Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier: rNkp49tnWB9NP/j9lTsnPZqp1Jh6FSdtG3KQr9WMnyM=
Subject key identifier: 73:6B:44:30:E4:06:29:9D:9E:95:59:A5:3C:BB:2E:49:10:20:2B:06
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 019F8E6B9F7F5D45E2E833B9418D2A047C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number: 10EE
Signing time: Thu 23 Jul 2026 10:00:45 +0000
Manifest this update: Thu 23 Jul 2026 10:00:45 +0000
Manifest next update: Fri 24 Jul 2026 10:00:45 +0000
Files and hashes: 1: Q69BGamqP9_WoNnMCdnt1bm0Zuk.asa (hash: vaww5N01JjWWsrnL1Alu05fhe0e30iMVsw9GtNm8F+s=)
2: ecJkAb9L5BLrJG4sRdndteYMNv8.roa (hash: wE2gGvfsffXq2etxDqbfTLucpqrE1NBT6xi3whuXMTQ=)
3: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: p6hnhDJYbJcyjgvJJX9M+VvH/8Su0SzSjh5Zh4L2r84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:9f:7f:5d:45:e2:e8:33:b9:41:8d:2a:04:7c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Jul 23 10:00:45 2026 GMT
Not After : Jul 24 10:00:45 2026 GMT
Subject: CN=736b4430e406299d9e9559a53cbb2e4910202b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f8:03:de:43:01:ec:6b:0a:11:23:34:c6:4b:
b1:74:11:1c:f8:b1:43:ca:92:9e:a7:0c:d1:e6:0e:
ea:9e:11:55:ce:b9:d0:99:c1:24:d6:44:0e:72:56:
fc:73:2a:ae:67:20:37:51:a6:82:75:5a:92:d0:70:
ab:68:0c:72:63:3b:c9:9a:fa:f3:a6:79:3c:b6:46:
d7:90:85:75:1d:81:0f:d0:ef:73:a0:92:3d:c3:a7:
c1:89:94:c5:41:d0:2a:82:9c:19:71:89:2a:85:cb:
ae:fd:0f:55:81:a3:38:b9:54:fd:b3:10:d4:c1:98:
d6:cd:12:3e:a4:f4:00:fe:3e:28:f1:76:cb:72:57:
ba:fe:30:7a:0d:2a:31:4d:54:5c:e6:22:94:fc:20:
2c:70:f6:c3:0a:5b:9a:a8:f5:30:00:74:61:6b:5a:
73:2f:87:3d:50:b7:46:36:09:cf:8c:68:72:85:d6:
8a:42:d4:15:29:a6:4d:8e:ba:81:c9:46:42:36:45:
f2:48:40:9a:1e:3f:37:08:cd:7c:10:f9:58:5b:be:
cf:1e:0a:65:1f:dc:e3:c7:b3:8a:dd:ae:3e:3e:ff:
bc:27:1b:df:c1:a3:1d:f7:37:12:a1:be:a3:3f:e2:
b6:bb:01:44:91:17:d8:e6:7b:6c:52:81:54:35:e1:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6B:44:30:E4:06:29:9D:9E:95:59:A5:3C:BB:2E:49:10:20:2B:06
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:78:38:1b:ad:4e:2e:bf:a0:02:4b:68:80:91:b3:ac:7d:a9:
73:41:83:c1:09:62:74:4b:e6:a0:14:05:fe:27:34:43:3f:c9:
b0:cf:ae:d6:8e:56:28:82:95:cc:fc:9b:57:d3:ed:a6:3a:ba:
fa:b9:1f:f7:8b:bb:06:71:ac:d2:66:6b:0f:a1:fa:4c:f0:2e:
7b:c3:68:64:bb:19:bc:78:ec:f6:7f:a4:72:ff:75:6c:ae:55:
0c:da:14:c4:de:68:bc:f5:5d:d9:92:c4:50:9d:f3:54:9a:4e:
a4:26:ad:2c:19:99:97:d0:1b:96:6f:97:d7:be:5b:ab:9f:cd:
de:8d:0d:02:a6:80:bd:fb:2f:ef:c6:ae:06:fc:d1:50:ee:36:
81:3d:5d:a8:11:c9:fb:36:31:ed:ce:51:ee:81:9d:35:94:1a:
fa:c6:94:44:ac:ef:a6:c4:13:eb:42:b1:98:ac:f7:63:6d:58:
b6:cb:45:ff:36:44:3c:ad:a3:81:e1:67:79:10:30:38:1f:10:
03:b7:2e:78:32:2f:ac:a2:c8:0b:a5:48:8a:62:96:95:d1:13:
ff:fb:8e:ac:f8:1e:d6:7e:9f:1c:da:51:69:f2:45:0b:33:05:
fd:cd:80:e9:ff:92:05:eb:1e:72:ca:e6:5e:b4:32:a0:58:ed:
2a:1b:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:46 2026 by rpki-client