Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier: RDgHlnED/8G8exZSM0eaM3tnMC9YpZg0oIDptgaKvP0=
Subject key identifier: DF:B7:1B:32:5B:7B:D9:C7:1E:B3:8B:72:2C:BB:F6:3F:50:B3:FD:51
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial: 019F9436F965F8F6517EDCECA792BFD8E2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number: 12DE
Signing time: Fri 24 Jul 2026 13:00:58 +0000
Manifest this update: Fri 24 Jul 2026 13:00:58 +0000
Manifest next update: Sat 25 Jul 2026 13:00:58 +0000
Files and hashes: 1: 9EY388q_8N1ByylpLUNJcoEQmNc.roa (hash: swwp7NtGKddr8ryZRv2cyRO8Q2e4qDuv+717NcJsQ10=)
2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: UUwT9u+oeRQDllJYrzhL5sQJ4jMXICrNwzQ0StiRVrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:f9:65:f8:f6:51:7e:dc:ec:a7:92:bf:d8:e2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
Validity
Not Before: Jul 24 13:00:58 2026 GMT
Not After : Jul 25 13:00:58 2026 GMT
Subject: CN=dfb71b325b7bd9c71eb38b722cbbf63f50b3fd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:b4:3c:13:61:72:77:6f:97:c1:f9:f1:62:
dd:57:91:2b:9e:ce:5e:01:b8:d7:09:2a:e1:da:80:
d4:98:31:55:69:99:a0:90:e0:90:a1:3f:2f:9f:55:
75:e0:82:59:8b:3c:16:36:92:fe:c6:63:ac:fe:16:
b4:81:85:f7:c3:44:2d:a1:91:4c:0f:b2:e3:bb:16:
07:85:f9:45:d7:b7:ef:2c:7b:49:f9:86:70:92:58:
33:fe:98:73:07:6c:ed:ec:78:38:7f:50:b9:e7:14:
d1:a2:13:0a:85:fa:9a:56:21:4e:08:7d:a4:46:1a:
77:7b:6f:76:36:ad:0a:70:bb:e8:77:ff:a0:87:9f:
3a:0e:f8:b5:b2:e0:c5:c3:90:e1:0c:3c:db:c8:e8:
27:ba:a9:03:6d:a9:07:c9:0b:12:0a:a7:f3:7f:52:
38:0c:09:11:9b:91:5b:ca:fb:ed:df:98:df:e7:27:
8c:4e:a0:72:64:d0:ec:dc:85:b7:41:80:37:18:f8:
67:02:54:a3:14:97:47:83:6e:f2:6e:c6:ce:94:ce:
51:30:c4:37:be:ff:32:1b:41:a7:cd:00:26:c0:47:
40:48:d8:8c:02:5f:f9:39:4f:5b:a7:3a:7f:41:6c:
1d:b5:18:99:f2:02:86:8f:25:d3:98:d9:da:c6:3d:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B7:1B:32:5B:7B:D9:C7:1E:B3:8B:72:2C:BB:F6:3F:50:B3:FD:51
X509v3 Authority Key Identifier:
keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a6:44:59:64:76:bf:78:34:d0:61:a8:2d:b3:95:d0:5e:3f:
cf:16:f7:94:e7:7b:06:58:1b:b4:66:d4:07:5c:5e:1d:3b:93:
12:f6:2f:c9:8a:d8:38:62:6e:d4:a9:55:fb:c5:dc:c7:4c:99:
49:41:ff:e0:d8:8b:bb:4b:1d:21:13:69:d0:40:3d:6b:74:71:
85:df:32:40:87:9b:8b:97:32:c3:53:3f:8d:11:d1:6b:9c:43:
99:71:0f:24:78:9e:58:60:05:18:98:ab:54:44:53:5c:d1:92:
73:cb:2c:c7:66:f8:50:8e:61:fc:6d:22:33:1a:93:d6:09:2b:
5f:7e:8a:03:7d:82:73:3c:4d:d1:3e:e2:c2:b6:0f:74:bb:93:
ae:79:9e:2e:5a:50:cf:ec:cc:48:c3:6e:0a:e6:7c:23:76:7a:
f8:ee:7b:80:88:6e:50:55:b5:26:3a:28:7f:41:22:82:7d:ff:
16:c9:09:56:c6:31:4a:d5:8b:a3:a6:33:22:f4:73:62:dc:ab:
76:db:05:cf:b1:a9:f9:90:5e:45:65:fa:65:bd:67:1c:29:c9:
c4:31:33:6d:79:a0:ab:63:fe:21:91:d2:f1:88:7a:27:ab:b8:
b3:22:09:a5:bb:db:fe:fc:dd:57:6e:8a:31:20:5b:3c:b4:fd:
95:d8:ac:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:28 2026 by rpki-client