Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: GHZbWvAPjvGtfSQb2bAXg4H/cI3espmuorVMcvGzW+o=
Subject key identifier: 76:84:38:A3:BC:9A:F3:E9:17:7D:47:7C:77:98:D4:AC:81:79:CE:C6
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 019F916D1436C0D44770168C24230170F38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0EFC
Signing time: Fri 24 Jul 2026 00:01:12 +0000
Manifest this update: Fri 24 Jul 2026 00:01:12 +0000
Manifest next update: Sat 25 Jul 2026 00:01:12 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: I9gJPwNJu/P2K46VQYkEqZz4gf0ejKKtwQcutB1IDW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:14:36:c0:d4:47:70:16:8c:24:23:01:70:f3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Jul 24 00:01:12 2026 GMT
Not After : Jul 25 00:01:12 2026 GMT
Subject: CN=768438a3bc9af3e9177d477c7798d4ac8179cec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a9:af:77:67:f4:35:41:cc:bb:ca:6f:20:11:
e3:a2:83:ad:52:2a:c4:7a:5b:2f:f5:72:63:4d:dc:
4a:18:9e:ef:cd:f1:b5:46:e9:5d:c4:d9:a7:7a:97:
81:0c:4f:6d:a9:88:4d:7f:2b:38:08:cc:fa:50:19:
74:1e:a2:17:06:3b:f2:a0:3f:eb:ee:1a:dc:fa:c4:
67:04:46:b7:4c:34:77:a4:69:15:22:6d:fa:36:37:
0c:8e:68:c4:b9:ab:be:d3:20:18:36:26:8d:1d:3a:
47:d5:34:25:40:72:dc:25:f0:6b:0d:c9:2f:55:6d:
17:17:b0:54:8b:34:f0:00:37:df:cc:79:b8:91:00:
5c:40:00:68:1e:04:93:12:b8:a3:38:0c:2b:1b:c4:
9c:53:3d:9c:9f:75:6c:1d:c6:00:09:f3:d7:82:4c:
4f:e4:3a:5c:dc:5a:84:6c:b6:80:1c:65:6d:0c:bf:
9e:31:4e:7b:bf:fb:f3:63:a7:f3:61:9a:86:26:7e:
f7:02:f0:9c:de:de:93:70:39:cd:f2:14:56:e1:71:
2b:4b:2d:bf:45:40:3c:e6:71:d7:44:d4:62:0c:8c:
9f:85:e6:5b:f0:1a:54:7a:bb:69:40:b0:8c:8f:cb:
55:35:30:6e:53:b1:53:73:8b:ec:1c:11:88:df:05:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:84:38:A3:BC:9A:F3:E9:17:7D:47:7C:77:98:D4:AC:81:79:CE:C6
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:fd:17:81:28:6d:75:fe:f3:37:5d:cd:c9:91:5a:3d:97:
70:c3:7f:77:9c:ef:14:91:d6:65:5f:6f:97:52:a7:fa:bb:2b:
58:8a:3f:14:39:16:76:fa:c9:59:02:f4:4d:23:30:03:d6:87:
f5:7f:bb:a0:7d:8d:37:99:38:5d:13:0a:14:bf:80:d4:c5:18:
0e:85:2a:ae:26:2b:03:06:04:9f:70:e8:34:96:95:7c:78:7a:
e8:85:f1:bd:67:cc:af:b1:b0:89:13:a2:cb:a6:42:33:de:24:
d5:31:ea:8d:00:08:d4:f8:3d:cf:4a:9a:a4:e1:bd:f4:30:cd:
d3:30:a8:14:63:9d:23:be:74:27:bb:ec:bc:ce:ca:e9:36:5f:
7a:92:16:5e:81:31:19:4f:56:c6:3f:4f:ca:c0:4d:e8:b6:7f:
91:68:5e:9c:d6:c0:d9:b2:40:ea:56:11:73:56:c1:18:09:66:
14:f4:75:4a:68:d5:4b:cd:87:c1:09:f4:50:50:73:0a:bc:e1:
ce:00:68:c8:ad:f4:67:63:81:47:e6:32:21:df:84:8f:c2:02:
62:4d:9e:69:67:9c:2a:a4:de:32:eb:53:fa:76:3a:a0:36:a4:
28:4e:15:73:99:d3:37:f8:5e:82:e2:4f:43:6d:06:62:8a:f3:
7a:b4:7e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:15 2026 by rpki-client