Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
File: fYud7bGKYodS65sTq1OnsFxrvPs.mft (raw, json)
Hash identifier: clIBnsACNyztzMyapnycXAwXT4mFa2YUrJzZ0w2rZQY=
Subject key identifier: 81:F5:29:57:83:2C:D6:B2:86:CB:9F:68:C8:9D:CC:A9:B0:17:ED:96
Authority key identifier: 7D:8B:9D:ED:B1:8A:62:87:52:EB:9B:13:AB:53:A7:B0:5C:6B:BC:FB
Certificate issuer: /CN=7d8b9dedb18a628752eb9b13ab53a7b05c6bbcfb
Certificate serial: 019F9391946853E9AE258515E09036580904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
Manifest number: 3F
Signing time: Fri 24 Jul 2026 10:00:19 +0000
Manifest this update: Fri 24 Jul 2026 10:00:19 +0000
Manifest next update: Sat 25 Jul 2026 10:00:19 +0000
Files and hashes: 1: DCgkXKWju9a74f-BD7pwB2qA-Ek.roa (hash: 0lPyy+XVCSUybo3UvnbvK+AwH8B8KKxXnQhU2cV9IB0=)
2: fYud7bGKYodS65sTq1OnsFxrvPs.crl (hash: REgI6MKNSjxHrIc3msiO7WRxIrGAhau6uaHTUfBoCMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:94:68:53:e9:ae:25:85:15:e0:90:36:58:09:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d8b9dedb18a628752eb9b13ab53a7b05c6bbcfb
Validity
Not Before: Jul 24 10:00:19 2026 GMT
Not After : Jul 25 10:00:19 2026 GMT
Subject: CN=81f52957832cd6b286cb9f68c89dcca9b017ed96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:8e:ab:60:d7:55:cc:fd:bb:f8:e6:a8:9f:
63:2b:ef:63:cf:1c:12:42:26:4c:f8:dc:a6:95:ff:
06:b1:05:01:25:85:68:35:12:02:e5:28:d3:c0:bf:
36:d7:dd:3b:b0:1d:f8:ed:f8:d7:df:99:3c:94:47:
73:f3:99:b1:ea:17:e8:f8:0b:66:36:60:71:d6:de:
cf:d6:4c:8b:9e:0f:18:dc:64:04:04:bb:c0:28:7d:
6f:a0:be:6c:7a:e8:a6:61:ae:94:f9:f6:22:0c:fa:
9f:8a:25:da:f3:c0:be:69:c5:ca:b4:96:27:c5:54:
c7:34:51:ff:55:ba:9e:8d:a8:fa:5f:32:07:22:c5:
da:05:16:af:29:07:ab:96:b4:db:32:37:cc:49:b0:
7f:d5:c9:fb:b8:f1:31:75:7d:22:1e:16:71:f5:d8:
ea:a1:f5:27:a3:d2:a6:f5:d9:2b:b3:e1:83:ce:ac:
06:26:0b:aa:d9:7b:68:9d:ea:90:a4:d0:a0:88:69:
bb:f4:c4:39:79:ab:7e:b2:85:3f:ad:a7:ed:b2:80:
83:e1:ae:70:4d:21:98:ec:ab:a2:2b:b4:66:10:ea:
bd:61:3b:86:6d:f5:91:6d:b4:13:61:d5:72:d8:da:
06:f1:18:d8:08:89:c0:a4:b6:0c:69:1d:7b:57:ab:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F5:29:57:83:2C:D6:B2:86:CB:9F:68:C8:9D:CC:A9:B0:17:ED:96
X509v3 Authority Key Identifier:
keyid:7D:8B:9D:ED:B1:8A:62:87:52:EB:9B:13:AB:53:A7:B0:5C:6B:BC:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYud7bGKYodS65sTq1OnsFxrvPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a41813-40ad-4956-af0f-a3648e6d234b/1/fYud7bGKYodS65sTq1OnsFxrvPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:48:22:b5:bf:82:05:11:8f:5a:40:5f:42:ce:5c:be:7b:c2:
e4:50:fb:62:bb:03:b2:b9:fb:d4:fa:17:c1:41:31:5b:bb:7c:
c9:cb:4d:ce:79:b8:76:40:71:b5:f7:05:49:4f:54:4a:7f:3b:
3c:88:51:2b:60:72:97:ef:50:30:6b:d5:af:c8:a9:b8:01:7f:
4d:cd:a2:68:ce:60:74:1b:74:e6:68:37:07:49:81:15:c9:37:
38:83:fd:52:b5:01:d2:fe:a9:4b:f2:db:c8:6b:91:e3:0b:3f:
20:28:64:cc:cb:3b:a7:93:d6:59:a3:83:8b:3f:da:f7:e2:4c:
66:48:07:29:1c:b1:34:54:bc:1a:57:54:d2:83:04:d9:70:18:
ef:71:06:33:40:6e:91:f7:0d:75:59:46:95:68:f7:34:46:b8:
bc:92:e0:c2:13:90:36:db:6e:bb:59:a2:a5:76:60:23:b3:09:
5b:fb:9c:f7:d7:3e:7f:86:7d:b4:cd:34:f3:41:b8:f3:59:48:
ff:a4:c3:af:0d:b2:42:eb:56:e5:fc:c9:47:c0:c3:66:1b:99:
57:01:f4:0f:7a:91:1d:df:d7:4e:b6:2b:7f:1d:d4:4b:f4:c7:
3a:17:51:72:6a:7a:c2:df:f7:16:93:80:75:87:a5:71:2f:48:
d8:4c:fc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:04 2026 by rpki-client