Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: aYfDMt5bEY9e7DERhO0tddFLpPCDHNs2xrhmtBmI8o4=
Subject key identifier: 51:C2:2E:53:3C:22:50:51:AA:65:F6:3E:8D:16:1B:5C:1C:39:B3:AD
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 019F95B75EF41591BA4AB8C666CF3D3687FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 0A55
Signing time: Fri 24 Jul 2026 20:00:50 +0000
Manifest this update: Fri 24 Jul 2026 20:00:50 +0000
Manifest next update: Sat 25 Jul 2026 20:00:50 +0000
Files and hashes: 1: f4bD2j2ZctfyMRffHbpMKHwXRSU.roa (hash: rtGJzd+eO3rg+u8EKiSavSngCqzv1WolCN9nYYZQY64=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: sp5xt1R0fB2C4Xnrnfg7JR4NDDZInoL4jxrzby7KV/M=)
3: sWzc9UukZssUn_EjgB277LtZfe4.roa (hash: pyPZe27dAwl2biV/QtNdOvZ13e3NYVb6oI5PNCsGFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:5e:f4:15:91:ba:4a:b8:c6:66:cf:3d:36:87:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Jul 24 20:00:50 2026 GMT
Not After : Jul 25 20:00:50 2026 GMT
Subject: CN=51c22e533c225051aa65f63e8d161b5c1c39b3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:56:e4:00:17:97:0e:2d:98:5e:e8:0b:ab:
d3:88:64:fc:01:e1:4e:4a:65:70:40:2f:6a:83:9e:
01:dc:43:4e:8f:99:0b:ad:a9:72:f8:97:f2:e4:3c:
81:f0:59:6b:79:fb:c4:35:5c:5a:65:87:6e:67:da:
0c:93:9c:8e:d7:8e:ea:46:4a:4c:db:26:a3:8f:17:
19:d4:12:a5:28:3a:9a:1b:35:41:ad:ee:f0:eb:b7:
15:1c:bb:ad:a5:3b:22:49:8a:98:b3:d5:60:36:87:
a2:83:9a:d4:c5:13:f1:4e:60:f1:5d:45:0e:72:34:
73:83:a3:ae:5e:93:e3:8a:b1:4f:3e:9c:bd:d4:63:
dc:60:ed:b7:46:09:4e:d8:27:ad:fd:4d:04:3a:ba:
34:63:b8:24:38:a7:77:83:72:2a:4d:24:bd:fd:25:
93:65:22:23:ee:85:16:42:c7:28:e3:7f:20:1e:d2:
e0:cc:6a:e9:a9:f6:36:6c:20:d5:7a:2b:8d:be:d2:
c9:f4:ac:00:58:45:aa:df:00:94:29:5b:0e:e3:32:
e7:48:5f:94:39:73:78:4e:0e:31:59:da:2f:c4:a6:
00:6e:54:76:b2:d6:44:ce:0a:ff:1e:10:15:dc:01:
e2:5f:a6:fc:c3:c4:05:e9:c6:8f:db:15:6d:ae:b5:
da:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C2:2E:53:3C:22:50:51:AA:65:F6:3E:8D:16:1B:5C:1C:39:B3:AD
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5f:ac:00:3d:ec:91:69:b1:43:3e:cd:dd:d6:3f:93:a7:1e:
bf:ba:2f:ce:a1:b0:97:89:cd:cc:3c:7d:91:02:e2:32:a4:21:
7a:c6:6e:05:47:c6:30:e4:d1:a0:e9:03:9a:a5:2f:8f:1f:25:
94:7c:4c:da:46:43:76:de:36:d5:e8:9f:4f:25:f8:a0:d4:57:
d5:5b:fe:7d:53:2b:cb:50:f2:d8:56:08:8a:51:d8:36:d6:60:
83:a6:ec:c2:97:6e:08:32:e2:4e:53:03:4a:4f:d7:d6:19:7a:
a3:49:2c:0a:2d:e7:f8:c4:1f:e0:a5:0f:2d:5b:2a:7b:d1:bd:
ac:f3:6b:25:2b:87:5d:68:73:0e:d7:cd:29:94:f1:64:f4:10:
32:13:c5:d6:9d:6b:1b:95:22:9a:ad:08:60:b5:85:19:5c:39:
19:2d:f5:d0:5a:94:44:e6:0b:27:92:74:20:b9:71:e7:0c:20:
9f:19:f9:64:1e:b8:d2:21:ce:83:9c:9d:d0:94:50:aa:d5:08:
4e:91:14:84:f1:36:51:4a:ba:08:a1:29:ba:bf:cb:82:83:c9:
6c:cf:13:b3:38:e8:25:65:a3:dd:a8:70:95:ab:90:16:31:9a:
3b:c6:9f:15:89:c2:c0:f5:c2:8b:6d:7a:bc:56:72:39:b5:ab:
3a:2e:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:07 2026 by rpki-client