Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: F4fwWe4yAxdoKtnu8ZmOpTgX73pO6nFE1LX26hs9SHM=
Subject key identifier: BA:6F:B3:7D:49:E3:BA:F6:14:A9:31:D3:AF:8D:EC:11:BF:3D:C8:A2
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 019F927FA059A03738C2C2724A8457D1B44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 05:01:05 +0000
Manifest this update: Fri 24 Jul 2026 05:01:05 +0000
Manifest next update: Sat 25 Jul 2026 05:01:05 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: pT0gTxB9ylfpT6PKStCWd2+vV6EPPbT78V7tHFzw8NE=)
2: YJGwIn3Hfn4CXGcIfF5Sqvh4L2U.roa (hash: bxowbJpolM8aC3Tyo8Qe1Sfr/zVg+4jTgjgqaAuFw7k=)
3: nSoKCh55lGMD-7gl54YUpZEK_XE.roa (hash: KtXsJGsRFXBW5jD73l5yCg/b8S+cXBnf2k08FtiPNjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:a0:59:a0:37:38:c2:c2:72:4a:84:57:d1:b4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Jul 24 05:01:05 2026 GMT
Not After : Jul 25 05:01:05 2026 GMT
Subject: CN=ba6fb37d49e3baf614a931d3af8dec11bf3dc8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:55:6d:48:40:ac:24:fb:d9:76:7e:66:c1:
bc:c2:c4:f1:6d:40:8d:23:42:6f:2e:9b:ed:62:47:
14:82:66:50:af:a9:38:51:f1:38:2f:53:1d:f0:8a:
ee:5b:14:9c:41:17:73:37:00:40:b0:83:43:55:4b:
4d:d1:8b:7e:39:a1:b2:57:8d:d2:14:70:29:17:57:
a8:09:45:45:01:9f:23:91:6f:aa:07:ce:d8:50:d8:
e5:cf:4d:33:6f:c1:97:eb:89:99:29:78:17:8a:47:
59:fc:90:7e:e2:53:86:c9:c4:2e:5b:34:0e:47:9e:
29:09:c5:db:46:00:92:3d:fb:7a:2c:99:eb:ae:0f:
92:8c:f7:0e:d0:26:48:5c:13:20:7f:03:bf:a1:46:
fb:4d:e9:45:fd:04:91:26:ae:b0:5a:73:83:4e:6b:
82:b0:f9:5a:96:59:c4:20:a8:0c:59:cc:11:72:80:
bf:c1:8e:4f:49:77:9d:14:b6:46:0f:0c:f8:16:09:
26:4b:ee:06:f6:5b:a1:69:ab:d0:68:ca:e8:4e:56:
48:06:2b:1e:3b:f4:48:8c:82:4f:6a:e7:56:c0:aa:
cf:66:2d:11:b1:6b:10:9e:51:dd:b1:f5:b8:b4:69:
dd:d1:9c:c3:10:4f:02:52:3d:72:19:8f:51:60:ce:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6F:B3:7D:49:E3:BA:F6:14:A9:31:D3:AF:8D:EC:11:BF:3D:C8:A2
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:22:59:1e:a7:94:3a:3b:05:9e:10:1b:54:86:a7:01:cb:75:
3e:ff:8b:31:ce:b8:99:55:64:0e:bc:05:54:14:fe:68:75:23:
22:01:72:0f:f3:9e:fd:79:ea:3d:6a:82:41:13:82:dc:e5:c2:
d0:5f:bc:5b:b5:ab:65:5b:97:ef:59:21:97:d3:88:92:2c:83:
73:9e:d2:f8:ad:bb:ea:7b:1d:1a:2b:a9:0e:72:bd:ee:e7:8f:
e4:35:1f:07:ed:7c:91:f4:f3:97:3a:b3:e8:ed:dc:54:48:6a:
51:3a:1a:fc:8a:00:08:0d:f6:77:6b:4c:29:78:b2:fe:ae:90:
d0:cd:74:69:c3:06:8d:70:eb:56:1d:50:e8:11:07:4f:cf:7d:
d9:66:70:5a:b8:d2:96:a7:23:3c:52:07:ef:59:99:f3:12:70:
7c:e5:67:0a:2a:5f:35:58:a3:a9:d0:a8:f6:53:ea:7c:77:d7:
da:24:0b:47:8e:e8:bb:32:cc:40:16:26:9e:c0:08:4b:a3:8e:
8c:7a:65:9c:38:03:40:51:e9:8b:47:7b:61:bb:c3:5a:4e:8d:
3f:15:02:af:84:bb:f1:66:68:06:47:46:bc:a5:07:ab:42:6d:
62:ef:64:a8:55:ec:2e:d7:44:12:b2:18:f4:2b:13:89:61:fb:
be:b1:c8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:33 2026 by rpki-client