Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: /VHbc5tlNsjMQAqILC0SR0IaIKjgTjkFvBvZIr+mKpw=
Subject key identifier: F5:93:A4:C6:CD:96:5F:86:43:D2:EA:CE:9F:D7:13:95:4D:F1:30:76
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 019F935AF016DC0FCF8D008A4AF1C6B579E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 13EF
Signing time: Fri 24 Jul 2026 09:00:38 +0000
Manifest this update: Fri 24 Jul 2026 09:00:38 +0000
Manifest next update: Sat 25 Jul 2026 09:00:38 +0000
Files and hashes: 1: M39X3O93meXiYEZMdDY1T4wsyVE.roa (hash: eG1u14rPe8MIz7sm8dVuxE9spwX9dFAUZNpT/Ys6fi4=)
2: f95OM8NcoOZXSRzDeGxPVA2Zw_o.roa (hash: 1YBKV57aXgzHn2Rt1P5Y2ZBSmwKVR2wirj1B4cjqRz4=)
3: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: RYarkkQPrDzsntwF9JqLogNUL8a6k1j++nD5VbtFNy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:f0:16:dc:0f:cf:8d:00:8a:4a:f1:c6:b5:79:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Jul 24 09:00:38 2026 GMT
Not After : Jul 25 09:00:38 2026 GMT
Subject: CN=f593a4c6cd965f8643d2eace9fd713954df13076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:21:66:39:b3:79:d5:68:fd:f5:62:09:71:
e0:1e:f0:6a:94:12:bb:de:b5:be:83:3d:29:0f:f1:
8d:7e:a8:15:8e:e0:eb:37:41:3a:d5:f0:a8:f4:f3:
3e:b2:fa:12:d9:29:12:a6:56:82:05:ab:b4:f7:f9:
7f:83:9b:84:6c:97:18:1c:a2:29:9e:01:94:e7:3f:
c0:e8:46:a9:ca:3f:e3:9e:69:10:ca:04:a9:20:6f:
85:37:ce:04:92:da:8a:85:fb:b2:7a:da:5b:47:e9:
21:bd:cc:0f:57:d3:b7:21:dd:55:a0:40:57:95:ad:
fd:9a:e4:a9:02:c5:ac:d9:c5:52:8f:41:21:67:79:
2a:c7:0d:c7:4c:a7:a0:7b:6a:87:b8:c1:3b:b0:86:
d1:26:a5:2b:06:c3:40:6a:14:30:15:52:3b:63:c5:
17:e8:b4:14:1c:d4:e6:9c:6c:f8:91:0c:8e:93:6c:
91:64:2f:19:03:1b:0c:77:ab:e6:dd:75:e3:fd:b2:
6a:45:eb:f4:5d:e0:16:ca:5c:9d:b7:07:97:72:e0:
4f:1b:c5:e2:23:41:e2:31:4d:6a:9b:21:0d:e3:dc:
73:23:94:f9:b5:ae:84:9d:c7:cf:f4:a6:00:01:5a:
fa:4d:8f:56:74:59:18:bf:8f:65:af:44:6e:2e:f1:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:93:A4:C6:CD:96:5F:86:43:D2:EA:CE:9F:D7:13:95:4D:F1:30:76
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1c:71:26:09:1f:3b:8d:a4:b0:2d:64:04:85:1a:ef:35:8b:
94:44:bf:a5:24:32:68:82:d8:21:4d:23:6c:e5:c6:87:73:09:
f8:92:a7:dd:3a:c2:1e:81:33:24:5a:d7:3d:2e:40:44:7f:3f:
29:c4:eb:16:0d:5b:f7:d6:12:e2:06:46:64:37:08:db:f5:04:
e7:72:51:24:56:9b:02:2a:b8:8d:73:ed:a6:bd:dc:22:25:6f:
7c:81:56:60:3e:87:09:0a:01:25:86:99:46:ea:3c:6b:b3:43:
a8:6b:85:55:71:29:a8:13:eb:5c:8e:90:01:3a:8d:00:5e:21:
3a:84:33:28:9b:95:b8:66:b1:9e:0b:fe:1b:d4:0e:cd:4f:aa:
e6:00:09:07:b6:b6:2a:88:2f:82:90:88:b5:84:f6:60:47:f4:
1c:1c:fb:37:c2:89:6a:5e:a0:c5:36:c0:b8:33:c9:61:b3:36:
b2:92:e2:f8:e9:ec:b8:37:6c:bc:4b:7a:48:7a:6c:e1:93:b6:
63:77:ee:91:c3:18:be:48:66:1b:4c:48:65:f9:55:80:7f:2e:
eb:60:21:94:5f:15:66:9e:bd:c2:89:03:d2:d2:3f:be:e5:44:
fe:83:ea:f5:08:07:3a:4b:f2:3c:7d:98:4f:d3:8e:e3:90:1e:
d0:11:94:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:47 2026 by rpki-client