Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: M/pEeyF8i+7nuLttiEiKCka/7ciP75zWY59BAhaqsW4=
Subject key identifier: D8:05:D0:E9:61:95:A5:A1:48:72:7A:7C:6C:3F:4B:3A:15:1E:91:58
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 019F927F17EE03F6378C2360BEA2E45AD8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 19DF
Signing time: Fri 24 Jul 2026 05:00:30 +0000
Manifest this update: Fri 24 Jul 2026 05:00:30 +0000
Manifest next update: Sat 25 Jul 2026 05:00:30 +0000
Files and hashes: 1: DszWoqmG0YIHoueHjWKPKymZuic.roa (hash: a/AiCmPeqXPt0J3j9Logjd5trMJCl8VjFbnLjo6iufM=)
2: E4NAfEwW3jbfNnqs4s6wX2om-oU.roa (hash: fdTtA83SV7tJMvW5toFMANKX74HjpiK+6fBeEianyoA=)
3: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: BKfXmN0+KkrAWnnp7jU4Ob1rTLjryWTJCzveHdErPys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:17:ee:03:f6:37:8c:23:60:be:a2:e4:5a:d8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Jul 24 05:00:30 2026 GMT
Not After : Jul 25 05:00:30 2026 GMT
Subject: CN=d805d0e96195a5a148727a7c6c3f4b3a151e9158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:07:33:2a:01:30:59:43:df:62:16:a7:19:
c6:a2:fc:cf:cb:b6:66:05:4d:78:07:42:96:58:77:
b3:62:ce:03:07:59:60:4f:3e:26:3e:ee:05:b6:2b:
95:9b:fe:f1:1e:b0:b2:67:be:f3:91:3d:7b:9b:27:
73:b1:ca:5c:c9:7e:44:3b:75:d3:86:cb:39:ed:2c:
80:91:44:0e:19:61:f7:99:43:0e:5c:84:ce:f1:be:
19:62:c0:b6:78:4a:0b:00:fc:dd:19:d8:94:4c:45:
3c:72:97:f1:d7:ac:71:5c:d1:2d:41:b5:94:69:2e:
4d:38:99:26:9c:b5:d5:ba:d7:8d:7a:db:9e:02:23:
f5:d6:9c:0b:31:31:15:e7:68:1f:89:ea:45:a0:65:
71:bd:dd:24:ac:31:cb:ff:bc:d5:01:a6:6b:a5:70:
9e:b3:0d:a8:21:18:0d:a4:ea:cf:95:70:f2:38:ff:
cf:79:1e:23:27:7e:bd:ee:7d:29:34:b1:38:ea:14:
e1:8e:de:60:45:87:c1:c4:e7:ba:59:08:ae:71:99:
0a:9a:6c:79:fc:bf:bd:f7:8d:0e:e9:30:82:69:a3:
63:ef:e9:f9:15:a9:5f:07:c8:8b:85:fb:dd:d3:84:
50:3c:2a:f9:fe:47:cf:2d:04:63:1b:f9:c4:1e:f6:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:05:D0:E9:61:95:A5:A1:48:72:7A:7C:6C:3F:4B:3A:15:1E:91:58
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7f:c8:76:8b:b3:02:8c:00:23:8e:a7:c5:2c:60:ec:b3:60:
b0:b8:c6:5c:36:ad:75:00:5e:25:14:6e:9a:78:f4:1f:fa:c6:
d2:7f:a8:c3:df:31:82:e2:4f:23:50:93:6e:58:a4:3b:cd:2f:
18:3f:a9:ac:59:08:79:d7:e6:54:5a:0e:c1:9d:96:65:38:63:
8e:08:89:c1:3f:23:f7:b5:e4:cb:32:fa:3e:7a:79:cb:17:d8:
fb:42:64:59:1f:be:2f:84:a8:28:ed:c7:0b:81:16:62:c7:e4:
c7:d1:a4:86:1c:8e:b0:d0:ae:7c:70:72:ed:b1:f1:28:d8:f0:
61:70:d5:b2:4d:fb:64:eb:b1:a2:18:4b:30:14:b6:5e:28:8f:
7f:ab:82:57:d3:8b:5a:e7:17:1c:6b:f6:83:5c:15:52:dd:b3:
e9:b0:b6:f0:d5:be:00:89:9e:9c:8c:63:b3:98:01:28:64:d3:
dd:32:f9:cc:3e:84:0f:a2:5e:7b:1b:e9:9b:ad:75:40:03:b9:
b6:86:42:80:41:d7:e4:80:06:c9:92:b2:13:49:cc:16:09:06:
14:e7:30:ed:68:8b:2f:98:b0:f8:4f:96:a3:8b:92:03:2d:d2:
16:66:b2:7a:61:7d:a2:b0:8d:d7:e2:16:8b:bc:85:4f:be:dc:
7f:69:fe:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:36:59 2026 by rpki-client