Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
File: f9gGjnNZlrir5x24LODWupZcJTs.mft (raw, json)
Hash identifier: 4W10AWWcaZO9GxCvS5vr834gwaFIygZFueXWQpoyvus=
Subject key identifier: FC:FE:04:77:64:4F:62:64:BB:F8:EB:D2:B6:19:50:8F:66:EC:EA:EE
Authority key identifier: 7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
Certificate issuer: /CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Certificate serial: 019F8F46FBE1642766AEC354B6F1AF31BC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
Manifest number: 01A6
Signing time: Thu 23 Jul 2026 14:00:21 +0000
Manifest this update: Thu 23 Jul 2026 14:00:21 +0000
Manifest next update: Fri 24 Jul 2026 14:00:21 +0000
Files and hashes: 1: 4wayKTDL0C1-3fX0fDk8_7nVVzE.asa (hash: vPLSw9x0tUrEHh7KFV3i9yLuIjiZTpCl5KAxhMoqI9Y=)
2: FL1sqcRejDIMSh0sMhL_ZqJw4wM.roa (hash: cBRPTc3S/Wcw8/oeYxpadl2du6Hf1WSqA+6+KI3HY8o=)
3: f9gGjnNZlrir5x24LODWupZcJTs.crl (hash: gQDVsQzzPjPYehm1n3YFrEVp+9ZNUcrm3s4mQ1WXxi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:fb:e1:64:27:66:ae:c3:54:b6:f1:af:31:bc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Validity
Not Before: Jul 23 14:00:21 2026 GMT
Not After : Jul 24 14:00:21 2026 GMT
Subject: CN=fcfe0477644f6264bbf8ebd2b619508f66eceaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:18:c0:d5:55:c4:da:c0:57:dd:54:ba:cb:
77:64:cb:83:88:a6:74:61:89:45:a9:89:4f:85:02:
55:dd:2d:ea:23:53:2c:33:6f:a2:2a:dc:dc:b4:14:
47:62:c2:5b:4e:f8:da:4d:44:35:11:f2:81:f3:e2:
9f:05:ba:25:11:a5:21:ea:ce:72:df:cb:86:db:40:
6c:1d:ae:ef:5a:99:d8:d1:fe:d5:34:09:0e:fa:8e:
78:7a:2e:07:35:2a:b5:b2:9e:12:94:93:d3:9c:ef:
3e:93:d4:2c:e0:40:d9:0d:02:d6:90:3e:80:32:b4:
10:c2:45:5e:6f:2a:48:96:11:27:83:3b:43:81:d2:
a0:68:af:a7:28:c8:5d:13:c4:d6:d8:8e:5b:73:1f:
50:66:fc:93:eb:fc:06:f7:a0:a5:7b:91:d4:15:e2:
19:92:50:f8:e7:1d:34:fa:71:41:fe:c7:88:8b:61:
45:18:6b:b7:7c:15:77:ad:84:cd:a8:1b:8e:96:11:
83:e9:3a:e6:c6:c1:5d:0a:78:94:e0:2f:22:de:89:
5d:fc:a3:e8:f2:07:da:5f:ae:d3:42:71:d8:50:f1:
47:7d:2d:54:49:a0:09:7f:04:23:2c:23:7d:96:07:
54:b8:b9:bb:2f:51:eb:d7:ae:c3:81:d7:11:6e:d2:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FE:04:77:64:4F:62:64:BB:F8:EB:D2:B6:19:50:8F:66:EC:EA:EE
X509v3 Authority Key Identifier:
keyid:7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9d:a8:1d:88:f2:74:f9:4d:2d:97:96:02:de:f0:86:2a:20:
7a:47:b1:79:aa:87:43:5c:4d:f3:81:86:01:30:50:b0:4a:f6:
13:4a:e8:4f:b1:53:3c:3d:3d:08:a8:f7:85:2a:6c:19:b4:ae:
90:54:4a:1f:63:3e:1e:c6:48:f0:30:22:33:88:a0:3a:9a:9c:
c6:c3:ba:b2:98:7d:28:2b:30:05:dd:c2:89:fd:66:ef:9b:fb:
81:84:08:22:5f:e1:e2:34:1e:03:cc:dd:a6:6d:76:81:07:24:
d9:97:ae:c5:ef:58:6c:a1:78:6e:48:0d:85:59:d2:ed:10:6a:
34:ca:3b:fe:3d:b5:e5:e5:e6:33:bf:3c:93:e3:44:33:05:59:
7d:66:23:65:41:59:c4:05:0b:52:76:42:4b:62:7c:03:35:76:
b1:9b:02:7d:a8:a9:83:98:31:b7:51:f3:af:74:2b:9e:b1:6a:
59:61:31:57:ae:61:29:49:c8:10:5d:f9:9a:b3:7b:f5:3e:7a:
86:53:ca:3d:8d:de:b0:20:f3:5d:90:62:80:c6:bc:6d:f5:83:
48:bb:e1:a8:18:f4:b4:1a:32:8d:14:9b:61:ae:48:e1:84:24:
05:f2:82:c9:a0:d4:2d:2b:67:90:2b:a0:5a:dd:0b:50:95:7e:
db:da:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:08 2026 by rpki-client