Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
File: FS1RhIHO0vhNARBPhx1k1EMB2zs.mft (raw, json)
Hash identifier: fqa8pMV2r22Xr6FX1Khu4h+/KtF2DwUyQ+S9DuK5t+U=
Subject key identifier: B7:42:F5:42:81:29:46:A2:1C:FD:8E:E0:81:A9:FB:03:AB:03:AE:58
Authority key identifier: 15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
Certificate issuer: /CN=152d518481ced2f84d01104f871d64d44301db3b
Certificate serial: 019F8E6C2CBDC00975BD0B44CB315F557D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
Manifest number: 43
Signing time: Thu 23 Jul 2026 10:01:21 +0000
Manifest this update: Thu 23 Jul 2026 10:01:21 +0000
Manifest next update: Fri 24 Jul 2026 10:01:21 +0000
Files and hashes: 1: FS1RhIHO0vhNARBPhx1k1EMB2zs.crl (hash: DL3he2Fu1mjhr2c0JRj6BQcdXtTRx596jlXlV4XHCEo=)
2: hHugMF0upu8E3pAL79eNfTDXuAo.asa (hash: CHNfsWpYSm629Dc2eZEBbVMtWCU4937S/+vdVD0kO4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6c:2c:bd:c0:09:75:bd:0b:44:cb:31:5f:55:7d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152d518481ced2f84d01104f871d64d44301db3b
Validity
Not Before: Jul 23 10:01:21 2026 GMT
Not After : Jul 24 10:01:21 2026 GMT
Subject: CN=b742f542812946a21cfd8ee081a9fb03ab03ae58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:18:b5:68:1e:d3:bb:8d:c5:35:00:0f:c5:
3c:b9:cd:a8:c1:0d:6a:2e:f1:96:53:fc:f1:58:77:
1a:a4:6e:47:d0:55:5a:f6:56:f8:d1:bb:34:70:81:
53:1e:c1:61:42:64:e6:71:46:09:8b:27:f9:ee:02:
57:ff:62:c0:e3:05:7a:ed:3d:6f:5b:49:bb:14:2f:
6e:1f:4c:d1:12:4f:01:13:5a:c9:4c:fd:ff:2d:37:
c7:94:6d:ee:17:5f:ba:c4:ae:c0:39:26:df:f3:01:
22:d7:e2:55:1a:b5:98:3f:7c:71:7c:f3:06:67:eb:
a5:31:79:e7:a1:92:41:98:9e:14:e4:54:ae:67:2c:
7c:33:43:52:3e:b2:ec:2f:0b:ea:27:17:79:f5:20:
ef:b7:b0:c2:5f:df:9c:ef:69:12:a1:12:24:9b:89:
61:b9:35:4d:ea:85:1d:8e:52:cd:0a:36:41:1b:7e:
d6:2f:ec:32:93:9d:ae:22:4b:fb:f0:36:88:8d:92:
3a:93:77:58:c0:12:e6:51:82:70:e8:93:86:f4:b1:
01:f6:23:0e:be:6d:95:4e:94:3d:90:e1:2c:99:aa:
b5:5f:3b:b9:2a:78:3a:07:9b:43:23:00:f7:1c:51:
64:bc:6b:5a:68:4b:63:a5:9d:95:ab:e7:d8:10:c4:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:42:F5:42:81:29:46:A2:1C:FD:8E:E0:81:A9:FB:03:AB:03:AE:58
X509v3 Authority Key Identifier:
keyid:15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4c:04:b1:0d:3c:20:d5:f2:fc:05:dd:e8:71:a9:75:e9:c3:
95:0f:31:74:fc:2b:e7:69:1a:97:ae:70:c3:80:8b:df:8d:82:
00:43:6a:70:7b:4c:b7:c7:8d:e9:30:0b:fe:04:d8:77:cd:2e:
7f:d1:80:5e:cc:01:34:e7:5b:f1:71:5d:5d:51:51:35:27:31:
de:c3:bb:d5:88:c0:c9:5f:09:61:e6:84:5d:cb:79:e0:6e:f3:
f0:f5:72:91:1d:f3:be:33:db:f0:c4:39:28:ec:70:9c:21:bf:
79:5a:55:10:5c:8f:44:8d:bf:69:f2:ef:f8:b8:11:b6:09:55:
ff:94:39:36:b0:27:df:cc:2b:66:62:de:1b:10:61:4a:00:24:
c3:16:3d:57:97:d7:57:f8:f6:44:5a:14:12:ce:7b:62:82:67:
67:43:bb:f5:d3:5e:2c:a6:a5:b8:3a:5d:7d:64:90:cb:3d:2e:
71:29:b5:67:5c:f8:0a:5f:48:9a:f4:0c:c5:9a:78:0b:ae:42:
db:2b:af:b1:d1:ab:e6:42:b6:95:b4:03:8d:b4:27:d5:12:05:
1d:d3:08:4e:9b:a4:9e:ff:72:a0:d0:a4:12:00:71:0e:00:02:
08:d6:1e:6d:2f:41:25:3a:00:a5:05:5e:cc:79:6f:df:a2:3f:
b8:9d:65:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:25 2026 by rpki-client