Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: eRtYo9Uc1X49ANvB26IZHkTaqG12ftYBNsJCpHiuiRY=
Subject key identifier: B0:D6:63:71:D8:20:1A:D3:80:52:42:C1:A0:80:77:06:04:83:C3:DE
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 019F946DFD72144BF7674919699389F5E0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 19E0
Signing time: Fri 24 Jul 2026 14:01:03 +0000
Manifest this update: Fri 24 Jul 2026 14:01:03 +0000
Manifest next update: Sat 25 Jul 2026 14:01:03 +0000
Files and hashes: 1: DszWoqmG0YIHoueHjWKPKymZuic.roa (hash: a/AiCmPeqXPt0J3j9Logjd5trMJCl8VjFbnLjo6iufM=)
2: E4NAfEwW3jbfNnqs4s6wX2om-oU.roa (hash: fdTtA83SV7tJMvW5toFMANKX74HjpiK+6fBeEianyoA=)
3: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: 8DXcuCKG+l5sf0YJTlsPI0nqhGwWjXyVwDzYknUrfVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:fd:72:14:4b:f7:67:49:19:69:93:89:f5:e0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Jul 24 14:01:03 2026 GMT
Not After : Jul 25 14:01:03 2026 GMT
Subject: CN=b0d66371d8201ad3805242c1a08077060483c3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:2a:92:81:9b:31:d8:c8:b2:08:7b:4a:93:
d0:26:ce:12:26:b8:dc:da:1c:e1:e1:ba:3b:65:f8:
e8:ba:97:b6:09:f5:ec:78:b6:bc:5f:ef:a2:7b:3a:
4c:59:eb:b1:d3:10:54:e0:dd:8f:44:8c:48:24:6f:
86:66:6c:53:39:da:5f:9f:03:16:c8:bc:ef:c9:24:
af:d8:d5:e9:a4:24:cf:fc:10:4c:3d:88:36:1f:35:
b9:77:46:13:e9:1f:14:81:38:9a:a7:95:74:3a:7c:
f1:93:e7:47:84:3d:d7:b4:5b:61:55:86:7a:97:8b:
91:b2:e0:84:42:21:d9:ec:a6:83:98:9b:cc:21:1f:
e3:de:9e:5b:91:0f:35:26:5b:47:d1:e6:84:6c:91:
3c:06:5a:6c:3c:52:fd:90:88:f7:dc:b4:83:2e:d2:
e3:ae:2f:80:93:e7:aa:0e:6d:bb:09:5d:80:58:59:
7a:3c:1e:64:d5:da:31:5a:a2:f0:a9:ae:f9:e8:c6:
41:f7:8a:0e:4a:13:f2:6d:ef:f4:10:6b:d6:09:3e:
81:19:47:e8:32:c0:4d:08:02:d0:a6:cb:a9:29:ee:
a1:7c:00:4a:f9:ce:af:72:5e:41:0a:e6:16:98:2f:
ab:d4:62:54:4a:bb:5f:21:20:d1:cb:d7:74:2d:3d:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D6:63:71:D8:20:1A:D3:80:52:42:C1:A0:80:77:06:04:83:C3:DE
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ac:4c:0b:28:33:bc:6e:a3:2f:27:eb:3e:17:32:26:9d:40:
a8:05:8a:a3:da:ec:86:c4:76:f0:b6:28:a5:22:67:42:83:b0:
ef:b4:48:fe:7f:41:b6:b1:e3:7c:68:b0:70:cd:12:2e:39:46:
19:86:44:f3:16:b7:83:10:c2:5d:82:22:71:9f:c9:63:2f:e8:
32:57:d9:7d:18:4e:e7:8a:f0:0d:d4:6b:9f:0e:09:0c:4c:98:
c7:df:39:77:59:b5:56:31:48:11:83:ec:46:5f:b0:a2:d5:e5:
14:8a:a1:75:21:bf:51:42:53:ba:38:0c:b8:aa:18:85:c8:ed:
65:0f:0b:60:0b:9f:41:2b:bf:62:dc:37:a3:f0:5d:e5:ff:62:
9a:a0:fd:5e:5d:97:1f:d3:1a:e1:86:4a:ac:a5:27:07:b0:f7:
85:25:d4:c9:c1:63:49:49:48:d7:86:4c:af:da:aa:48:2b:d2:
fd:44:a4:38:66:63:95:06:c4:e8:1d:11:35:38:de:95:7f:3e:
53:a7:24:ee:1a:83:35:ec:93:f8:aa:fb:e5:38:70:de:30:56:
49:88:9d:22:02:e2:68:3a:9c:49:36:4b:b6:95:3d:b3:49:3c:
57:14:01:de:20:7e:fc:b2:af:b0:62:a7:66:8e:ea:75:f0:20:
19:d0:df:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:01:42 2026 by rpki-client