Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File: fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier: Z1FSIoEo164iBxHMyuvITnW2WNKujrDW9ZpBgrd1gNI=
Subject key identifier: 57:F1:62:16:D0:8F:5B:2F:22:E8:7A:DB:87:74:7F:6C:33:61:B8:1F
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 019F8E6C1D052393666EBB9DCF25C2A4A571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number: 19D5
Signing time: Thu 23 Jul 2026 10:01:17 +0000
Manifest this update: Thu 23 Jul 2026 10:01:17 +0000
Manifest next update: Fri 24 Jul 2026 10:01:17 +0000
Files and hashes: 1: ATx_EPHk5Vz1v-SpkJd7Yp6y99I.roa (hash: wd0rlsu9n+czEzHQALtAg7xmPAM6xOroSrrnXWF3Lfo=)
2: JO3t4wzj5pMO8pakWAwlzqvqqRM.asa (hash: RPS36XqFSQhGe2AwlqqHc/6mflgEGlaBrX53Fqp34Rw=)
3: U94b541NpMgAwKP9ouuvvL3DKeY.asa (hash: 3/0upql9LNQyluPXuFCuGStTRhsE9wxGljd6ckKQ/wo=)
4: fX3tPrrAy5l65982bntPZMbTKXM.asa (hash: elpKOW5KwuHELtxjMPO/HnU5rqNl0Ef4AHZpAwWCRy8=)
5: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: B3cChn4PvBPR4mpQPNfdPOGFHyVu2aKW1JNOjmRYRHc=)
6: ly50p6bn7OtoWGksmAe1FXQRbrM.roa (hash: WvJTgADr+6l6uiBzvWmW2KhgcRN1ZPaB7zKRd38ejzU=)
7: p1pAyUX-fSx4X5xlNyO_Vq2ry7w.roa (hash: 4qf1lMGx7tWHDVof2zNBnir3ltwLgCwXuL9BwrRJPhU=)
8: uiCDkRFrRbQXEYOboMj925yrGQ0.roa (hash: gojhd9ZvaD3lpAzgnUVGx9Pc+ubn7hLvE/bd+7GeQHs=)
9: wr5OBu9Kg5fiAynMByNWWanKodQ.roa (hash: xpQiib4Ztk+0sSwtkw/MfpFjKcsKXQPv65ui0X+24sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6c:1d:05:23:93:66:6e:bb:9d:cf:25:c2:a4:a5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Jul 23 10:01:17 2026 GMT
Not After : Jul 24 10:01:17 2026 GMT
Subject: CN=57f16216d08f5b2f22e87adb87747f6c3361b81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7e:89:d3:78:af:13:af:b5:63:34:25:ec:f8:
28:79:9c:a7:1f:0d:eb:bc:6d:18:39:57:9e:3d:96:
d3:e4:de:22:a0:0b:89:d4:2f:0a:dd:ce:3a:5f:f8:
8d:5a:50:74:8a:a2:7c:7e:06:dc:93:dd:95:52:e5:
1f:f4:64:13:a0:b2:cb:9a:7d:b9:ea:d6:f5:9a:9c:
47:7f:e3:88:6a:ea:32:4c:bd:e8:54:28:1e:80:84:
9a:11:9c:fb:39:5a:96:2a:79:3d:05:30:65:5e:5c:
54:b3:d6:98:7f:94:10:f7:d8:b9:29:9c:90:e8:52:
70:ee:43:e3:ae:7b:01:34:b1:11:eb:4e:80:cf:76:
86:66:8e:d2:c9:9a:a7:67:a3:03:7e:b1:13:b7:b1:
94:f9:17:61:72:57:c2:d6:7d:f1:31:12:c1:37:65:
d8:24:38:0f:61:36:99:43:e5:c8:bd:40:7b:97:f0:
3e:47:78:e0:c8:24:7e:e1:89:9c:23:4c:5a:b0:2a:
4a:b4:6f:87:db:24:6b:04:2b:e0:30:83:e4:65:8d:
a1:b3:65:04:cd:1b:ee:ec:6b:d2:bc:f9:50:99:f6:
d7:17:f5:07:de:a1:43:fb:4c:70:4e:87:75:21:32:
64:6b:68:75:b2:16:77:82:70:4f:67:5a:7e:7c:a5:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F1:62:16:D0:8F:5B:2F:22:E8:7A:DB:87:74:7F:6C:33:61:B8:1F
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:60:be:c5:bc:aa:1d:16:bf:91:24:80:3c:c1:73:9e:7c:c1:
c9:2d:b6:56:e6:07:6c:db:d2:3a:9e:4d:c4:07:cf:f4:1b:84:
d2:81:3e:b4:cb:d0:9d:d2:13:95:34:3e:26:f9:98:92:ce:70:
e5:f4:21:5c:30:5f:28:4f:c5:c5:6f:b9:db:43:cf:fd:1e:50:
03:d6:0e:a8:8a:cf:11:f5:07:e5:ae:86:ec:90:94:ed:35:03:
6d:47:d1:87:8f:ef:f6:66:bf:96:96:a0:b4:1a:63:2a:02:47:
6f:83:80:63:c5:85:14:77:e5:d3:ca:a6:92:69:ca:2e:9b:2b:
61:8d:f3:6a:cb:77:eb:11:02:8f:9f:ca:e3:f3:bf:3d:a8:72:
ab:83:f7:f7:16:4f:a0:31:2d:24:94:58:a1:d7:9d:81:14:70:
f8:4c:55:d5:8e:4c:77:11:fc:51:04:a0:db:0e:bc:03:e3:fe:
ea:71:18:f7:9d:77:a0:c0:2f:e5:74:98:6d:c3:10:29:07:fe:
8f:4e:40:09:7c:06:ff:6f:d3:bb:ba:09:9f:79:53:5e:8d:2b:
c5:8e:c3:e4:8b:66:16:c6:42:a1:29:00:8b:ca:df:1b:00:93:
61:b7:f9:d1:7d:fd:1d:13:af:d0:c9:7c:81:21:e3:a9:ea:4d:
22:39:aa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:12:06 2026 by rpki-client