Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File: FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier: WzufItSG9qNNEsvyt4zngAdBgzKFjQZ4XvRJwY+MviI=
Subject key identifier: D3:7C:02:3B:CA:C2:91:17:27:3D:A6:AF:8C:81:E5:EE:F2:F9:44:D1
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial: 019F91A3CB270B5EB69B09CBC32CF6005DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 01:00:58 +0000
Manifest this update: Fri 24 Jul 2026 01:00:58 +0000
Manifest next update: Sat 25 Jul 2026 01:00:58 +0000
Files and hashes: 1: 6MT8gBwfYHWN7Sq2KVrJZlNQ-Ps.roa (hash: DvaijMExSYKtFCkDw2S7VYWVS8RZwCohsUuXaIZZ+u0=)
2: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: ApwX2MlITpvL3Cf9MENoVhbWZuYPM1ob6HoGHlYmN7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:cb:27:0b:5e:b6:9b:09:cb:c3:2c:f6:00:5d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
Validity
Not Before: Jul 24 01:00:58 2026 GMT
Not After : Jul 25 01:00:58 2026 GMT
Subject: CN=d37c023bcac29117273da6af8c81e5eef2f944d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2c:5c:26:bd:9c:ee:2a:fe:d6:94:d3:0e:20:
e6:d4:99:d7:9e:13:6a:58:72:8e:4b:66:98:f5:b6:
d5:c8:61:04:4b:74:18:31:f5:b0:ae:69:df:c8:dc:
f3:3e:f0:38:ed:ee:da:d9:33:cb:5c:28:19:4f:a5:
eb:02:5d:e7:2d:85:49:f6:8f:ac:9f:11:62:0f:58:
a8:3b:28:41:64:cd:69:2b:48:4d:5a:d1:72:1b:d8:
77:f1:ca:a3:41:3d:49:fc:43:32:9b:30:2f:ed:98:
d6:30:23:82:d0:05:6a:c9:24:ab:2a:0b:27:e4:97:
64:17:1f:d4:3e:6b:85:db:ff:f3:f1:00:57:ed:8d:
bb:76:d5:28:c9:36:5d:02:8f:d9:5d:e4:7b:6e:73:
06:07:9c:a5:3f:e9:d5:6a:58:c4:eb:6a:60:aa:fa:
32:01:60:db:08:a6:2b:01:28:94:57:99:18:d9:fb:
16:76:c3:cf:40:b6:48:c4:a8:23:10:af:50:64:55:
66:03:c5:02:67:48:e6:7e:06:dc:45:a4:cd:5c:70:
a7:5e:60:64:7a:1c:e2:e0:51:6c:61:e1:d1:65:f9:
93:a7:1e:c4:a2:b6:94:cf:af:7f:2b:19:78:8a:d1:
88:43:06:9e:83:8f:8d:9f:51:5f:00:59:a7:1a:32:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7C:02:3B:CA:C2:91:17:27:3D:A6:AF:8C:81:E5:EE:F2:F9:44:D1
X509v3 Authority Key Identifier:
keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:39:0d:83:92:96:8d:6f:76:09:3b:7a:25:05:41:7c:15:3c:
07:1c:6d:47:bb:bb:02:af:7c:46:b8:46:98:6a:00:dc:db:84:
6a:82:f9:0c:58:60:a8:1a:bf:f3:31:ea:f8:2b:b4:bd:fb:33:
04:86:04:4e:63:1d:bd:ae:3b:13:77:42:97:82:12:61:6a:55:
69:9c:2f:53:6c:d1:ba:b7:dc:b9:28:69:2e:b0:12:dc:87:e2:
d6:37:81:2c:9f:03:e3:9a:4d:e1:c4:70:61:d3:a5:86:92:d0:
ae:2d:e3:ff:d6:c2:ab:f3:50:2f:77:42:bc:58:e0:bd:2e:dd:
52:fd:9a:ec:0a:7a:7a:8d:01:bb:4c:47:a8:c1:ba:a5:67:0d:
27:87:fd:9e:96:ff:f4:d0:44:9e:fa:8a:eb:37:a8:1f:bb:cc:
5e:b1:3c:4e:9f:0a:6c:9e:4e:c1:d8:34:10:b3:2d:cc:6a:52:
5a:e5:a2:b4:bf:93:9b:5c:17:85:13:b9:1e:a9:a4:bb:da:d0:
74:7c:91:fc:9e:89:44:03:46:3f:78:0a:fe:e3:80:ef:7e:cd:
04:db:f8:eb:b2:26:41:e7:7d:c6:43:d9:eb:60:83:ec:fc:6e:
90:91:eb:db:75:1f:03:1d:84:7c:d1:7f:a8:c8:40:50:be:9b:
09:6c:13:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:53 2026 by rpki-client