Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
File: 0IaqHaAvZwEYCywDQdYDB_FKLL4.mft (raw, json)
Hash identifier: jagCxLOzNMCDA1NiVaQMloK8ofhZDnz72KhD8+ZlxII=
Subject key identifier: FC:5E:6E:0B:6E:39:92:86:B5:8D:8B:09:41:2B:EF:D4:B1:35:85:FC
Authority key identifier: D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
Certificate issuer: /CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Certificate serial: 019F9090FAB1590F51544FF8D6B04F5C6320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
Manifest number: 015E
Signing time: Thu 23 Jul 2026 20:00:48 +0000
Manifest this update: Thu 23 Jul 2026 20:00:48 +0000
Manifest next update: Fri 24 Jul 2026 20:00:48 +0000
Files and hashes: 1: 0IaqHaAvZwEYCywDQdYDB_FKLL4.crl (hash: dnXrfQD/N/juxV9P8H00nc1E3I9z80yenTVZJnttAJc=)
2: 3A95eT0-F8FWn0aRvaXeJYEs4vU.roa (hash: LYh5oBJnNPibPoXaGK/ua+lzHz0SVEi30h9T4GjLlU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:fa:b1:59:0f:51:54:4f:f8:d6:b0:4f:5c:63:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d086aa1da02f6701180b2c0341d60307f14a2cbe
Validity
Not Before: Jul 23 20:00:48 2026 GMT
Not After : Jul 24 20:00:48 2026 GMT
Subject: CN=fc5e6e0b6e399286b58d8b09412befd4b13585fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:0e:54:25:ba:b2:06:d9:7a:59:c1:46:e3:
a3:a8:a7:3b:2d:30:76:4f:33:71:8f:b2:8d:6e:7d:
29:a9:1b:83:06:2a:9d:5c:2d:f0:b3:1d:0b:3f:a3:
bc:ff:97:d5:37:20:00:4f:82:aa:c1:cb:58:a0:11:
a4:43:cd:26:19:02:d1:fa:76:45:2b:23:57:2b:79:
ba:7c:d2:64:3a:db:2c:a7:ef:fc:7b:8f:85:65:dd:
29:1c:96:80:c7:73:70:34:bd:ac:40:db:4c:53:bc:
ce:12:3c:d8:b5:61:f7:ad:e6:5e:d7:38:9a:c8:7e:
ee:ea:f6:7c:23:30:4b:8c:1e:bb:59:ab:0f:2d:32:
96:0f:e9:43:99:91:6a:fb:4e:cb:e4:80:c8:85:c9:
27:6a:08:74:5b:f0:14:20:75:b2:8d:17:b0:5d:f5:
a6:34:97:90:35:19:ef:f8:9e:c1:51:5a:9b:2d:98:
be:07:0b:ca:18:96:77:f4:f6:cb:d7:3f:8c:8d:0a:
68:38:d2:5b:2a:e4:87:0f:55:f2:49:24:d3:8f:8a:
36:1c:38:a0:c7:f5:42:0f:13:3b:a1:66:06:c2:19:
71:37:23:45:eb:f4:84:37:94:7c:96:55:73:b1:6d:
f2:f8:d3:80:22:27:98:6c:e7:47:c2:e1:43:7a:1e:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:6E:0B:6E:39:92:86:B5:8D:8B:09:41:2B:EF:D4:B1:35:85:FC
X509v3 Authority Key Identifier:
keyid:D0:86:AA:1D:A0:2F:67:01:18:0B:2C:03:41:D6:03:07:F1:4A:2C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IaqHaAvZwEYCywDQdYDB_FKLL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/873a70-7504-4308-9314-bf133af1edcc/1/0IaqHaAvZwEYCywDQdYDB_FKLL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e9:13:4f:d1:4b:70:1f:5a:70:b8:89:94:05:96:c2:ae:b1:
63:2f:a1:da:59:8a:89:8f:f6:40:ab:57:c4:55:a4:ef:ab:19:
4d:09:b4:31:24:6d:3b:06:6b:9c:28:30:90:eb:1a:39:58:ca:
e5:9c:41:e5:b2:09:3c:5e:21:9a:d8:2d:cc:c1:a6:85:2d:f4:
4a:e9:78:b8:72:f8:12:19:ae:8e:9b:8a:fb:6d:5f:62:82:1a:
51:46:ff:10:d0:5b:90:1f:78:4d:90:37:8b:52:e9:fe:e3:4f:
95:38:d9:4b:51:2f:75:e5:2e:15:22:22:2c:5e:7e:58:88:c2:
79:c2:29:72:a0:3c:41:3d:77:20:90:87:9b:d7:16:39:7f:54:
02:b5:f0:c5:a9:4a:73:94:ee:ab:e8:6f:81:82:98:e1:2b:f0:
e6:b4:1b:e8:e7:4b:9b:07:49:c4:57:71:65:24:58:a4:f3:92:
c6:38:cd:36:a5:64:48:64:fd:04:f4:b7:70:e9:ba:0d:1f:11:
f1:d7:cc:13:c2:a7:93:00:e4:3a:f2:7b:61:68:79:db:11:8c:
59:66:41:51:8f:cf:3f:df:3d:0f:10:17:fa:fe:67:63:10:35:
62:5f:bf:fe:20:02:14:c7:77:d4:a9:c0:86:13:e0:ee:6b:c3:
54:5a:fd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:56 2026 by rpki-client