Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: ap4dbNmOLRJAQw7aSLTmLB3cybHdG3BW2rMVFghYK30=
Subject key identifier: 78:51:2A:EC:49:90:33:A1:30:D0:D0:FF:D8:39:4A:C5:2A:B2:56:51
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 019F90C83C724BB1392816B4E2513DF3D3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 19CD
Signing time: Thu 23 Jul 2026 21:01:09 +0000
Manifest this update: Thu 23 Jul 2026 21:01:09 +0000
Manifest next update: Fri 24 Jul 2026 21:01:09 +0000
Files and hashes: 1: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: XFGFxBkCyGQYgU7uTJqfuGhFw9WLAhnltIwtf/EJmcM=)
2: SZG8XeixTaqiVxW5rJUPZ8oUaFs.roa (hash: 1YSVd0Zexb+YYuPe7vCuTagdfSqZISFbptqFWf/HX9o=)
3: wpxxQF5AabypL-KTlSZ22CF0FgQ.roa (hash: LcmjGoMQfmQ0l8r/PAIze2pDnlI+sA44Nszwtlprn+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:3c:72:4b:b1:39:28:16:b4:e2:51:3d:f3:d3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Jul 23 21:01:09 2026 GMT
Not After : Jul 24 21:01:09 2026 GMT
Subject: CN=78512aec499033a130d0d0ffd8394ac52ab25651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:ff:3a:30:77:31:ff:a5:a4:c7:61:17:5d:
1b:8d:ee:13:b6:eb:83:06:81:29:0d:17:c5:4b:11:
dd:29:b8:c2:c5:b6:80:e5:89:25:fb:33:4b:6e:3b:
68:02:e3:0a:55:58:95:a6:cc:36:24:b6:55:c2:82:
8d:69:d3:49:3f:8e:53:1b:a9:06:f9:5b:8f:ca:12:
e7:0f:5e:aa:49:b2:24:b5:26:2d:02:d3:5a:d9:04:
3b:98:b4:aa:8d:98:37:c7:96:a3:07:e1:1d:f6:40:
38:ff:2a:48:c5:a0:23:e9:dd:55:5d:05:07:80:3a:
fd:07:76:8f:08:87:78:cb:f6:cf:2c:1a:19:75:ae:
00:68:b1:e7:00:83:62:ba:0f:7d:b5:9f:08:c1:46:
a6:bb:d2:6b:c3:70:1c:1a:df:c0:67:5b:d3:75:15:
54:58:25:fb:46:47:39:ca:19:66:79:49:42:83:91:
63:fd:a3:9d:01:13:40:99:5f:dd:ca:4c:68:83:b0:
bb:2e:55:55:c5:63:72:71:a0:bd:e1:28:f0:31:7d:
c1:42:11:83:df:f3:b9:06:aa:82:f2:c4:72:02:de:
ba:df:ab:55:48:b8:9c:88:ed:1f:50:c4:aa:60:cc:
3a:5a:73:b4:24:0c:70:62:d7:7b:2f:54:37:28:aa:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:51:2A:EC:49:90:33:A1:30:D0:D0:FF:D8:39:4A:C5:2A:B2:56:51
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:01:3f:a2:bb:ab:73:3b:30:32:db:5c:84:76:e5:6c:49:1e:
64:91:5a:ef:8b:f8:9a:78:80:21:d9:0e:82:bb:73:30:47:07:
ea:63:3e:ee:9f:34:c9:8d:b6:80:15:4e:6f:22:1e:2b:2d:e0:
c9:9a:6b:ec:64:51:81:6d:c2:53:2e:b2:bc:ab:08:71:a1:2e:
6b:ca:1c:19:40:63:93:af:a2:3c:fb:cc:ae:c8:41:69:48:3a:
74:7c:e9:73:cf:4e:ee:a1:2c:71:86:6f:97:08:08:49:1f:23:
78:19:64:14:3e:c7:0a:db:96:72:fa:7b:41:e5:e8:e7:ce:4a:
d2:15:a5:de:f7:b2:5a:38:61:14:18:bc:55:e3:c8:38:ba:b4:
f1:4e:60:57:ac:7b:2f:97:83:1c:65:c1:37:86:a1:1d:48:b4:
2c:29:68:ad:c4:9e:74:91:15:c1:48:49:5e:72:33:99:b9:67:
d4:0a:e5:dc:8e:b2:06:fb:a0:d2:b5:3d:11:01:41:45:b5:92:
38:99:db:6b:1c:61:c7:dc:db:c8:31:c6:8f:23:45:b9:c1:d2:
37:7a:a4:7e:b2:79:61:1f:42:6a:d9:17:5a:28:fa:cf:9c:9d:
54:c1:26:51:ca:5a:26:b5:bd:10:b3:82:9e:03:be:82:5e:29:
1c:14:a1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:58 2026 by rpki-client