Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: pTd5OK56sN4UwmP2S5K616m+wEn1jySulHmpLijifZs=
Subject key identifier: E5:CD:67:5A:98:C3:00:9D:89:09:F7:B4:B6:DA:85:88:1D:EE:92:8C
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 019F94A4AA6CB4DBE2D38F117C592A499137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 12A1
Signing time: Fri 24 Jul 2026 15:00:47 +0000
Manifest this update: Fri 24 Jul 2026 15:00:47 +0000
Manifest next update: Sat 25 Jul 2026 15:00:47 +0000
Files and hashes: 1: MSIj_pvmmWV611TPzznzhVyMajg.roa (hash: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: HBBROdE+nxLXTee/21z3FFVXB/ISKaoWsRJOXOAT/08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:aa:6c:b4:db:e2:d3:8f:11:7c:59:2a:49:91:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Jul 24 15:00:47 2026 GMT
Not After : Jul 25 15:00:47 2026 GMT
Subject: CN=e5cd675a98c3009d8909f7b4b6da85881dee928c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6d:26:38:72:f1:19:68:e9:16:ca:3a:ad:d1:
f2:f9:a9:ee:23:3e:70:01:a0:ae:e0:14:16:46:37:
09:9c:06:50:a6:8e:38:41:02:dd:d1:95:2c:57:a3:
55:3e:44:38:d7:02:5b:b2:90:84:8c:90:5e:70:e0:
8a:91:83:4d:03:0b:b6:fb:75:b0:e5:b3:cf:7f:10:
99:39:db:db:ff:84:06:0f:57:8b:88:3b:f1:b9:f8:
34:1c:60:88:c0:1e:a8:31:a2:94:1b:7f:bb:c5:77:
83:6a:8a:f1:47:9d:04:1b:59:13:4d:17:33:a2:67:
6e:eb:94:51:f9:30:95:f3:7f:12:64:85:43:6f:31:
3e:b7:6a:89:65:f1:84:a4:ac:9c:50:4a:44:f3:34:
cd:ee:2c:b4:21:bb:ce:61:ca:9d:84:39:50:bd:29:
57:a4:91:2c:d3:12:ff:96:6b:a5:5d:19:cf:e2:87:
eb:ef:6e:a6:8c:0c:ee:7d:ce:37:62:a8:9e:f3:25:
c2:b8:6f:e7:ef:fd:d9:2b:0c:4e:f6:7c:59:41:03:
18:a0:ef:d1:27:e5:7a:f9:9c:06:a6:26:d5:f5:31:
a8:fd:d2:24:fd:a7:ee:9f:44:c0:b6:33:a6:50:b1:
6b:09:b3:37:da:d4:3b:e1:3b:06:e4:06:1f:4b:3d:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CD:67:5A:98:C3:00:9D:89:09:F7:B4:B6:DA:85:88:1D:EE:92:8C
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ba:86:5e:69:04:0c:a0:a3:65:60:d7:e1:89:fe:e3:c9:9c:
f7:2d:93:66:5c:32:32:9f:79:be:25:63:4a:48:08:f3:e9:e1:
8b:db:48:85:8a:a0:b8:6f:65:28:ce:36:e9:0a:e4:b4:d8:b4:
bf:5d:b2:de:97:60:bc:cb:0a:08:d0:9d:39:24:db:77:7f:75:
37:88:d9:ae:49:e2:32:8c:73:19:b1:a4:75:3f:2e:21:0c:3d:
87:10:67:38:9a:cb:3c:16:23:8d:eb:5d:6a:af:3e:be:c9:55:
95:6f:2c:49:88:47:3e:45:e5:76:03:84:87:d4:3d:0f:ea:1d:
db:15:2f:ef:65:80:47:46:24:3c:81:df:62:a5:a3:c8:3e:25:
65:18:c1:01:93:99:e4:5b:bf:ba:fa:ae:ae:4c:51:6c:9d:4a:
02:9b:e7:7a:05:d1:71:e0:33:d1:8c:75:5e:95:28:12:04:22:
0b:42:47:e5:df:d1:af:96:25:6b:3b:d0:ce:16:59:d6:4a:50:
2e:6f:87:49:a3:d8:46:38:45:83:e9:f0:f3:e7:8d:d0:63:e7:
2f:65:33:82:39:76:c6:d4:44:2b:90:ca:b8:41:af:e0:fd:96:
91:cd:a1:d0:f1:22:2d:10:62:6a:56:e1:18:2f:dc:62:32:29:
6d:c6:bf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:16:38 2026 by rpki-client