Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: 9RGzNw3XDEM4rXTBlFyCWz1H2vNOzbFZRrxDQi6PRTo=
Subject key identifier: BD:0D:82:00:83:82:3B:A7:EE:0A:CD:F3:37:E7:56:1F:7E:8E:EF:33
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 019CAD599245C471B7AF880F4604C88FFD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 03D8
Signing time: Mon 02 Mar 2026 07:00:54 +0000
Manifest this update: Mon 02 Mar 2026 07:00:54 +0000
Manifest next update: Tue 03 Mar 2026 07:00:54 +0000
Files and hashes: 1: 0hS-dXastI13cpwFNDpfMzpMJMo.roa (hash: /PWpz2GpXrpBSZf2HusroGndm5V0a7tNkaagb+MoyqQ=)
2: T2C7WIfF0wbXIdpisxkUUAqC7Vg.roa (hash: IG8wYbRO9EgR+lhTadWwp9VBM4VCFO/ElkXU+SiTN5o=)
3: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: +mPyB30h9UIRemDftb3UucOfY0hq9Z1AbApVImRzyfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:92:45:c4:71:b7:af:88:0f:46:04:c8:8f:fd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Mar 2 07:00:54 2026 GMT
Not After : Mar 3 07:00:54 2026 GMT
Subject: CN=bd0d820083823ba7ee0acdf337e7561f7e8eef33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:77:08:86:50:a3:1e:2e:34:46:e3:e3:3a:
21:10:b7:2d:97:5c:e1:49:1c:62:ba:32:cc:31:0b:
2a:46:6f:91:2b:77:07:72:b1:f1:a0:e2:30:94:05:
5a:ee:66:71:e9:e7:04:d4:05:2c:31:15:ab:8b:af:
3d:ba:3c:b6:52:40:34:38:fe:76:f3:fc:37:66:fb:
92:35:b5:b2:eb:bc:80:a8:ae:af:37:0c:7e:4f:20:
f4:ea:a1:91:98:5a:96:c9:75:a2:c6:f8:da:5f:c1:
b3:da:80:cc:08:9f:21:3b:09:f3:35:13:c8:7d:11:
36:83:29:37:fe:3b:0f:d1:38:8c:55:67:e1:48:ba:
70:64:df:4c:c5:5f:ff:d4:e0:9f:8b:6d:59:a8:2d:
3d:cb:48:c4:ac:7f:dc:97:3b:81:af:0f:22:04:5d:
81:6d:2f:56:4f:2b:51:ff:66:da:39:7a:e0:6b:32:
e8:5b:12:5e:ff:91:22:40:d5:87:d0:0c:7d:9e:5e:
1a:59:26:76:bd:ea:d5:f5:dd:81:6e:c8:62:01:96:
b8:26:aa:d6:3e:6d:4f:3c:fe:92:3d:d7:52:20:ba:
68:14:ea:c1:c2:3e:6d:2d:00:97:0a:c7:08:65:c4:
9d:84:b3:c7:cd:3c:64:21:12:92:23:82:81:c3:fe:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0D:82:00:83:82:3B:A7:EE:0A:CD:F3:37:E7:56:1F:7E:8E:EF:33
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4b:89:59:61:01:04:20:3b:29:4e:fd:0d:21:ba:f0:f1:cd:
66:89:61:64:77:10:c1:28:98:2e:25:ae:e7:b1:64:d9:26:7c:
c4:ff:c0:12:9d:c9:56:aa:62:32:9f:da:fc:90:ce:52:6f:e9:
5a:2f:7c:93:74:f2:13:56:30:0c:66:1a:81:61:08:9a:e6:2b:
54:0f:13:1e:fb:e6:4c:87:31:43:95:13:cb:07:5b:ac:52:e7:
b0:de:a9:0a:52:24:95:61:86:72:d6:1e:3d:8a:9c:a8:75:3c:
6f:ad:19:2b:90:40:f9:d1:56:47:d2:ff:24:9f:89:35:67:c8:
a7:2b:6b:3b:eb:2e:3e:67:9f:78:1d:14:ee:54:96:87:d3:19:
af:e1:43:fb:8a:b6:22:47:97:04:e7:3f:a8:d0:b3:36:ef:c4:
32:1f:69:e5:dd:50:f3:ae:26:9c:65:b6:99:19:09:aa:3a:11:
75:39:48:a3:96:22:a1:ac:09:71:4f:60:42:89:86:56:d5:3e:
ac:b3:fc:b7:cd:e8:1d:ad:f4:22:38:2a:d0:d9:d5:4a:65:73:
cd:3f:a8:ea:d9:72:e8:39:0f:67:25:d8:97:0b:75:bd:50:03:
b8:92:8f:06:cf:ba:17:f1:31:f6:54:de:5d:99:6d:93:4d:a3:
16:78:b1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:58 2026 by rpki-client