Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: qqOHGJwZys7IprColDTrHa+Bj1slud9mlHlXxCS04ZU=
Subject key identifier: 49:E5:31:8D:F4:CD:D3:5A:FA:E4:9A:0A:9D:65:29:19:96:38:8A:93
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 019F946D99A2B5B6DC0F35A6AAAB977BDFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 14:00:38 +0000
Manifest this update: Fri 24 Jul 2026 14:00:38 +0000
Manifest next update: Sat 25 Jul 2026 14:00:38 +0000
Files and hashes: 1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: GDuhwPRDUwJ6+Xb3UH8UfjXkYK7TRW5FEQSGkNc0GI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:99:a2:b5:b6:dc:0f:35:a6:aa:ab:97:7b:df:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Jul 24 14:00:38 2026 GMT
Not After : Jul 25 14:00:38 2026 GMT
Subject: CN=49e5318df4cdd35afae49a0a9d65291996388a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:a0:45:f6:93:8d:fd:18:63:81:6d:14:5e:
b6:db:00:8b:d1:06:99:aa:12:8c:59:89:ca:a4:50:
20:ab:39:b4:71:3f:46:dd:53:98:b8:81:f7:74:d3:
1a:42:86:25:2c:fa:dd:b5:27:94:a6:b8:ce:3f:3a:
7e:ef:cc:71:51:79:63:c2:6c:f8:e2:6e:3d:43:e6:
dc:89:9d:04:20:54:42:8b:63:3f:c5:ba:4f:f7:42:
69:c0:0d:bf:a3:2d:79:b6:33:e3:43:fd:c5:99:7f:
80:25:ab:87:be:02:1f:79:25:79:09:7f:8b:0d:e4:
e9:07:ab:3c:44:31:0a:6b:3a:1b:57:ae:5e:a9:33:
57:02:27:88:0e:c5:49:da:7f:61:ab:25:9c:4a:35:
31:b8:14:13:80:61:73:8e:f9:0b:7d:4c:19:09:9d:
13:ee:ee:ba:40:f2:ea:de:b1:52:0e:72:6f:91:4b:
a7:22:9a:3c:9f:b5:de:f1:ea:b4:6c:e8:0f:bc:2b:
35:52:ab:c5:1c:cf:76:01:fa:43:88:b2:fb:63:ef:
4d:6b:f6:35:f1:b9:c7:c3:8a:c4:50:6e:13:18:af:
33:1f:a4:15:c4:79:c8:85:1f:bf:4a:b9:59:52:12:
e3:6e:de:57:20:97:fb:ce:75:00:0a:12:59:6a:36:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E5:31:8D:F4:CD:D3:5A:FA:E4:9A:0A:9D:65:29:19:96:38:8A:93
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9f:b5:c5:75:28:8d:e5:86:2a:7e:92:f2:ea:c1:1e:3d:02:
ba:6b:73:be:13:6d:65:ef:be:c4:a0:e8:99:f5:67:d9:dc:1f:
67:4a:36:a6:3c:11:1c:e6:fc:dc:92:66:3e:24:2f:b0:04:ee:
ac:8a:9b:66:7f:7f:27:11:3e:bb:38:e8:71:ce:ec:7e:11:6f:
c0:57:32:c6:54:3b:21:38:e6:cd:59:ec:55:64:b6:de:7e:f1:
9f:37:6e:c0:12:4f:48:8a:8c:e7:68:66:c2:10:96:4d:96:66:
11:a2:e5:59:ef:6c:e0:74:cc:34:43:90:f5:e2:11:30:f7:89:
c9:4c:d6:d3:d6:05:b1:1d:6a:de:53:37:df:c9:1a:91:2c:54:
9d:a0:d0:2c:4e:11:15:79:fe:9f:da:8b:01:0f:e1:d2:4e:80:
84:b1:7d:f0:69:e4:a7:6e:84:9a:df:ca:72:2b:71:e5:5e:29:
76:eb:bc:63:3b:53:0f:8e:89:60:a6:2c:d6:7f:f9:82:2d:e1:
0d:8c:e9:ad:d6:ab:ad:bc:9b:db:9c:47:c5:8e:41:db:e4:eb:
bf:d3:3c:ae:7b:c4:3e:03:57:1a:d8:f3:3f:66:0c:17:e1:a4:
91:a7:e5:be:a0:26:e4:e1:c9:46:b9:23:1d:0c:db:77:be:38:
f7:e6:22:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:32 2026 by rpki-client