Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
File: FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json)
Hash identifier: atOys2OQBLeISvJSrv9zoAcvz5vEBfuUSMlQTHGgTnE=
Subject key identifier: A7:D9:B1:DB:98:F5:BA:01:59:68:74:EB:67:BD:A6:3E:46:55:24:B7
Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Certificate issuer: /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Certificate serial: 019F92480F1F00E8F0867DD874DA6F1174B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
Manifest number: 1956
Signing time: Fri 24 Jul 2026 04:00:23 +0000
Manifest this update: Fri 24 Jul 2026 04:00:23 +0000
Manifest next update: Sat 25 Jul 2026 04:00:23 +0000
Files and hashes: 1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: Ad8dzJszRjDks6wxNxWXPTvHSBanMHIX+LkFKeduaP4=)
2: i34QcCXHBTz4i7dARxhxMvU6cMI.roa (hash: cLmYe2PhCggVytEcDwfmBz/hTRq+Jq4kQ9LDTbCEPVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:0f:1f:00:e8:f0:86:7d:d8:74:da:6f:11:74:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Validity
Not Before: Jul 24 04:00:23 2026 GMT
Not After : Jul 25 04:00:23 2026 GMT
Subject: CN=a7d9b1db98f5ba01596874eb67bda63e465524b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8d:8f:f6:16:69:73:67:62:88:6c:db:71:fd:
49:17:c0:4a:7b:e4:fa:9e:5a:dd:e4:d4:0c:f9:ad:
f3:74:4a:5e:4a:94:c8:0e:70:3f:f3:d0:2f:6a:d2:
2d:4c:88:c5:19:4a:fa:17:e7:9f:b4:d6:63:a6:70:
05:20:bb:ca:98:bd:e4:91:84:48:92:2a:9c:67:0b:
4b:77:6e:4f:67:f3:60:8a:ef:a6:12:3f:f9:dd:08:
12:0e:2f:68:ac:66:30:b0:53:b8:52:ab:ef:fa:83:
53:59:08:af:eb:b8:3c:82:2c:bf:d2:b1:c0:a5:72:
5b:51:1d:64:1f:58:56:fb:7f:bd:d9:09:59:16:9d:
19:e8:74:61:cd:9a:de:d3:ec:f7:85:84:b1:37:2c:
81:4e:ca:22:9b:76:87:49:2a:94:5a:e1:fa:ec:f0:
a3:94:44:60:bf:b4:01:33:6e:94:b4:c8:8e:4e:39:
93:bd:af:ff:c2:8b:9f:99:33:e7:53:ac:98:46:8f:
6d:19:79:fc:8a:e1:74:8e:11:24:87:bb:81:4f:f1:
4f:a8:18:7e:48:cf:d2:d6:7c:3d:9c:fe:b6:d3:a7:
14:e7:a1:4f:b1:2c:23:44:e8:85:9b:4d:5c:71:b3:
70:ec:d4:47:c8:25:72:5d:59:77:f7:5a:c3:63:87:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:B1:DB:98:F5:BA:01:59:68:74:EB:67:BD:A6:3E:46:55:24:B7
X509v3 Authority Key Identifier:
keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d8:40:96:ee:46:a9:08:1e:c1:c8:38:5d:d4:35:2e:b3:17:
ca:e6:f9:de:5b:d2:b8:0c:e9:ba:33:2c:ef:bb:a4:ee:ec:57:
ce:a1:11:4b:16:51:86:3e:24:1e:c0:93:b5:39:c8:20:61:c1:
48:b2:26:6f:03:5d:32:34:4e:4f:db:ab:78:c0:63:be:dc:e4:
ab:51:63:a2:87:3d:0d:49:c2:c5:41:9b:7b:48:4f:a5:68:2c:
48:32:56:c1:4b:c7:92:a1:a5:d4:e6:e5:db:a7:08:78:26:6b:
7d:16:eb:b7:db:5b:1e:f1:8c:70:0a:be:27:19:60:12:a0:79:
b6:b1:2c:d3:4f:14:49:14:c9:7c:15:0c:8b:19:d5:cf:68:58:
5a:92:ea:e3:53:10:07:ce:20:09:f1:a6:51:5d:5b:41:ef:7f:
44:e0:8f:f4:fb:80:bd:6d:ff:9f:72:68:df:45:f3:d1:99:24:
bd:8e:33:21:b9:24:21:94:5d:8f:26:7c:94:ea:c3:b5:ce:e7:
47:f8:4d:f4:96:98:1e:a6:b1:18:56:f6:b8:07:ed:c3:bf:8d:
7c:f5:1b:76:77:97:9b:f9:85:67:b0:5f:3a:30:17:11:9c:fa:
5b:dd:b5:2e:45:9c:90:c4:8e:40:27:be:50:45:a3:f5:e8:a2:
00:d7:69:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:25 2026 by rpki-client