Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: 28mSHlnI486vV0858QGc0EHWEfDuCMCdYWpGqRfgnAk=
Subject key identifier: 71:9D:6B:33:FE:33:53:3D:7B:40:42:0B:20:23:68:84:15:2B:42:1F
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 019F9059E7EBB21B1EBF13EB9AF364EC6600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0FB2
Signing time: Thu 23 Jul 2026 19:00:38 +0000
Manifest this update: Thu 23 Jul 2026 19:00:38 +0000
Manifest next update: Fri 24 Jul 2026 19:00:38 +0000
Files and hashes: 1: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: DuqO+USYzLpIohwFTa4odCqaFeJBm3vOTtbBpdNsKO0=)
2: SaGiZjjt90SX7-BzKCTX7bYUJCE.roa (hash: shQxuuEzemQfoeUgl6rxwi+Wbc4ekvnlLIFK68Q9YjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:e7:eb:b2:1b:1e:bf:13:eb:9a:f3:64:ec:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Jul 23 19:00:38 2026 GMT
Not After : Jul 24 19:00:38 2026 GMT
Subject: CN=719d6b33fe33533d7b40420b20236884152b421f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:1a:85:75:d3:98:76:6f:28:bf:be:37:8d:
17:5c:dc:cb:7c:ca:d2:36:be:67:a5:08:dc:6a:b4:
76:40:1f:7a:30:16:01:87:94:77:3a:34:2d:fe:83:
fd:17:f1:43:59:ef:01:b0:fb:4e:69:90:61:19:c9:
45:a0:7e:29:b3:3c:4e:2a:d8:07:ff:64:ae:45:25:
e1:74:6c:05:6c:f4:10:98:55:be:49:c6:b3:72:2e:
e1:8b:d3:71:f6:84:1b:a1:db:61:e7:22:ab:33:41:
ed:9e:b2:c5:c4:2a:0b:c3:f7:f8:c1:ac:d9:d4:15:
a2:11:80:33:11:2e:00:9b:fc:0f:8a:af:d7:3a:30:
f9:6b:1b:c4:b7:1f:9e:c6:12:d7:1c:d3:9e:c4:a8:
3f:b5:f3:33:ec:97:a3:b1:e5:70:08:fa:cd:04:51:
85:af:f0:da:fd:29:fd:31:44:34:20:64:a6:b5:20:
2b:d7:2b:18:11:b9:54:25:eb:0d:cc:13:76:46:4c:
0a:1c:54:07:97:a3:13:a8:04:3b:76:df:9a:57:33:
8a:dd:51:26:7a:3b:a5:ec:fe:80:8e:61:f3:41:e0:
03:e4:9a:16:28:7e:05:3b:27:eb:12:6e:f5:2c:3d:
fc:8e:07:01:eb:bb:0a:24:59:50:b6:36:ec:5f:63:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9D:6B:33:FE:33:53:3D:7B:40:42:0B:20:23:68:84:15:2B:42:1F
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:eb:db:d3:92:f7:3f:f7:93:c1:26:9c:7b:78:d3:36:1c:c2:
03:87:5b:5b:78:fc:a4:84:0a:33:87:6a:8d:f4:9b:ac:f5:ee:
c1:ce:39:9c:1f:40:ca:79:df:ac:d1:61:0f:35:33:3b:3b:aa:
13:b9:ff:32:13:63:11:10:04:0e:a4:3e:9c:b1:65:6a:e7:28:
14:b1:21:b1:89:4a:94:1e:30:41:85:90:ba:7e:77:01:cc:f6:
40:fd:33:f5:45:78:ae:15:d3:bf:7a:da:df:24:92:cd:f1:c6:
c7:3e:67:d8:16:74:96:38:20:48:bb:06:f5:b7:2e:43:7c:d0:
06:ae:21:17:60:05:35:4c:82:de:46:a6:e1:2d:b2:4b:68:c7:
86:e5:1a:eb:7d:17:a6:f8:e3:72:6a:c0:f9:6b:1e:67:7a:c4:
28:53:e8:ba:76:bb:18:de:af:32:b9:39:69:c2:04:29:84:08:
ee:d4:b5:fe:12:43:74:30:af:36:b5:48:f9:ea:f4:a2:4c:89:
6c:4c:c6:48:88:97:74:af:fa:cd:cd:51:5f:9d:62:a8:fe:33:
66:31:ab:2e:dc:76:f5:d0:89:59:a6:c2:84:ee:c7:98:51:ed:
d5:4c:e2:99:72:3f:bd:b8:3c:a6:cc:4f:31:b7:17:a9:08:c8:
eb:7b:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:30:12 2026 by rpki-client