Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: cVPiWMWn2lLCkmiegXYJc3Ho/qHL53QleKeqQJr++60=
Subject key identifier: 61:9F:09:F7:E4:4C:45:57:8F:B3:BF:EF:F0:28:8B:DD:61:67:EE:EF
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 019F946E1FDDD38B047FE80779D7944CDD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 0344
Signing time: Fri 24 Jul 2026 14:01:12 +0000
Manifest this update: Fri 24 Jul 2026 14:01:12 +0000
Manifest next update: Sat 25 Jul 2026 14:01:12 +0000
Files and hashes: 1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: dhS617ATzjI66jzakxpKEYDJ1q1QN7Ma+cjvk4I3ZHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:1f:dd:d3:8b:04:7f:e8:07:79:d7:94:4c:dd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Jul 24 14:01:12 2026 GMT
Not After : Jul 25 14:01:12 2026 GMT
Subject: CN=619f09f7e44c45578fb3bfeff0288bdd6167eeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:c2:38:02:48:50:8c:94:ec:7c:db:bd:4d:
a2:1d:39:07:c1:67:02:f2:bb:ea:da:e1:00:c8:2d:
6b:36:8f:8f:ae:8a:3e:c3:29:18:bf:2c:02:c6:40:
11:44:77:dd:68:e1:47:53:d6:03:85:cf:1e:0a:42:
f5:df:c5:4a:2c:b2:78:20:bb:50:e5:8d:dd:97:c6:
a2:ef:5b:5d:e6:b8:16:bb:33:11:2e:b8:4f:d9:bf:
e9:14:aa:4c:2f:d5:82:ab:e9:c7:e1:8e:51:da:31:
c5:97:ef:5f:2f:3a:ac:42:e0:7d:9b:8f:bc:f2:d7:
d8:6c:34:65:11:e8:51:45:89:0c:02:d7:22:c0:24:
e4:a4:5c:57:89:4b:16:f0:22:d9:c9:87:0f:f1:cd:
84:0e:91:2c:5d:b2:8b:ce:4e:34:af:03:d5:70:47:
b9:41:f3:e1:c6:58:ef:cd:58:7e:d0:8e:04:18:05:
4a:78:81:68:8b:4a:c3:f4:fa:1f:11:54:57:5b:f3:
b3:96:b9:22:f4:bc:2d:6e:d4:6d:13:48:69:ad:da:
2e:e9:c6:c8:fc:7c:3b:f5:35:81:b4:67:e1:b6:de:
c1:b0:66:8d:0c:3a:ed:c5:b4:c2:cd:de:f3:1f:49:
6a:e2:81:dc:a4:ee:93:be:63:81:2d:09:59:db:2d:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9F:09:F7:E4:4C:45:57:8F:B3:BF:EF:F0:28:8B:DD:61:67:EE:EF
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b4:6d:20:26:8a:85:d1:de:fd:ab:ad:5a:12:15:e8:90:8a:
b8:2b:28:a5:02:39:fb:2d:2a:9b:6f:7d:d1:eb:c4:ac:fc:7c:
f2:5c:e2:0f:24:b4:69:b3:f5:26:e2:d9:64:16:9f:00:08:61:
3a:70:50:ac:11:fe:c4:28:6c:d9:50:68:7c:fc:e9:55:c1:55:
92:48:62:0e:ae:8f:81:1c:02:ae:d0:91:19:77:5e:9a:10:50:
fc:c3:40:ff:80:ff:b4:20:d9:8b:33:0b:d2:28:65:af:10:f4:
23:4a:70:52:73:59:dc:e0:34:85:11:ba:3f:f3:9b:ce:24:ae:
04:8a:b3:cd:d0:cd:ad:0c:bd:a8:42:05:18:96:12:18:ee:4a:
cf:24:13:1e:d4:6e:c8:0d:0c:67:90:09:27:cc:20:cb:dc:42:
6f:f6:54:5d:5a:62:dc:4f:10:b9:f8:85:60:81:ed:df:05:b0:
fb:1b:0b:1f:7e:a3:fb:e5:60:bb:3e:d7:d0:f6:d8:3b:4e:fe:
6c:04:5b:13:a1:63:d3:d5:28:a8:dc:35:5c:bb:69:c8:b9:74:
7e:c1:35:d4:44:e9:f7:f8:b1:c1:a1:16:60:cf:6a:ce:52:b9:
fb:6e:bf:76:3f:74:61:a5:92:08:c3:8b:b1:c3:2f:99:73:e1:
21:8f:1f:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ubh/d04sEf+gHedeUTN1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDJlMjBhYmQyMjAzYjA1NzY4NmIxY2FkNmNjMTI1MzQ0
NGI4YjIwHhcNMjYwNzI0MTQwMTEyWhcNMjYwNzI1MTQwMTEyWjAzMTEwLwYDVQQD
Eyg2MTlmMDlmN2U0NGM0NTU3OGZiM2JmZWZmMDI4OGJkZDYxNjdlZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwanCOAJIUIyU7HzbvU2iHTkHwWcC
8rvq2uEAyC1rNo+Proo+wykYvywCxkARRHfdaOFHU9YDhc8eCkL138VKLLJ4ILtQ
5Y3dl8ai71td5rgWuzMRLrhP2b/pFKpML9WCq+nH4Y5R2jHFl+9fLzqsQuB9m4+8
8tfYbDRlEehRRYkMAtciwCTkpFxXiUsW8CLZyYcP8c2EDpEsXbKLzk40rwPVcEe5
QfPhxljvzVh+0I4EGAVKeIFoi0rD9PofEVRXW/Ozlrki9LwtbtRtE0hprdou6cbI
/Hw79TWBtGfhtt7BsGaNDDrtxbTCzd7zH0lq4oHcpO6TvmOBLQlZ2y0/vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGfCffkTEVXj7O/7/Aoi91hZ+7vMB8GA1UdIwQY
MBaAFH4C4gq9IgOwV2hrHK1swSU0RLiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lOThhNzktMjQ5YS00MDQ4LTk1ODEt
ZjMwNzA5ZDljMzc5LzEvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lOThhNzktMjQ5YS00MDQ4LTk1ODEtZjMwNzA5ZDljMzc5
LzEvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7RtICaK
hdHe/autWhIV6JCKuCsopQI5+y0qm2990evErPx88lziDyS0abP1JuLZZBafAAhh
OnBQrBH+xChs2VBofPzpVcFVkkhiDq6PgRwCrtCRGXdemhBQ/MNA/4D/tCDZizML
0ihlrxD0I0pwUnNZ3OA0hRG6P/ObziSuBIqzzdDNrQy9qEIFGJYSGO5KzyQTHtRu
yA0MZ5AJJ8wgy9xCb/ZUXVpi3E8QufiFYIHt3wWw+xsLH36j++Vguz7X0PbYO07+
bARbE6Fj09UoqNw1XLtpyLl0fsE11ETp9/ixwaEWYM9qzlK5+26/dj90YaWSCMOL
scMvmXPhIY8f/Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:57:49 2026 by rpki-client