Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: zTYFjAWzPjINfpNoijnldtr7ImkvPegUzZqp0jAPdoI=
Subject key identifier: 49:2C:35:21:67:E3:FE:F8:5C:0C:1F:19:8E:7E:E6:C4:CF:31:04:75
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 019F92B67128E206A93A7C753AEF88258079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 100B
Signing time: Fri 24 Jul 2026 06:00:57 +0000
Manifest this update: Fri 24 Jul 2026 06:00:57 +0000
Manifest next update: Sat 25 Jul 2026 06:00:57 +0000
Files and hashes: 1: E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa (hash: A+TYWIOmRpCeA175k18MhvZXgytX5Jk9nQ0FQ6VBaqA=)
2: Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa (hash: JfuU3qW2LSn3VZ4RrrVe6pLBVqp+kUuKYjX2iO0ocCI=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: lZk8uRaJRFI+PlDTr3goPoW8EbIEPUp8PgpABBdL/Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:71:28:e2:06:a9:3a:7c:75:3a:ef:88:25:80:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Jul 24 06:00:57 2026 GMT
Not After : Jul 25 06:00:57 2026 GMT
Subject: CN=492c352167e3fef85c0c1f198e7ee6c4cf310475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:a5:19:a7:2d:d5:80:94:65:82:9c:42:31:
a9:87:98:63:b0:14:6c:f5:df:4d:48:d3:67:c1:d4:
73:6d:f6:c5:47:23:fc:77:56:1d:57:e8:5a:a6:dd:
fd:ad:d2:ba:65:de:d1:5d:38:d5:ec:ab:67:84:f0:
d4:2f:d9:6e:b1:ff:1c:af:e2:6a:56:f9:e0:49:d6:
3f:f9:08:1b:2c:c8:46:40:ce:78:bc:4f:b6:ae:04:
18:35:4f:6b:0d:f4:c3:d2:59:4d:db:6c:1d:6e:09:
3e:79:3b:d0:cb:58:6b:25:0c:55:e0:6f:c3:9f:5f:
5c:f1:03:33:98:80:cb:c6:7e:dc:95:8a:42:8c:bf:
ce:08:ba:b7:6b:e9:f5:96:7b:af:ef:43:47:9c:0e:
9e:2e:9e:dc:1b:75:58:d8:88:a1:7a:f4:c3:01:55:
c7:12:38:1b:b3:48:50:05:87:62:54:4a:a7:e1:6f:
70:09:f7:e1:7c:b1:f0:62:f3:75:f7:22:28:76:55:
94:85:b0:61:91:dc:07:e0:bb:50:53:3a:5d:00:90:
b3:e1:81:56:05:73:d3:53:a8:a5:1d:14:84:71:8a:
e4:5f:62:6c:39:f7:16:0b:d3:77:de:f3:66:c9:a1:
06:72:9a:90:75:b3:5d:b3:e8:e0:07:fb:8f:8d:2a:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2C:35:21:67:E3:FE:F8:5C:0C:1F:19:8E:7E:E6:C4:CF:31:04:75
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:37:0b:f9:96:8a:45:60:22:9d:39:00:c0:48:1f:f0:e5:da:
59:09:8c:1c:4a:a4:ba:38:54:51:84:c0:0a:56:d7:a5:62:8d:
fc:1f:f2:ea:dd:58:37:12:61:e9:67:af:d9:83:e4:91:fa:d7:
62:e0:73:29:f5:b3:95:d5:5d:b8:3d:e4:d0:f2:06:ff:94:a1:
0a:e4:24:2b:a9:77:6f:16:ae:01:54:c7:cf:85:dd:da:1c:4e:
2a:eb:97:e0:27:5a:f8:95:53:b1:83:15:ec:ff:ea:53:6d:f9:
4c:0d:a1:f4:72:1c:c0:db:eb:36:94:9f:e8:23:e8:46:a7:3b:
73:4c:9b:7d:21:8a:bc:d8:a5:e8:a1:d9:bc:d3:d1:aa:82:35:
95:2c:bf:e7:13:43:8f:b6:51:b3:7e:80:20:3f:4c:f7:c9:65:
6f:df:83:1c:e7:af:d6:7a:c1:77:07:1f:26:73:b5:51:7b:1d:
8f:25:cc:53:1e:a2:5d:8d:54:e7:48:0a:e6:55:d2:f1:13:06:
ba:84:e1:b2:81:3a:87:29:f0:d8:2f:df:b4:5d:9c:eb:b8:10:
fe:0c:d7:8b:96:6e:6b:aa:e9:f4:3b:cb:4a:29:cc:a0:f5:83:
58:9b:dd:39:16:2c:e9:47:97:6c:db:bb:c1:10:14:48:37:65:
45:21:1f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:59:42 2026 by rpki-client