Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: M1g+u+oMRqzQZ6RIHDWfBOshRvJ7STGUUSZZNJt3Emw=
Subject key identifier: E3:E0:CE:CE:09:F5:AE:71:4F:03:0F:4E:1D:39:22:BC:93:ED:B0:52
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 019F93C888AE264BB3FE138BA7BF964AED9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 1371
Signing time: Fri 24 Jul 2026 11:00:20 +0000
Manifest this update: Fri 24 Jul 2026 11:00:20 +0000
Manifest next update: Sat 25 Jul 2026 11:00:20 +0000
Files and hashes: 1: OGNMh9luEfhWYSfkuTxUdvEw3T0.roa (hash: W+Y0DYRWsQtmVscqd/FelKkUl50HuhEP05K5AvhVU6w=)
2: _wcSqPRV5JgTozaPPAply-Zy5SI.roa (hash: kaddq5Zo4l9c0eBW6a1M05v2cAL5RJlZmJFBmkNxnmk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: 9bfXNDpffBFlf5NPE09mFtyGy6hfKylsgBPrnuT8psU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:88:ae:26:4b:b3:fe:13:8b:a7:bf:96:4a:ed:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Jul 24 11:00:20 2026 GMT
Not After : Jul 25 11:00:20 2026 GMT
Subject: CN=e3e0cece09f5ae714f030f4e1d3922bc93edb052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:01:d3:81:16:ef:ed:2c:2b:f3:b8:9d:bf:0f:
b3:21:fe:7e:e4:65:11:0e:94:b6:c9:41:8b:33:58:
f5:1f:38:42:92:e6:d4:90:8d:fa:86:d7:e4:0b:09:
73:b9:91:c1:fc:c3:00:0d:a8:b3:0d:93:9a:37:77:
47:4f:db:ab:60:72:b6:62:94:fd:13:a3:9d:22:bb:
19:17:c8:a1:4c:bd:c0:e9:d8:25:49:9b:c1:01:5c:
95:93:03:a7:c6:5f:2f:c4:5a:27:8a:0f:25:ab:07:
92:d4:12:23:01:c1:a7:2d:9e:8a:4f:ed:6f:b3:b5:
e0:ff:31:5a:25:34:51:99:3a:f7:6c:8f:15:34:16:
d4:5a:d2:a2:4b:47:c1:d6:0e:50:66:cb:32:06:c7:
29:c1:1d:7e:a4:b0:f3:08:4c:d1:73:77:7c:3e:dd:
21:2c:ea:15:d4:36:f4:09:c9:3b:9e:4b:eb:d8:43:
3e:1e:8a:9d:91:3b:5d:cf:34:ec:8a:5d:2f:97:b2:
19:48:0d:34:66:a6:91:da:2b:0c:c6:21:6d:99:1c:
b1:ca:e9:7e:56:6d:5e:d7:ae:02:21:6d:f4:ef:03:
98:98:39:04:46:52:5c:fb:95:64:3a:c8:a8:01:1c:
c0:06:fe:e9:e4:09:56:5f:2a:06:3b:76:0c:04:ef:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E0:CE:CE:09:F5:AE:71:4F:03:0F:4E:1D:39:22:BC:93:ED:B0:52
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5c:b1:f7:52:f2:15:e2:a4:79:e6:da:3a:2e:3c:bb:b3:07:
ff:cd:99:ba:ee:18:2e:6c:74:66:90:10:e8:18:1c:a8:70:b8:
5c:b6:ac:29:df:21:d7:a0:7b:87:f1:a6:2a:5b:2d:c4:3a:14:
da:48:04:90:38:d1:4d:e8:d1:8c:a2:8b:fb:5e:61:41:45:3c:
7f:01:3e:08:0b:4b:e9:d8:56:e5:b0:65:0e:b5:8a:56:8b:bf:
db:2a:8e:fc:78:87:9d:74:b6:a2:be:6a:54:e2:c0:b3:10:22:
3f:ee:ae:4d:a8:b8:dc:57:3c:7b:ba:a1:ac:eb:0f:4e:ac:a8:
8f:41:f2:cd:7b:91:cb:c7:0c:62:d3:d1:9d:ff:51:d7:06:86:
80:21:fa:29:af:ff:57:a4:9e:04:3c:e5:b4:dd:17:2b:de:f2:
de:b2:a1:31:ad:8d:fa:b1:08:6e:8e:f9:49:bb:81:10:0a:85:
88:c8:ab:29:80:56:4b:5b:57:c2:b6:0c:3a:61:2f:e0:1c:59:
53:0b:2e:02:77:ed:cf:45:6d:c5:70:2b:c4:2c:ed:b9:71:33:
3f:34:f1:76:d6:7e:6e:ac:6a:3c:1f:be:d8:30:12:a1:5e:5b:
b5:c0:e7:ed:27:cd:b2:d5:26:06:35:b3:2c:c5:77:43:87:da:
43:99:4d:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyIiuJkuz/hOLp7+WSu2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmEwMTIyNGIxZGE4NjQ4MGNmZWNiY2I2YzUyZGY5ODEy
OTY4ZTgwHhcNMjYwNzI0MTEwMDIwWhcNMjYwNzI1MTEwMDIwWjAzMTEwLwYDVQQD
EyhlM2UwY2VjZTA5ZjVhZTcxNGYwMzBmNGUxZDM5MjJiYzkzZWRiMDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AHTgRbv7Swr87idvw+zIf5+5GUR
DpS2yUGLM1j1HzhCkubUkI36htfkCwlzuZHB/MMADaizDZOaN3dHT9urYHK2YpT9
E6OdIrsZF8ihTL3A6dglSZvBAVyVkwOnxl8vxFonig8lqweS1BIjAcGnLZ6KT+1v
s7Xg/zFaJTRRmTr3bI8VNBbUWtKiS0fB1g5QZssyBscpwR1+pLDzCEzRc3d8Pt0h
LOoV1Db0Cck7nkvr2EM+HoqdkTtdzzTsil0vl7IZSA00ZqaR2isMxiFtmRyxyul+
Vm1e164CIW307wOYmDkERlJc+5VkOsioARzABv7p5AlWXyoGO3YMBO97bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPgzs4J9a5xTwMPTh05IryT7bBSMB8GA1UdIwQY
MBaAFH0qASJLHahkgM/svLbFLfmBKWjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlNvQklrc2RxR1NBei15OHRzVXQtWUVwYU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNDFmNzctYjZhMi00NDk0LWEwNzQt
NGZhZTg0ZmExNThlLzEvZlNvQklrc2RxR1NBei15OHRzVXQtWUVwYU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNDFmNzctYjZhMi00NDk0LWEwNzQtNGZhZTg0ZmExNThl
LzEvZlNvQklrc2RxR1NBei15OHRzVXQtWUVwYU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFyx91Ly
FeKkeebaOi48u7MH/82Zuu4YLmx0ZpAQ6BgcqHC4XLasKd8h16B7h/GmKlstxDoU
2kgEkDjRTejRjKKL+15hQUU8fwE+CAtL6dhW5bBlDrWKVou/2yqO/HiHnXS2or5q
VOLAsxAiP+6uTai43Fc8e7qhrOsPTqyoj0HyzXuRy8cMYtPRnf9R1waGgCH6Ka//
V6SeBDzltN0XK97y3rKhMa2N+rEIbo75SbuBEAqFiMirKYBWS1tXwrYMOmEv4BxZ
UwsuAnftz0VtxXArxCztuXEzPzTxdtZ+bqxqPB++2DASoV5btcDn7SfNstUmBjWz
LMV3Q4faQ5lN6g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:07 2026 by rpki-client