Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
File: FXR7x-Ei3DLmSJdOml-AZwccX2g.mft (raw, json)
Hash identifier: iBy6hqF3R2tjWNMLf+QjPJqmT8iUgOEMotxxU5wqS+E=
Subject key identifier: 18:A2:74:6C:04:5D:5B:76:83:BD:60:57:47:0A:04:97:68:9D:CD:75
Authority key identifier: 15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
Certificate issuer: /CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Certificate serial: 019F916D113AC261D314CDA55F09030B1B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:11 +0000
Manifest this update: Fri 24 Jul 2026 00:01:11 +0000
Manifest next update: Sat 25 Jul 2026 00:01:11 +0000
Files and hashes: 1: Cp9szG8ZiUmehxIxFtxHs6_E6Pk.roa (hash: kSkecPG1pI9smWNol14Zb1L2v9Bc+8lRVfBtFoCklw8=)
2: FXR7x-Ei3DLmSJdOml-AZwccX2g.crl (hash: OjO7DNnZ9hpJHZUFB2VmSsfAlL3JfRWwMfOKsRjJgQQ=)
3: s-et04Mlyh1LCQjhxRW7-Pv1T8o.roa (hash: 9VlOeKx0Y9OpBSYbldEeODyN67iHY8/REhRntjkKlz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:11:3a:c2:61:d3:14:cd:a5:5f:09:03:0b:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Validity
Not Before: Jul 24 00:01:11 2026 GMT
Not After : Jul 25 00:01:11 2026 GMT
Subject: CN=18a2746c045d5b7683bd6057470a0497689dcd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:3b:29:15:dd:51:3b:d5:13:41:d5:16:ba:
75:b0:fc:f3:1f:9d:66:0c:75:85:39:98:d9:cc:8b:
6d:32:e1:0c:3d:de:f3:9a:bd:44:c1:9b:d2:f8:0e:
18:2d:0f:f0:00:85:35:9d:a5:a3:36:3c:62:4f:8c:
b5:7f:fd:9f:70:71:4c:46:04:02:a6:b8:90:f7:21:
cb:d3:a7:af:ef:f9:b6:46:45:09:94:eb:5e:67:2a:
dc:39:37:ce:4f:84:14:40:c7:f0:35:ee:e1:4f:7f:
2f:3a:8c:78:cd:26:bc:66:b4:54:eb:06:6d:4c:91:
c1:ff:51:bc:85:05:fe:3f:d2:b9:38:f4:01:9e:92:
37:6e:52:f3:5c:ae:01:f1:b0:3f:69:81:58:91:ad:
00:49:46:af:df:a5:ac:50:1d:2d:5b:14:ce:bd:da:
cb:df:63:e0:1b:2c:9f:b1:ae:b9:3f:40:a8:21:fa:
3e:3d:6f:d6:bb:32:ed:40:93:5b:c8:62:f9:38:de:
14:17:07:76:7e:80:fb:58:13:b2:f1:f0:0b:af:80:
4d:d6:7e:c0:1b:37:ea:b1:27:16:7d:02:05:59:12:
5a:66:a4:45:db:d9:85:1e:83:7f:f6:e0:e0:88:3f:
bf:2c:af:af:04:20:51:e7:cd:59:a2:2c:f1:89:47:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A2:74:6C:04:5D:5B:76:83:BD:60:57:47:0A:04:97:68:9D:CD:75
X509v3 Authority Key Identifier:
keyid:15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fb:e5:db:5c:2d:17:d2:05:94:00:56:6b:5e:54:48:43:fc:
aa:9a:fa:a2:f3:0a:cf:17:85:de:3f:70:db:31:0f:b8:2e:ba:
b2:a7:24:56:e0:9c:84:89:9c:e3:d5:0b:59:f0:12:55:94:23:
46:d9:62:8a:d0:5d:f2:4c:85:34:e9:e9:be:1b:9a:d0:68:79:
6b:b0:21:57:91:ea:2b:51:69:85:94:7e:54:4d:b3:7a:a0:f1:
7e:3b:63:2a:9b:f7:0c:b6:36:c6:5f:19:40:8d:c7:98:8c:67:
14:d9:56:64:50:75:1b:47:98:89:7d:46:e2:9c:31:e7:fc:f7:
20:67:7b:48:a2:61:78:67:b5:d5:b0:f7:5c:37:68:9e:1a:93:
26:69:77:7d:08:98:ca:ca:98:09:6e:fc:44:99:c8:82:66:77:
be:9b:76:34:73:e2:5f:aa:9b:0a:7f:d5:36:98:4a:de:54:10:
d9:55:c3:de:4d:1b:02:c7:49:a2:db:b4:9b:d7:2f:bf:fd:9e:
b5:bd:5c:5d:47:c2:39:ee:ee:61:04:88:89:e3:2d:1e:4a:6d:
0b:f9:6c:ad:1a:66:49:23:17:08:1f:23:15:07:0a:df:c4:56:
40:48:a7:d2:b4:69:50:dd:50:0e:33:2a:d4:be:2d:16:c0:99:
07:6f:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:44 2026 by rpki-client