
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
File: fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft (raw, json)
Hash identifier: mDw86qEdnmWPcn8Q7SuH/qlsEVc1oMsep74RbfPS/A8=
Subject key identifier: EE:9B:45:89:84:BB:A3:A9:19:C1:37:96:FC:FC:77:2B:17:C6:C8:6B
Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
Certificate issuer: /CN=7ddf809131ee56531939d05f607271bdf01d19b5
Certificate serial: 019FA7F4AE65DFF03ABC94D2598B07FA5B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 09:00:58 +0000
Manifest this update: Tue 28 Jul 2026 09:00:58 +0000
Manifest next update: Wed 29 Jul 2026 09:00:58 +0000
Files and hashes: 1: _Y3F_vMopcXa3E02cfDEZMCP0Dk.roa (hash: igREdiG7Xu7S8r8bPH/7sOXp/7jJ8oNkSJSuSFIVgwc=)
2: fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl (hash: /7Cn7oIi55jxkmvOvVayy61mNFW6PykVaH+oXoEHpWo=)
3: rNoyEhNVvFDMhHnHdUEEHnR6hFg.asa (hash: sjciyK9wd3L99HAH1ZxxAgQrRsrGw4fb3B7PMnrpyIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:ae:65:df:f0:3a:bc:94:d2:59:8b:07:fa:5b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5
Validity
Not Before: Jul 28 09:00:58 2026 GMT
Not After : Jul 29 09:00:58 2026 GMT
Subject: CN=ee9b458984bba3a919c13796fcfc772b17c6c86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:10:4e:4d:12:c2:6a:bf:ee:1a:17:65:a7:
f9:c7:10:5c:8f:e8:de:c7:77:e5:b4:bc:aa:7a:ae:
17:5a:0c:a9:bf:13:fb:14:f8:8f:17:87:ca:f5:3a:
62:24:74:f0:70:52:da:d5:61:db:ab:09:0a:32:e6:
89:ec:f1:5b:51:de:a9:36:0b:59:48:f7:a6:2d:87:
87:29:af:dd:39:ec:3d:f0:d0:e0:90:61:81:f1:d6:
0e:7f:21:22:e8:88:e4:5f:0d:27:44:a4:a9:cc:e7:
b9:03:b8:71:de:0e:77:04:86:e8:dd:6a:dd:6c:b3:
7e:af:8f:c4:d6:0c:88:6a:c2:30:dc:ba:69:eb:aa:
af:88:b4:ba:20:74:38:68:8d:c4:78:63:1e:fb:77:
27:b6:60:1f:96:65:f0:8a:86:ba:8d:1b:94:6c:c7:
20:e0:17:eb:7b:db:67:c0:0b:f2:9c:3a:9c:c1:77:
eb:24:4c:cb:50:40:80:e6:e9:1d:49:5f:f9:9c:bf:
f0:41:66:59:ec:23:9e:f2:f6:21:80:ed:93:92:dc:
b1:09:a5:d1:3f:64:90:57:5e:da:8f:b7:50:1b:27:
8f:0c:3a:34:8c:7d:3b:ea:78:2b:ef:e8:86:e1:5c:
08:6e:3c:31:2b:d0:8a:54:0e:2f:4d:cc:11:92:72:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9B:45:89:84:BB:A3:A9:19:C1:37:96:FC:FC:77:2B:17:C6:C8:6B
X509v3 Authority Key Identifier:
keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f4:3a:f1:99:11:bb:2b:88:28:7a:b8:ec:0b:c5:27:c1:60:
35:60:70:c0:09:4b:38:57:b7:68:13:43:9f:b4:d7:84:d2:08:
29:da:c3:ba:08:fc:cb:4a:db:be:19:76:93:86:9f:47:a3:82:
23:f9:1f:a3:65:43:25:ff:9e:29:34:4a:2c:5e:4d:a8:6d:20:
a8:0e:f5:72:89:84:c4:ef:df:e8:c9:38:7c:9b:b3:b0:aa:e8:
1c:17:10:1a:4b:57:ed:dd:8f:cb:ec:da:48:01:c7:1b:22:4c:
c1:12:86:64:e3:15:31:7a:ba:ab:f1:1f:b7:5c:32:3f:c5:36:
ed:67:cb:b8:3b:54:67:c4:23:2e:6a:5b:06:71:3f:63:5b:26:
51:5b:07:a0:3e:69:e9:a5:e2:07:60:75:f2:c2:c0:af:76:71:
27:07:c0:12:8e:21:38:89:55:a9:6c:4a:a0:44:5d:77:82:d5:
50:2f:b1:f7:14:b0:1d:0b:83:4e:ba:2b:63:75:51:fb:cc:b2:
8d:7e:d3:35:bb:11:ea:23:39:80:0c:2a:0b:55:66:c4:c0:d9:
60:1d:90:87:9e:56:8e:b1:65:43:82:05:58:68:35:f0:88:7a:
82:bf:0f:5f:b8:00:ca:7c:ec:98:6f:7a:28:c4:93:6e:e7:a7:
fc:0b:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:13 2026 by rpki-client