Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: wXhiYMucGppRI39H/Ina17Ime4r9P0TK+ko5YzeMBqg=
Subject key identifier: 16:B2:27:2E:4F:2F:01:50:B6:93:92:7B:59:25:31:76:33:AD:C4:85
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 019F9323F6ED5212B40D5EEC33C490A795BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 1975
Signing time: Fri 24 Jul 2026 08:00:35 +0000
Manifest this update: Fri 24 Jul 2026 08:00:35 +0000
Manifest next update: Sat 25 Jul 2026 08:00:35 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: iGVG4K57jriXf2PHEAN3lR+OOieKo6ROgXpHgISGhww=)
2: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (hash: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298=)
3: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (hash: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:f6:ed:52:12:b4:0d:5e:ec:33:c4:90:a7:95:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Jul 24 08:00:35 2026 GMT
Not After : Jul 25 08:00:35 2026 GMT
Subject: CN=16b2272e4f2f0150b693927b5925317633adc485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:89:79:7d:90:e0:fc:15:34:31:16:73:c4:
a7:6e:54:1d:62:0b:52:c5:7e:08:1b:38:69:39:46:
1c:cf:44:65:13:5b:42:fa:fd:9d:15:82:02:d8:8a:
1d:cd:a3:6d:ee:ac:81:7f:07:17:21:e4:46:61:83:
91:18:20:d0:6e:54:b6:3e:7e:40:27:b7:7a:ed:50:
fb:b9:e1:ba:46:80:28:8b:2f:71:8f:72:38:d6:f0:
64:56:3b:60:4f:9c:1e:02:81:95:42:04:cb:27:4a:
2a:14:68:b1:cc:30:de:43:92:d2:65:18:4f:af:c4:
dd:90:57:41:b3:6c:90:f5:da:31:21:47:bb:f4:41:
1c:f8:05:bc:c4:cc:cc:59:6e:c2:42:29:bd:3d:dd:
f9:05:79:ed:fb:86:b5:c5:0a:f6:52:af:b4:45:d8:
ea:ed:36:70:61:2e:74:79:b3:46:cb:92:13:f9:52:
9f:4b:17:37:2e:ca:e2:22:fa:41:49:6a:05:d4:df:
fb:10:ee:a1:d0:09:a3:f3:e0:cc:e3:4f:4d:58:c5:
cf:0b:db:69:a8:03:14:49:5d:cf:89:3f:26:a7:8f:
c0:00:f3:65:7f:b0:eb:74:a3:68:0c:62:48:a8:2d:
de:bb:63:ae:e4:e2:2b:de:2f:34:e1:72:4b:e3:89:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B2:27:2E:4F:2F:01:50:B6:93:92:7B:59:25:31:76:33:AD:C4:85
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d1:46:1a:d0:53:e2:6f:84:2f:42:f4:7d:c3:57:f5:15:7f:
a1:37:dc:a1:8c:cb:a5:63:55:25:7f:0a:1c:27:57:43:e9:b9:
f6:5f:54:28:2e:dc:97:5d:8d:f5:44:fc:32:07:ae:44:38:db:
82:d1:0b:6a:fa:fe:7a:f1:5a:cc:c5:44:63:1d:bd:d8:0f:a7:
68:26:f9:ff:31:b8:4e:0b:bf:4e:4a:15:8b:12:26:ee:3e:7e:
04:43:c8:7e:fd:07:9c:68:fd:00:64:a9:c1:22:f1:d6:65:e3:
53:e2:eb:d6:89:b7:dd:8b:ac:4b:43:bd:47:9d:51:b1:3a:29:
e2:74:45:d7:fa:c6:31:f5:44:c8:28:60:2f:63:05:09:aa:a0:
74:31:cf:ab:9d:2c:5e:e4:82:48:31:5c:c4:a0:09:a2:21:39:
63:a9:74:37:27:b4:df:e1:b3:f5:8f:26:81:a3:67:2d:87:85:
23:77:3c:e3:78:a3:a3:72:4e:54:65:62:0c:7d:7a:33:a1:da:
0a:3f:b6:ca:92:9f:ad:7a:bc:37:ca:42:26:ae:85:e4:58:08:
b3:d7:74:d4:84:88:49:a5:12:91:29:82:77:74:4e:ab:6a:c8:
72:32:8d:52:ff:de:cf:e3:75:f7:3b:b0:0d:19:8a:2f:08:56:
e4:fb:ef:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI/btUhK0DV7sM8SQp5W8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTdjNDZlYWZhMTBlYzVkOTA3YmIwNWUzNzEyM2I2OTJh
YjQ5NGMwHhcNMjYwNzI0MDgwMDM1WhcNMjYwNzI1MDgwMDM1WjAzMTEwLwYDVQQD
EygxNmIyMjcyZTRmMmYwMTUwYjY5MzkyN2I1OTI1MzE3NjMzYWRjNDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gqJeX2Q4PwVNDEWc8SnblQdYgtS
xX4IGzhpOUYcz0RlE1tC+v2dFYIC2IodzaNt7qyBfwcXIeRGYYORGCDQblS2Pn5A
J7d67VD7ueG6RoAoiy9xj3I41vBkVjtgT5weAoGVQgTLJ0oqFGixzDDeQ5LSZRhP
r8TdkFdBs2yQ9doxIUe79EEc+AW8xMzMWW7CQim9Pd35BXnt+4a1xQr2Uq+0Rdjq
7TZwYS50ebNGy5IT+VKfSxc3LsriIvpBSWoF1N/7EO6h0Amj8+DM409NWMXPC9tp
qAMUSV3PiT8mp4/AAPNlf7DrdKNoDGJIqC3eu2Ou5OIr3i804XJL44k1fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBayJy5PLwFQtpOSe1klMXYzrcSFMB8GA1UdIwQY
MBaAFBaXxG6voQ7F2Qe7BeNxI7aSq0lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUt
NzY1MjJjMjA3YzU1LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUtNzY1MjJjMjA3YzU1
LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9FGGtBT
4m+EL0L0fcNX9RV/oTfcoYzLpWNVJX8KHCdXQ+m59l9UKC7cl12N9UT8MgeuRDjb
gtELavr+evFazMVEYx292A+naCb5/zG4Tgu/TkoVixIm7j5+BEPIfv0HnGj9AGSp
wSLx1mXjU+Lr1om33YusS0O9R51RsTop4nRF1/rGMfVEyChgL2MFCaqgdDHPq50s
XuSCSDFcxKAJoiE5Y6l0Nye03+Gz9Y8mgaNnLYeFI3c843ijo3JOVGViDH16M6Ha
Cj+2ypKfrXq8N8pCJq6F5FgIs9d01ISISaUSkSmCd3ROq2rIcjKNUv/ez+N19zuw
DRmKLwhW5Pvvtg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:56 2026 by rpki-client