Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: PD1GIfinxHDAwNkzzoj3UYHJ6RbJA6Db5vJfABMJMCM=
Subject key identifier: 07:F2:E5:DC:80:2C:05:26:25:99:79:F4:FA:14:67:78:FF:7A:5D:5D
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 019F9135DB3018C6B3A552901571BF7E3915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 09F1
Signing time: Thu 23 Jul 2026 23:00:53 +0000
Manifest this update: Thu 23 Jul 2026 23:00:53 +0000
Manifest next update: Fri 24 Jul 2026 23:00:53 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: 4bAFfDGdKWZGCJZ4EV/gReDPcObjgufme1qr2PjLzZw=)
2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:db:30:18:c6:b3:a5:52:90:15:71:bf:7e:39:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Jul 23 23:00:53 2026 GMT
Not After : Jul 24 23:00:53 2026 GMT
Subject: CN=07f2e5dc802c0526259979f4fa146778ff7a5d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:8e:fe:04:55:48:da:d6:3c:b5:5e:be:65:
6e:44:17:a7:3d:36:2b:c1:bf:ec:0e:7d:f7:e1:41:
f5:85:cf:2e:23:df:7c:19:ba:9f:5e:b4:9d:ce:40:
fd:72:97:2d:40:71:65:81:4a:4f:f2:55:8a:e9:3e:
c0:5b:1b:d2:3a:ac:ac:f8:ee:92:95:a7:58:26:5a:
e1:4c:01:27:32:8c:56:35:51:74:1f:2f:64:7a:c2:
c9:9d:d2:16:dc:8f:2b:89:bc:d5:24:21:a1:ce:aa:
2e:64:0e:bc:81:67:82:bb:2b:10:f6:8d:b2:2e:da:
9c:7f:4c:35:95:6f:db:d6:76:53:79:c6:ea:c9:44:
83:b4:47:67:4a:67:25:68:ea:c0:33:8e:09:b5:a4:
7c:4f:d3:f8:a1:f8:66:b8:6f:b8:99:b7:ea:50:2d:
32:5b:f0:3b:da:8e:36:74:86:23:d6:c8:ff:d9:d5:
08:14:f4:46:02:f0:c8:5a:d7:a5:ac:76:33:3c:ac:
1c:8e:fa:c2:24:02:2f:ff:f7:c3:e2:f8:d5:f9:20:
da:ef:84:b9:e9:9e:99:95:d9:4e:bf:7c:db:d3:a0:
5b:89:99:6d:d6:fb:57:3e:a6:6f:53:9c:2e:c5:45:
fa:fd:f5:fd:b7:4e:9a:47:78:d6:bd:66:a3:3c:d7:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F2:E5:DC:80:2C:05:26:25:99:79:F4:FA:14:67:78:FF:7A:5D:5D
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:39:52:26:a4:e1:78:4a:fc:1a:56:14:59:b5:11:c1:fe:eb:
d0:a3:aa:e8:c6:66:df:4f:1f:e1:6a:3c:0e:ca:9f:74:c7:b4:
15:27:9a:a1:1a:43:7b:ac:e6:2a:91:cd:6e:c2:d5:59:a1:69:
65:15:2a:b8:8b:a5:08:90:32:50:28:53:5c:dd:63:60:75:4f:
48:f9:2e:cb:eb:32:68:d0:c7:6a:10:72:90:97:49:4f:58:ac:
b3:62:1a:6a:d5:e0:14:7e:ad:08:50:02:cf:66:38:fe:c1:4f:
96:40:0e:f4:1d:1a:77:9d:52:17:ac:b6:31:4c:f8:1a:8a:7e:
2c:d9:0d:c2:6a:aa:3f:b2:62:47:10:13:11:77:79:4d:87:e3:
81:2f:b6:33:16:ba:da:dc:15:1d:f3:86:8e:66:b6:6b:f9:9f:
ea:58:1d:77:d7:5b:44:cd:d6:e7:2c:2f:8d:11:f6:e3:18:9c:
43:bb:3b:39:99:d0:76:b5:de:4a:82:1a:14:fc:ad:db:ae:7b:
44:8b:60:05:28:7e:08:8b:a3:f2:db:67:ac:8c:c0:0b:69:76:
54:61:73:a7:8f:eb:4d:91:8c:c6:36:51:e7:13:57:7e:67:5a:
82:1d:b9:5a:58:c9:72:06:6a:5e:2e:36:f4:ce:c4:fc:d7:0c:
f9:53:bc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:52:08 2026 by rpki-client