
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: BM6Sc8c2i6PezgMMkO67nG//LVhmWiB39uEiYAHffsA=
Subject key identifier: A5:E6:33:14:FF:6D:E9:8B:69:65:A1:39:F9:DF:78:F4:6F:D8:F2:90
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 019F91DB2FC35E5DA69E7B3C72983979E3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 0856
Signing time: Fri 24 Jul 2026 02:01:28 +0000
Manifest this update: Fri 24 Jul 2026 02:01:28 +0000
Manifest next update: Sat 25 Jul 2026 02:01:28 +0000
Files and hashes: 1: F79BFzYAIPfw1eLFSox-1us1fgY.roa (hash: s5iDlh7My+Xt6LXot7o7pK46v+NmJUoCkuMmTCQ3Xe8=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: Ymr6wMyHR7Y9Cy4u0P8ogpYCBiMg6RLP5M7aSe8UZJM=)
3: Xm7CSatgWoiFWFoLjdzPyqLwt4Y.roa (hash: ljTW1e8jbhPOBJuEbeNSNc8GJIV6MJTPAjrHkhEAZP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:2f:c3:5e:5d:a6:9e:7b:3c:72:98:39:79:e3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Jul 24 02:01:28 2026 GMT
Not After : Jul 25 02:01:28 2026 GMT
Subject: CN=a5e63314ff6de98b6965a139f9df78f46fd8f290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:05:91:57:1e:ff:d7:c5:0c:b2:7d:29:13:
3a:07:ca:ef:ef:a0:e9:cc:4b:28:ab:f5:4b:d1:04:
e6:f7:4f:ce:20:13:db:e0:d1:4f:dc:10:1a:8e:05:
3c:f6:db:79:23:d5:99:a6:56:b4:33:7a:07:f7:30:
3c:eb:d4:ca:a4:4f:80:09:45:ad:46:d4:99:75:64:
56:5e:07:c2:9c:54:eb:c3:93:23:63:89:08:2e:ef:
b5:d7:9f:18:eb:01:0a:1d:53:fb:01:54:d7:5f:37:
77:23:9b:1c:64:9c:46:b3:51:7f:f2:28:17:7c:9a:
6d:25:0a:39:2f:33:f2:9a:58:04:14:6e:a6:06:89:
33:02:8e:20:0b:35:14:2a:16:1f:93:b3:b7:43:22:
f1:8f:e9:de:bd:51:c2:f5:b0:a5:39:97:67:60:d5:
6b:b1:20:03:ee:c7:4c:5b:a0:17:fd:89:79:d9:73:
3b:e1:60:f9:9d:b2:ef:dd:cb:81:21:8c:94:cb:0d:
d1:8d:89:4c:e4:3c:35:19:3f:75:70:65:40:7e:12:
83:9e:db:f3:86:6f:2e:ba:3f:c7:b0:6f:ad:24:83:
cd:f0:a0:ab:15:52:6c:c9:cb:6c:ca:72:e5:48:08:
fc:9d:91:d9:3a:37:43:66:28:d3:da:b1:49:ad:70:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E6:33:14:FF:6D:E9:8B:69:65:A1:39:F9:DF:78:F4:6F:D8:F2:90
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7c:f3:21:dd:6e:97:ca:8d:3c:75:23:5c:1b:f7:99:ba:df:
d7:80:c3:9f:78:f3:ba:9c:f9:e1:35:58:bd:c7:52:09:b6:0f:
ba:8a:62:c7:7c:14:77:03:d4:43:79:cf:ba:8f:80:c0:b6:c3:
db:3c:2c:31:e4:5a:06:ae:90:05:f6:38:20:76:c0:63:d2:53:
f3:cd:d4:ea:d7:3e:8b:da:d4:02:11:24:a5:5d:9b:ef:9c:76:
6a:6a:c7:39:6d:f2:b5:9f:0e:d0:7e:42:15:3f:98:66:ea:6f:
15:25:8d:01:99:52:33:26:a6:18:15:db:c1:7e:43:0d:0e:97:
c2:02:e7:0f:27:54:ea:85:b7:20:73:d3:8f:b0:09:a6:2c:f3:
85:9a:b4:c2:6b:d0:09:60:7b:35:f4:85:37:a5:d3:d0:ed:28:
3d:d7:bc:6b:3a:c8:09:de:a1:8c:d8:6d:77:84:b2:46:12:23:
fa:4b:fc:8c:06:b7:94:a0:4f:fc:31:01:c1:54:1c:6f:b7:2f:
ad:9c:7e:93:96:fd:27:4c:0c:05:1d:7e:89:32:9b:ed:4b:12:
3b:c1:dc:6d:01:3e:cc:fb:b7:fd:b1:70:05:19:11:1f:2b:05:
35:8d:27:24:e8:56:95:f8:5b:79:81:d5:eb:dd:30:01:3b:15:
d0:7d:49:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:32 2026 by rpki-client