Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: k3Zo9MwfFUvFn0VZsbnNDwcRRRhm8cBQ2lhGrYvNhRU=
Subject key identifier: 37:C1:CB:72:F3:60:7D:E2:AA:DF:38:EF:23:B8:EC:10:B7:5D:52:BF
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 019F91A3BD2160903504C3386A26F3EA00F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 10DB
Signing time: Fri 24 Jul 2026 01:00:54 +0000
Manifest this update: Fri 24 Jul 2026 01:00:54 +0000
Manifest next update: Sat 25 Jul 2026 01:00:54 +0000
Files and hashes: 1: FG6edaLthXtNRXgQz784XZNgYd8.roa (hash: 5nX8hTmpLoy7w0liaeZHVLXCjdNjFlEQzahTMpZo9sE=)
2: PPe7b3DP3EbyqgiJ60wDtHpl8Tk.roa (hash: gl6f8DXeLthMCjyLTaJ3OgpTkOvLgi2P9WVTX4qF9dE=)
3: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: 8fCEK+PirBx8gQfhD4GZ+AAaBOZZdfj300cgCgbGXFo=)
4: iAcU8TmU3XO9pInkys3o4nP2d1o.roa (hash: 8kLlqWjTG7qODVMxiGmAdLlFMj+sGZZsSvd11HBghdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:bd:21:60:90:35:04:c3:38:6a:26:f3:ea:00:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Jul 24 01:00:54 2026 GMT
Not After : Jul 25 01:00:54 2026 GMT
Subject: CN=37c1cb72f3607de2aadf38ef23b8ec10b75d52bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:94:16:28:c9:7e:41:1a:b7:3b:df:6f:64:26:
0a:a0:7c:c6:38:5b:1a:b9:b2:59:fc:d0:46:93:e1:
1f:af:20:f5:ca:ae:e2:1a:e8:18:0b:27:cf:b5:51:
2c:ae:f9:51:f4:d3:46:36:1c:10:f2:44:58:4d:60:
b2:bc:60:81:eb:7b:11:10:85:d6:bb:ca:40:ac:8f:
c2:c2:86:2a:2d:1a:5c:5a:4b:fb:e3:e2:f3:70:0f:
41:51:ca:ed:5a:7a:9d:4e:b1:34:4f:24:20:8d:38:
ef:d4:b8:03:2e:11:8d:9e:7c:55:5a:97:c8:18:bc:
95:b4:bc:72:aa:4d:0e:fd:cc:ee:38:bf:e6:9d:8e:
a8:b5:64:73:4f:82:e6:14:82:9a:10:38:11:14:bd:
7f:e9:5a:28:c2:4a:e2:e9:5b:20:eb:c3:f3:0f:71:
2b:90:d6:5a:b2:e2:b9:43:05:e6:94:42:74:10:98:
c0:3b:e6:8f:53:cd:4e:83:ee:f3:c5:44:37:54:81:
dd:69:86:6c:a4:bf:17:72:04:26:0c:74:21:37:0b:
5b:f2:9b:69:1f:a5:85:17:2c:2b:3f:c2:c8:95:ef:
59:bb:f4:90:a6:90:71:56:4a:a3:76:15:7f:47:03:
1e:c2:e3:bd:66:5b:dc:68:cd:d3:43:6a:11:01:d0:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C1:CB:72:F3:60:7D:E2:AA:DF:38:EF:23:B8:EC:10:B7:5D:52:BF
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b8:d0:ca:d6:53:12:1a:85:6c:ed:c7:28:90:3f:fa:5d:39:
42:f3:bb:bc:f3:ff:37:48:8b:c6:51:0f:97:40:65:e3:15:93:
29:47:28:da:52:7c:c5:07:c9:da:cf:43:3e:a2:c5:10:c5:82:
3f:fa:39:09:46:30:6c:23:89:48:e5:00:c2:04:7f:98:de:9b:
6e:a5:70:b5:4e:cd:5d:ac:28:8a:fd:ad:7d:0e:db:8e:ed:ab:
53:68:da:15:a5:1e:b8:b5:c4:b5:88:df:22:69:03:5c:47:c6:
fd:ff:eb:79:89:a1:77:4e:94:dd:26:66:a8:59:4a:26:8e:7d:
bc:3c:33:2c:06:ee:33:ac:98:ab:02:a9:53:d7:31:70:7f:c5:
81:5b:59:9e:d8:e1:e5:d7:7d:e4:55:03:40:90:42:8a:da:d8:
14:13:a7:dc:8f:28:06:8b:7e:3f:b1:3b:b3:2a:e3:38:c1:71:
59:a8:fa:3e:13:7f:ed:58:a4:47:65:0d:45:59:ff:b3:11:5c:
5b:53:20:df:bc:b9:0c:b8:4e:2b:cd:91:f2:a1:a2:fb:c5:db:
86:fc:c2:63:99:cb:5d:54:23:cb:4d:18:ea:84:4e:76:01:3c:
80:21:60:b7:50:48:a4:74:a1:44:f3:c1:66:5b:60:1c:8e:9f:
6f:72:1d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:48:38 2026 by rpki-client