Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: hx9yqTMGRRyF1Y6MXIrc6f9I/+OP+rFBao7ylExAexc=
Subject key identifier: 95:CF:BC:A2:A9:36:7F:84:A6:44:C5:9F:1E:A2:24:29:8E:E5:B9:30
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 019F8EA223A5FE2F2BE4D4C1993E3E8BBEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 199E
Signing time: Thu 23 Jul 2026 11:00:18 +0000
Manifest this update: Thu 23 Jul 2026 11:00:18 +0000
Manifest next update: Fri 24 Jul 2026 11:00:18 +0000
Files and hashes: 1: LJweqdiAuex5ffHJZ-p0UeT6XrY.asa (hash: qexPojaaUKUXJCAIdb2LuHOm0GKtKH2oA0dqsygCpWc=)
2: O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa (hash: LffxuYhlhgmo9uurPfnZvk9c5Vb5QUT4U1yEBcpzUI0=)
3: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: opo3XWBXyJTCfbpBNJ7qsfRFWaul5AfFD0tPFgTbVfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:23:a5:fe:2f:2b:e4:d4:c1:99:3e:3e:8b:be:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Jul 23 11:00:18 2026 GMT
Not After : Jul 24 11:00:18 2026 GMT
Subject: CN=95cfbca2a9367f84a644c59f1ea224298ee5b930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:e4:53:aa:e1:5a:dc:67:bc:2a:76:7d:e0:
b4:c1:42:6e:0d:a0:85:00:e0:94:d2:3b:be:aa:c4:
7a:2a:68:d4:d2:62:08:c7:89:a0:9b:06:c8:de:9e:
ea:48:66:6c:9f:c7:41:bc:b3:ab:08:db:2c:ad:13:
3e:af:a7:2b:a1:a1:d8:7b:3d:bd:43:34:7e:c5:ce:
0d:fd:27:94:85:a1:46:48:0d:4c:a9:28:bf:f5:76:
96:d7:0f:48:57:19:20:69:80:4f:c2:f6:21:4b:74:
f2:aa:65:21:08:1b:1f:09:e2:2f:f4:6f:3b:f4:a0:
35:e6:7a:54:81:91:ce:81:14:5f:12:a5:17:ed:f5:
aa:1c:51:60:15:5a:9d:d5:63:48:e5:c9:86:eb:fa:
f4:3c:98:9b:97:36:fd:cc:8b:2e:79:88:4a:08:39:
1e:cd:2b:91:32:95:b6:ea:ce:b7:69:86:33:b9:c4:
df:3a:42:ec:14:57:6f:dc:e2:67:9d:ae:61:85:18:
96:02:ff:46:c8:f4:3b:61:e3:30:16:03:77:68:b7:
cd:4d:e4:9f:d3:86:3c:dc:56:8e:2c:e8:84:0b:63:
ca:f5:48:ba:52:80:4b:4b:46:67:c6:e2:3d:1e:5a:
9a:1d:8e:8f:59:8d:2b:fc:75:97:47:9b:35:2a:68:
d6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CF:BC:A2:A9:36:7F:84:A6:44:C5:9F:1E:A2:24:29:8E:E5:B9:30
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d6:1d:df:9b:5f:18:0f:b1:ef:3c:5f:d9:20:19:09:f8:35:
a8:70:2f:7f:e3:ec:e6:b2:ff:8e:f2:8c:f3:43:d3:49:32:dc:
0c:4b:15:e4:3d:c9:41:db:cf:31:70:04:ac:d8:d4:ab:8e:88:
83:2e:44:e8:bd:cf:ed:01:e4:82:0d:51:4c:28:ed:9b:38:7d:
c2:e2:94:2b:2e:9e:7e:a8:88:71:02:44:55:ef:85:8e:02:c9:
d3:36:10:d8:8d:53:90:38:4c:16:71:e5:60:45:1a:76:cb:a5:
04:4f:76:2a:07:02:54:02:2f:f4:18:71:84:97:75:42:13:1e:
6d:84:57:5c:33:66:75:ac:61:cd:c8:47:e0:ff:d0:cc:c0:32:
07:2d:8c:da:9d:aa:71:ec:22:9b:40:24:30:70:be:5f:f9:08:
51:c2:e7:5e:74:40:b6:39:ce:b2:6c:0b:8c:9a:e0:19:a0:4b:
c9:02:10:e7:d6:9c:0d:9b:1a:42:36:05:ec:46:27:bf:93:17:
c2:f7:4f:30:b0:d4:b1:ff:23:af:f1:8d:28:e3:bf:5c:70:c5:
18:37:74:68:65:28:6f:21:c7:02:d8:d0:bc:64:61:21:8c:1c:
c4:2a:4b:aa:90:d1:0d:d3:d8:db:9a:d2:b1:5f:78:f4:d6:d9:
0e:84:c0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:49 2026 by rpki-client