Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File: fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier: pNs5P8R1oWY+ocB0LkobgcHOMWrq5ZWL7+Y/MpuM5bU=
Subject key identifier: E8:74:E0:2A:1C:8D:BB:10:41:2B:8D:F9:E2:7E:A7:57:E8:16:2B:2A
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 019F9059FA780BBA2877FEEFC8C5C86B27CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number: 19D6
Signing time: Thu 23 Jul 2026 19:00:43 +0000
Manifest this update: Thu 23 Jul 2026 19:00:43 +0000
Manifest next update: Fri 24 Jul 2026 19:00:43 +0000
Files and hashes: 1: ATx_EPHk5Vz1v-SpkJd7Yp6y99I.roa (hash: wd0rlsu9n+czEzHQALtAg7xmPAM6xOroSrrnXWF3Lfo=)
2: JO3t4wzj5pMO8pakWAwlzqvqqRM.asa (hash: RPS36XqFSQhGe2AwlqqHc/6mflgEGlaBrX53Fqp34Rw=)
3: U94b541NpMgAwKP9ouuvvL3DKeY.asa (hash: 3/0upql9LNQyluPXuFCuGStTRhsE9wxGljd6ckKQ/wo=)
4: fX3tPrrAy5l65982bntPZMbTKXM.asa (hash: elpKOW5KwuHELtxjMPO/HnU5rqNl0Ef4AHZpAwWCRy8=)
5: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: Ni6wM+lQuJJMWgVRnbaxK4SONcQXL9gAXf7i3S79jvo=)
6: ly50p6bn7OtoWGksmAe1FXQRbrM.roa (hash: WvJTgADr+6l6uiBzvWmW2KhgcRN1ZPaB7zKRd38ejzU=)
7: p1pAyUX-fSx4X5xlNyO_Vq2ry7w.roa (hash: 4qf1lMGx7tWHDVof2zNBnir3ltwLgCwXuL9BwrRJPhU=)
8: uiCDkRFrRbQXEYOboMj925yrGQ0.roa (hash: gojhd9ZvaD3lpAzgnUVGx9Pc+ubn7hLvE/bd+7GeQHs=)
9: wr5OBu9Kg5fiAynMByNWWanKodQ.roa (hash: xpQiib4Ztk+0sSwtkw/MfpFjKcsKXQPv65ui0X+24sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:fa:78:0b:ba:28:77:fe:ef:c8:c5:c8:6b:27:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Jul 23 19:00:43 2026 GMT
Not After : Jul 24 19:00:43 2026 GMT
Subject: CN=e874e02a1c8dbb10412b8df9e27ea757e8162b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:8b:b0:03:ab:7b:96:6d:9a:c2:bd:e7:50:
15:ac:a5:55:68:9b:a1:c4:92:0d:bc:b3:a1:21:19:
65:da:43:49:0c:bd:74:42:97:fa:33:08:e5:d5:03:
55:51:44:c0:43:7c:25:f6:8e:58:6d:6e:73:41:c0:
f9:77:14:4a:c1:87:10:a7:ce:29:55:55:ff:8e:dc:
41:1a:0d:cd:a4:af:e3:3b:85:43:e2:57:8d:8a:46:
04:d7:ce:08:d4:2c:7e:fb:0f:03:d8:bc:bb:1b:8f:
3a:31:21:8d:d2:eb:d1:5a:a7:b9:b6:cc:e9:00:c5:
62:e6:7c:10:00:4b:c6:a5:24:87:26:8e:40:77:f9:
39:62:ee:11:a9:7a:8a:7b:ab:8f:b5:4f:70:89:45:
a7:4d:d4:5a:4b:68:e8:f0:55:41:94:24:5b:df:bf:
3d:9a:d7:55:d8:c3:fc:a8:34:83:6e:21:6e:eb:f0:
c8:a7:9c:a1:7e:4a:95:ae:7b:f0:ad:03:21:57:21:
04:03:f3:25:88:94:3c:c1:69:d3:66:1d:87:1e:8d:
9d:15:fe:fe:f6:39:99:eb:be:2e:1d:fb:8d:79:ab:
af:04:03:b3:34:fb:08:31:43:09:31:1d:37:03:81:
02:27:ff:1f:15:46:dc:65:a1:e4:81:9f:43:bb:9a:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:74:E0:2A:1C:8D:BB:10:41:2B:8D:F9:E2:7E:A7:57:E8:16:2B:2A
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:95:ce:85:e5:c8:a1:c9:c6:f9:87:97:a2:65:e0:fe:87:32:
4f:ac:ec:57:65:2e:1a:34:42:cf:90:27:7c:98:7b:c3:60:b6:
4e:ab:5c:8a:18:e9:64:8e:cf:3f:89:04:90:6d:fe:71:f1:ee:
27:6b:27:fb:bc:64:35:67:7c:ba:3f:99:78:e0:3e:fb:e3:fe:
c7:9d:f7:aa:1d:d7:16:c9:b4:ca:5e:e5:99:73:5b:b9:4e:31:
0c:a4:ae:38:e8:90:37:32:a6:ef:7f:66:3c:e1:9a:e4:f3:a5:
40:e3:42:3b:88:5b:c2:81:44:ae:08:f1:56:6d:05:2c:56:0c:
d9:88:66:ef:05:5e:60:6b:cc:e7:39:84:6b:2e:89:65:4f:97:
95:07:8d:4b:61:0f:7f:22:c6:1c:4e:a8:a4:ee:74:fd:07:9d:
ef:a8:7d:89:51:cb:43:c8:34:68:c9:5c:9a:cc:07:ac:b9:74:
a3:a2:85:e8:be:98:9e:03:b1:08:27:62:e5:18:28:fb:ff:ef:
54:53:35:d2:50:5d:6c:0f:cb:f8:1c:e8:8c:05:17:ab:7e:eb:
83:44:f7:2f:7b:a2:aa:55:11:75:9c:a4:56:77:d6:37:17:38:
6f:9e:c1:86:23:d9:81:b8:f2:22:a9:b7:73:d0:ec:54:85:24:
69:25:28:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWfp4C7ood/7vyMXIayfMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0
MmUzMTgwHhcNMjYwNzIzMTkwMDQzWhcNMjYwNzI0MTkwMDQzWjAzMTEwLwYDVQQD
EyhlODc0ZTAyYTFjOGRiYjEwNDEyYjhkZjllMjdlYTc1N2U4MTYyYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dOLsAOre5ZtmsK951AVrKVVaJuh
xJINvLOhIRll2kNJDL10Qpf6Mwjl1QNVUUTAQ3wl9o5YbW5zQcD5dxRKwYcQp84p
VVX/jtxBGg3NpK/jO4VD4leNikYE184I1Cx++w8D2Ly7G486MSGN0uvRWqe5tszp
AMVi5nwQAEvGpSSHJo5Ad/k5Yu4RqXqKe6uPtU9wiUWnTdRaS2jo8FVBlCRb3789
mtdV2MP8qDSDbiFu6/DIp5yhfkqVrnvwrQMhVyEEA/MliJQ8wWnTZh2HHo2dFf7+
9jmZ674uHfuNeauvBAOzNPsIMUMJMR03A4ECJ/8fFUbcZaHkgZ9Du5q20wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOh04CocjbsQQSuN+eJ+p1foFisqMB8GA1UdIwQY
MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt
ODQ5Y2ZjYWJiNjU3LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3
LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJXOheXI
ocnG+YeXomXg/ocyT6zsV2UuGjRCz5AnfJh7w2C2TqtcihjpZI7PP4kEkG3+cfHu
J2sn+7xkNWd8uj+ZeOA+++P+x533qh3XFsm0yl7lmXNbuU4xDKSuOOiQNzKm739m
POGa5POlQONCO4hbwoFErgjxVm0FLFYM2Yhm7wVeYGvM5zmEay6JZU+XlQeNS2EP
fyLGHE6opO50/Qed76h9iVHLQ8g0aMlcmswHrLl0o6KF6L6YngOxCCdi5Rgo+//v
VFM10lBdbA/L+BzojAUXq37rg0T3L3uiqlURdZykVnfWNxc4b57BhiPZgbjyIqm3
c9DsVIUkaSUoCA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:00 2026 by rpki-client