Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
File: FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft (raw, json)
Hash identifier: U/QypsjuUMqdb1jAitjU0O0EumGp8LyGIqty46wM1E4=
Subject key identifier: F0:7A:8E:B8:97:12:4A:B4:AC:19:C9:F7:2B:6B:C6:DD:3D:A6:DA:4F
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial: 019F939227307D85C7BEA80687B6F5D17B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
Manifest number: 067A
Signing time: Fri 24 Jul 2026 10:00:56 +0000
Manifest this update: Fri 24 Jul 2026 10:00:56 +0000
Manifest next update: Sat 25 Jul 2026 10:00:56 +0000
Files and hashes: 1: 1-Gi0WglfPEDkKdexDXnKU5N07dg.roa (hash: 6gCrfLIveiynT67NWLBkqnoTcS/eVVpbgxDQ/v8TVK4=)
2: FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl (hash: 4gSYgbwu801aAm27PMC7D1Em1MXuDU4OJWSrrqz8d64=)
3: f84vJw7wG4ISORQxAMD5iiMwEgg.roa (hash: XaUoU6IIIIA7AtaKVBXhP/8omy3ZC6BdNEc6ogpNveA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:27:30:7d:85:c7:be:a8:06:87:b6:f5:d1:7b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
Validity
Not Before: Jul 24 10:00:56 2026 GMT
Not After : Jul 25 10:00:56 2026 GMT
Subject: CN=f07a8eb897124ab4ac19c9f72b6bc6dd3da6da4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:0a:e4:b6:5f:bc:f1:2a:40:a4:85:17:a9:
c4:10:6a:00:a9:92:fd:35:4b:65:b7:f0:d3:39:e8:
d6:1b:f5:ef:7a:8f:87:ed:b8:3f:04:48:05:08:eb:
35:b9:7c:08:6b:44:10:23:2c:ec:4c:d3:09:fe:f3:
c8:63:c1:5a:61:ce:27:da:aa:c8:d6:e6:83:ce:22:
bf:18:ec:77:a5:3e:a9:52:8f:5e:29:86:d7:bd:86:
fc:22:d2:89:87:da:1a:e1:92:0a:17:13:87:1a:87:
da:cb:67:91:92:bf:07:a4:f0:06:14:08:40:67:1f:
46:31:e1:44:8d:8c:01:fa:3d:d5:b1:18:2e:1a:4f:
61:c1:00:e3:01:49:95:2e:35:73:ba:d4:6f:0f:7e:
a8:a9:ba:a6:24:6b:3c:31:93:fc:75:1a:ff:b7:08:
7e:2b:fa:19:bf:89:52:e2:a6:2c:63:34:93:11:3f:
04:8f:4a:0a:9d:44:a9:70:e0:38:e5:55:d0:77:a2:
fb:11:b7:c9:9e:80:a4:4d:ff:9f:f8:f6:b8:74:8c:
42:96:04:18:4e:b7:9f:67:4b:19:da:7e:48:e5:86:
de:c3:17:f2:f4:53:b5:34:9d:75:df:34:e6:8e:8f:
04:7a:b5:92:10:34:68:68:e8:10:84:43:27:b7:30:
51:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7A:8E:B8:97:12:4A:B4:AC:19:C9:F7:2B:6B:C6:DD:3D:A6:DA:4F
X509v3 Authority Key Identifier:
keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6b:97:3d:3b:87:fb:af:dc:e8:a8:b7:c9:06:4f:9e:a5:7f:
14:38:85:95:5a:26:58:db:72:8f:5d:06:4a:69:4b:fc:dd:90:
14:86:bb:47:e9:6d:d2:d8:d9:78:52:7a:1b:bc:cd:94:04:fe:
e4:46:78:13:5c:3b:a6:9d:10:b5:6e:11:bc:b0:31:34:3e:e7:
4d:c4:aa:8f:a8:4c:00:60:f4:f6:dd:9d:cc:c7:3f:57:67:ec:
5b:fd:13:05:6f:57:d8:98:44:d1:14:30:7b:1d:c8:7d:77:0e:
e2:8e:de:8a:03:78:1c:26:8b:ae:33:37:70:28:b9:51:d7:6a:
52:29:4a:44:e3:a2:83:e0:7b:d0:73:ab:35:e6:17:68:92:69:
12:64:d6:35:7c:08:4f:50:82:e2:dc:97:0a:4d:6e:5c:e6:22:
b3:ed:7c:ff:41:37:88:73:fd:ca:e7:66:81:5f:a4:9f:80:8d:
d1:1a:0f:50:73:bb:f7:b0:6e:31:32:89:62:05:db:e2:ab:12:
9b:d7:d2:05:e7:85:aa:53:79:ac:5f:75:45:ec:25:8c:1f:8f:
77:ad:dc:3f:8b:ce:49:05:3b:68:1e:7d:07:78:fa:b5:a6:63:
9d:50:79:66:9b:cf:b1:c6:5f:3d:04:93:16:3e:0d:1a:01:54:
49:b1:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:15 2026 by rpki-client