Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier: eaQ07VyomvtzDz7dEhfUZQfE1/hW0ShUs4R0V0EB0OE=
Subject key identifier: 95:CD:A1:59:90:A9:FF:06:12:14:D5:F9:E8:23:9D:F9:74:C5:A9:6D
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 019F91A4327A74AF078B3959736F06A11BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number: 19AD
Signing time: Fri 24 Jul 2026 01:01:24 +0000
Manifest this update: Fri 24 Jul 2026 01:01:24 +0000
Manifest next update: Sat 25 Jul 2026 01:01:24 +0000
Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: jpgxKuOReC9f23me2pjKa4nuagN15CKYc5ZCSSXBssA=)
2: PaB6Iu-OaufEYMBZiWD0zvYNa9Y.roa (hash: TjF06m/Mp/7aJVVxV+8vfqSIb8qTmO7jQ4Gg8K+F0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:32:7a:74:af:07:8b:39:59:73:6f:06:a1:1b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Jul 24 01:01:24 2026 GMT
Not After : Jul 25 01:01:24 2026 GMT
Subject: CN=95cda15990a9ff061214d5f9e8239df974c5a96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:58:80:78:52:d7:94:0a:3a:a4:37:b4:23:f5:
fa:c1:0b:a7:46:4e:b1:42:b2:10:52:f1:19:56:ea:
2f:6f:98:51:96:e9:1a:bd:33:ff:aa:12:6b:ff:cf:
4a:18:6b:a3:df:88:89:68:6a:43:42:f1:97:58:f4:
ed:5c:6e:2b:e7:ae:08:39:3d:3b:02:9c:60:aa:89:
30:59:a2:b9:73:1c:b2:1c:03:52:87:9c:55:2f:9f:
d3:f4:f3:8a:01:2d:4e:a4:51:85:1b:dc:0d:42:cc:
54:0e:7f:50:e2:81:14:47:4a:65:4f:f2:ed:b7:8c:
0f:f0:e0:bb:47:38:09:02:93:d7:87:d6:a2:1a:98:
45:35:c3:39:88:8f:ed:ae:71:da:8f:78:86:33:a3:
5f:66:f4:61:79:ed:fd:81:b1:13:bd:d5:7b:39:a9:
91:1f:b4:b1:e3:17:af:62:a1:e8:25:04:2e:cf:24:
fc:b2:e9:bb:0e:66:57:e0:31:40:da:b7:1b:5a:57:
d4:0e:36:83:76:82:14:91:b1:84:f1:de:22:b0:d6:
a9:38:7b:23:67:52:34:b7:4c:a1:7c:82:e4:37:8e:
29:ed:11:90:70:71:ed:4a:3f:92:ea:f7:3e:db:a2:
27:71:8d:3a:ac:a6:75:6e:b4:2e:89:4b:d8:ee:83:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CD:A1:59:90:A9:FF:06:12:14:D5:F9:E8:23:9D:F9:74:C5:A9:6D
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a5:3f:a4:d6:52:f9:a0:3f:16:08:ca:d6:0b:00:6b:09:05:
67:05:1c:17:11:61:38:22:01:91:57:81:d6:b1:97:de:75:f1:
28:e8:e7:bd:c4:92:f6:4c:ce:d2:4f:80:ce:c9:4f:b5:c5:42:
5f:44:37:16:82:9a:aa:82:fd:f9:8e:54:42:18:a3:03:4d:35:
3b:46:89:69:cb:7d:6f:00:26:09:ce:ab:da:94:64:27:2d:13:
fd:a7:90:ed:ac:a3:e3:2f:25:4a:08:c4:f4:30:07:bf:0b:64:
bd:21:31:30:2f:40:37:9a:aa:f4:26:51:78:73:84:ef:cb:10:
d9:5d:ef:0f:ea:7a:a8:f2:50:46:86:a1:f1:fd:a1:23:97:6b:
4e:06:04:dc:1c:9a:90:89:35:fb:05:82:5e:71:23:d6:10:33:
22:91:e3:87:64:72:36:52:9f:f7:73:ab:6b:10:dd:fc:7e:06:
67:8a:70:9f:b6:25:0d:6a:87:31:70:fd:be:61:02:c3:a2:95:
53:21:c3:a4:d9:ba:65:51:3c:8e:5e:f4:40:9e:f3:5c:d9:6b:
a0:0d:16:6e:a2:ae:53:1d:04:6a:a5:df:e8:fc:91:51:ef:f0:
75:35:cd:b9:38:cf:14:03:b0:a7:4f:81:9f:15:e7:ca:74:2c:
17:09:00:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:38 2026 by rpki-client