Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier: o79W8vgpQwfblDhFJmqcy2LgUOfomTxANtztLPUKDjo=
Subject key identifier: 26:2C:01:DE:3A:24:8C:F2:DF:42:94:85:B1:8E:31:4B:4D:8A:7D:AF
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial: 019F93C8F38263B09A5F939470E42806FF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number: 19DB
Signing time: Fri 24 Jul 2026 11:00:47 +0000
Manifest this update: Fri 24 Jul 2026 11:00:47 +0000
Manifest next update: Sat 25 Jul 2026 11:00:47 +0000
Files and hashes: 1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: ux6yyW5oZDQRgw/unrzFwvnSJmD8cFwTni/7fuN9Q7M=)
2: Hi2coNGbS0SNcLHmaFZqC-JisHw.roa (hash: 726vn6l/gn+j6OaaVF2Ab7Hnoisjkt4zXJbf/U52Rek=)
3: szRXwnpRyzklmfhXc-z7cr_xBWA.roa (hash: 6Q00UZKxfktIvpdDNdNKqT6xKPj3vxzFyFYU67dsIlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:f3:82:63:b0:9a:5f:93:94:70:e4:28:06:ff:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Validity
Not Before: Jul 24 11:00:47 2026 GMT
Not After : Jul 25 11:00:47 2026 GMT
Subject: CN=262c01de3a248cf2df429485b18e314b4d8a7daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:72:1c:be:90:52:1c:d2:da:be:07:97:01:
0a:81:dc:55:f1:2c:17:e6:0b:4f:72:a4:05:36:8a:
b5:d0:5e:96:8b:b4:77:0f:fc:d0:72:7e:30:fd:fb:
70:b0:d5:ed:30:2b:b2:c7:eb:ca:41:21:28:d2:e8:
42:65:57:db:d6:8e:77:33:19:9a:c4:1e:68:29:08:
d6:62:55:c6:68:a4:6b:e3:ec:fe:0d:45:02:cf:86:
7c:7f:23:2d:d5:18:6f:a8:9d:f7:37:a1:87:b0:96:
83:9f:5e:80:df:bf:f0:af:df:22:c2:13:99:1e:90:
0f:18:2e:fe:ea:37:86:fc:38:5c:aa:ba:9b:ac:21:
c6:39:45:6c:dd:a1:6d:71:be:c7:88:92:e8:7a:07:
c8:df:cf:df:b3:24:c0:f7:b4:5c:33:17:65:35:52:
17:03:20:12:81:6d:0f:e9:8c:c9:79:9c:cc:5c:e3:
eb:5a:d9:b7:6b:92:41:c6:8c:0d:ca:15:f1:05:f4:
1e:e3:b8:fc:2c:29:df:ea:20:55:63:f4:9b:55:33:
a0:3e:47:d6:2f:c9:97:19:28:5c:05:c6:3e:79:89:
cd:d0:7c:89:64:79:ad:3b:6c:3f:80:02:0b:d6:10:
64:42:b0:d4:bc:e9:4b:9f:37:37:93:d2:d2:b8:81:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2C:01:DE:3A:24:8C:F2:DF:42:94:85:B1:8E:31:4B:4D:8A:7D:AF
X509v3 Authority Key Identifier:
keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2c:ff:ab:c2:37:a6:42:60:50:05:5c:52:d6:4c:0c:9d:4d:
3e:ec:55:7d:a2:53:3d:29:5b:f9:0d:cb:e8:33:ba:ac:9a:e6:
7b:13:6a:d5:03:d0:0b:c9:56:d7:51:0e:ca:46:26:c4:a7:65:
2a:7d:c2:fd:93:78:b7:90:fe:55:a0:f2:5a:c1:2e:23:03:c0:
76:5c:b0:c7:6f:a4:5d:15:c3:8b:dd:6d:36:78:00:97:6e:75:
fa:e4:d2:fe:5a:3b:67:e9:ca:dd:98:9d:be:d5:2a:62:0c:46:
c9:5b:77:e4:c1:e4:78:2c:58:13:09:7d:be:32:6a:69:fb:39:
2d:3e:b6:05:ab:91:40:53:84:90:6d:ad:9e:ad:21:65:cd:ac:
ab:3b:90:36:a8:f1:fe:6e:49:d7:82:a7:57:59:67:f5:56:77:
ee:e1:aa:96:3c:33:cf:b3:5e:3f:55:b5:8d:4a:fd:4b:71:49:
5f:ba:d6:95:2a:38:6d:66:e1:22:bc:20:e0:17:ea:ce:97:aa:
a5:05:d4:b1:c5:0b:8b:44:fe:7d:80:96:97:9d:14:ce:8c:85:
ea:b2:98:3f:3f:c3:ed:6a:8e:ac:8d:5f:7f:c3:a3:83:c1:8b:
b9:ab:11:36:06:7c:13:ea:39:50:2c:0a:26:a4:ea:6d:5a:58:
08:e1:46:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:40 2026 by rpki-client