a:bf:e0:33:fe:47:a9:39:55:01:a9:3c:58:8a:76:53:75:f3:
d9:16:ef:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:39 2026 by rpki-client