Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File: fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier: w2X+3yfnc0dF3cn8rgg5lhDr8AnkDA5fzG0ouIuYPF0=
Subject key identifier: 5D:E0:7A:CB:1B:2A:1C:0D:9E:8D:9E:94:0E:62:9A:68:30:36:B3:8A
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial: 019F91DA434EBBD7BF8416EEA0A5A7DC3FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number: 14CB
Signing time: Fri 24 Jul 2026 02:00:28 +0000
Manifest this update: Fri 24 Jul 2026 02:00:28 +0000
Manifest next update: Sat 25 Jul 2026 02:00:28 +0000
Files and hashes: 1: 9w9SZI03wkoC4C4p8xbj1xyQTSk.roa (hash: 4ZjNUluDOnXe4+ntofvgh0yoY5kqpiMhMwraHxso+o8=)
2: CfxZ0eGeh6IDIqEVp-fjZEspGOw.roa (hash: 64gVJuHjRSQovFr9XT+uIvTrz2Nlh3y9/QzHL+fzAZ0=)
3: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: S8cdP7Ru9nNAaAraOYl8zUvb99Wbw/Fg5rrhWX2OIWQ=)
4: hLVnBuf3u_JFi21jPT8scSeq55o.roa (hash: 9Kl/ni4B9iNPukEzlMtSOKbm3FCZbPlEMODKtlh8/eY=)
5: t9sZ-svkNCOn_aB5PqRUJcIA5qw.roa (hash: kWqIg6Zu9e2cjZJBsJNhAniK6OQKlOVK34Tp81YEZc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:43:4e:bb:d7:bf:84:16:ee:a0:a5:a7:dc:3f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Validity
Not Before: Jul 24 02:00:28 2026 GMT
Not After : Jul 25 02:00:28 2026 GMT
Subject: CN=5de07acb1b2a1c0d9e8d9e940e629a683036b38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:b2:48:ab:48:10:fd:26:8d:34:38:4e:8b:
e1:0d:11:a5:6a:fa:e7:fa:62:6a:9d:6a:b9:c8:3f:
39:4d:81:12:07:4b:b2:40:5e:07:f1:d3:a4:d3:d0:
f1:de:66:4b:2c:11:8c:df:14:92:83:09:df:ef:55:
e6:b1:c7:e9:33:02:95:7a:71:4c:50:fd:8c:b7:e1:
17:e9:54:35:5f:ec:1f:fc:2a:26:03:78:0e:1a:34:
a0:14:2b:18:49:62:89:03:e6:41:07:b1:31:07:4a:
fe:be:92:ba:21:1a:92:43:18:76:af:3e:8b:7f:10:
d6:2c:b1:33:44:ae:0b:d4:b3:63:6a:54:bd:f0:9a:
1a:5c:90:87:bb:83:52:4b:d9:31:4d:0d:2b:ec:23:
b0:a7:8e:54:4b:f5:a0:16:4f:01:af:f4:45:7b:18:
80:b4:ed:75:ae:51:ed:1e:b3:12:ee:87:53:eb:67:
4f:d4:19:4f:bd:f4:e4:5b:43:5a:87:d9:b7:8c:80:
08:e2:90:4d:1b:99:78:9b:8e:f9:fb:65:5b:65:5b:
91:c4:89:c2:8e:62:88:b4:dd:d6:6a:6c:fb:b4:06:
cb:5d:46:69:18:4f:82:fe:a2:6a:83:68:a4:e8:cd:
39:3a:25:1b:2c:03:d7:bb:0a:5f:b5:96:19:54:38:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E0:7A:CB:1B:2A:1C:0D:9E:8D:9E:94:0E:62:9A:68:30:36:B3:8A
X509v3 Authority Key Identifier:
keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4d:ea:5c:97:1d:6a:ed:50:6b:ba:7e:6d:da:5b:5a:08:94:
0d:0b:46:a6:18:aa:7a:e6:9d:ed:96:b7:7e:da:45:2f:a1:27:
e5:69:c8:b8:52:34:fd:d8:3e:26:83:75:6d:b6:06:47:d7:57:
a5:da:7d:5a:e7:df:5d:b4:dd:33:b5:ea:43:f7:84:26:64:50:
11:42:ee:92:ff:15:a7:ab:4f:df:2f:dd:7c:7f:ce:46:95:56:
fd:a9:1a:c4:8c:c7:39:75:d4:78:fd:aa:fe:a1:b4:29:01:00:
c5:9b:de:b1:ce:a8:b8:e0:91:f6:8c:aa:65:dc:81:51:9a:9f:
c6:c7:20:07:07:8c:81:9a:21:a8:82:b8:7c:bf:5c:37:9d:6d:
0c:89:30:ad:5f:20:96:57:4f:57:52:ac:35:5d:ec:f7:cf:3b:
67:25:f0:bf:9f:af:d8:f9:cd:e2:55:12:af:6f:40:08:4a:20:
91:55:e6:a7:8e:63:d7:27:28:95:b3:f2:32:ac:08:6f:c5:02:
e4:1d:08:5b:4f:09:2e:ed:f1:d1:79:a7:ad:71:cb:17:d5:b4:
5e:40:ff:7e:2a:22:e2:6b:a8:a1:31:31:0a:5c:6f:50:1e:37:
9d:56:5e:ed:d0:74:95:71:f9:f5:3f:df:4f:73:6a:cf:19:67:
45:a1:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:54 2026 by rpki-client