Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
File: fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft (raw, json)
Hash identifier: usdfz0UwyE/+Q74YnoSl9llcsK08XPF23nD4P852LF8=
Subject key identifier: 91:48:D2:08:DF:92:37:B4:EC:5E:28:0B:9E:BF:DB:E0:2A:3F:51:8E
Authority key identifier: 7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
Certificate issuer: /CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Certificate serial: 019F9059CEDCB90CAEBE40DF1D24063EF2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
Manifest number: 0D07
Signing time: Thu 23 Jul 2026 19:00:32 +0000
Manifest this update: Thu 23 Jul 2026 19:00:32 +0000
Manifest next update: Fri 24 Jul 2026 19:00:32 +0000
Files and hashes: 1: 2e8QyLYMT4HWwfUGaImHeP_tGTY.roa (hash: s9h03bDzb0Cy0LO5kY73K6dn/N9HUik5sgJSj+kQ3k8=)
2: Y28Wd-rLHaf4YfijKKoceP6pCO4.roa (hash: T4TEmypQSq/p5gS6mPa8ZhWCLwbTNsBlfya0BmZTPbQ=)
3: fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl (hash: d8Zem8ylo4UCABBudXH30OX4AfbWPcw5gIoyHHl+q+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:ce:dc:b9:0c:ae:be:40:df:1d:24:06:3e:f2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdc40c3dbdf819d7413e772bd875814c7eaf55e
Validity
Not Before: Jul 23 19:00:32 2026 GMT
Not After : Jul 24 19:00:32 2026 GMT
Subject: CN=9148d208df9237b4ec5e280b9ebfdbe02a3f518e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:85:4d:fb:11:3a:f9:67:3e:3d:1a:fa:e6:
9a:87:7c:03:4b:d0:04:4e:f4:e9:95:d0:f2:13:60:
86:91:0e:3d:a3:01:1f:56:16:e0:cd:0c:49:e7:f6:
ba:7d:67:b8:20:3f:ec:24:e3:29:5e:16:4c:a6:01:
0e:72:a5:53:f9:dd:a9:67:98:62:5a:d9:16:49:47:
2c:87:6b:a0:78:36:d8:b6:fb:cf:20:d6:9c:c2:eb:
b9:19:38:81:e9:6e:49:97:9d:8d:de:ef:ec:40:6d:
de:04:50:b5:e6:a2:7a:e9:dc:3e:5a:6e:9c:f6:4d:
b3:44:69:fd:64:17:ab:e0:22:dc:fa:7e:70:3d:f1:
90:e9:0f:85:f4:08:30:80:eb:98:1f:d9:0a:be:d7:
31:22:c3:55:77:2e:59:61:ed:bd:5c:cf:7f:3a:67:
2a:4a:da:45:42:38:be:08:8b:18:05:15:35:f5:3c:
4b:ef:44:1f:f5:ab:fd:a5:68:e8:c2:fb:a9:51:08:
04:dd:0b:15:40:64:02:f6:97:8d:59:74:21:9b:ce:
d5:49:ef:e3:7e:77:e1:82:64:b7:96:bb:8c:f1:de:
b1:fe:db:48:c5:0f:e2:22:1a:4f:17:ce:ae:fa:d0:
fe:59:ec:a7:5c:e8:d3:ba:f2:d0:63:76:d4:16:44:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:48:D2:08:DF:92:37:B4:EC:5E:28:0B:9E:BF:DB:E0:2A:3F:51:8E
X509v3 Authority Key Identifier:
keyid:7C:DC:40:C3:DB:DF:81:9D:74:13:E7:72:BD:87:58:14:C7:EA:F5:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNxAw9vfgZ10E-dyvYdYFMfq9V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/2e543d-4ef7-4e85-867a-99f2004659d1/1/fNxAw9vfgZ10E-dyvYdYFMfq9V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:aa:65:27:24:5d:f5:4e:c7:52:5d:c3:95:a4:19:69:76:5f:
41:e0:19:6a:04:13:cf:cc:07:d6:97:20:b7:c7:da:12:5c:a1:
24:61:ea:38:a1:31:b3:fe:38:1f:52:0e:1c:cf:01:e7:94:21:
6f:40:a3:c4:82:91:d3:74:7a:8a:f5:1e:2c:2f:6a:72:c8:f5:
3b:5d:d7:23:22:2b:dd:4f:8b:de:72:33:c1:d5:1d:80:8e:16:
69:76:df:de:28:39:39:5b:8a:bf:47:7c:d0:ff:e2:70:72:ed:
ae:7e:52:51:00:3d:d4:35:ad:82:10:e3:9a:dd:eb:73:9b:b4:
e6:6e:96:e1:b4:7c:40:93:e1:49:80:b0:a4:81:54:0c:37:a0:
5f:5c:06:6d:6e:e1:48:4f:41:34:d7:3e:89:87:49:e5:5e:b0:
eb:50:12:c2:d8:02:4f:23:1a:1a:45:2c:2c:1b:85:f5:f5:b9:
ef:22:ea:ea:7b:4e:20:0c:0a:da:72:11:dc:7f:3f:d4:0e:92:
f0:f9:81:d4:92:74:74:3e:a2:ce:c4:7e:fd:98:9d:29:8a:61:
52:e1:9c:07:e5:17:50:8f:a0:8b:02:c2:38:75:f8:f4:fd:07:
cc:8c:09:e8:69:b6:28:02:e2:f5:6a:b9:01:b0:18:13:e9:82:
da:78:87:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWc7cuQyuvkDfHSQGPvLSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZGM0MGMzZGJkZjgxOWQ3NDEzZTc3MmJkODc1ODE0Yzdl
YWY1NWUwHhcNMjYwNzIzMTkwMDMyWhcNMjYwNzI0MTkwMDMyWjAzMTEwLwYDVQQD
Eyg5MTQ4ZDIwOGRmOTIzN2I0ZWM1ZTI4MGI5ZWJmZGJlMDJhM2Y1MThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnOFTfsROvlnPj0a+uaah3wDS9AE
TvTpldDyE2CGkQ49owEfVhbgzQxJ5/a6fWe4ID/sJOMpXhZMpgEOcqVT+d2pZ5hi
WtkWSUcsh2ugeDbYtvvPINacwuu5GTiB6W5Jl52N3u/sQG3eBFC15qJ66dw+Wm6c
9k2zRGn9ZBer4CLc+n5wPfGQ6Q+F9AgwgOuYH9kKvtcxIsNVdy5ZYe29XM9/Omcq
StpFQji+CIsYBRU19TxL70Qf9av9pWjowvupUQgE3QsVQGQC9peNWXQhm87VSe/j
fnfhgmS3lruM8d6x/ttIxQ/iIhpPF86u+tD+WeynXOjTuvLQY3bUFkSR5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFI0gjfkje07F4oC56/2+AqP1GOMB8GA1UdIwQY
MBaAFHzcQMPb34GddBPncr2HWBTH6vVeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk54QXc5dmZnWjEwRS1keXZZZFlGTWZxOVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yZTU0M2QtNGVmNy00ZTg1LTg2N2Et
OTlmMjAwNDY1OWQxLzEvZk54QXc5dmZnWjEwRS1keXZZZFlGTWZxOVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yZTU0M2QtNGVmNy00ZTg1LTg2N2EtOTlmMjAwNDY1OWQx
LzEvZk54QXc5dmZnWjEwRS1keXZZZFlGTWZxOVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA56plJyRd
9U7HUl3DlaQZaXZfQeAZagQTz8wH1pcgt8faElyhJGHqOKExs/44H1IOHM8B55Qh
b0CjxIKR03R6ivUeLC9qcsj1O13XIyIr3U+L3nIzwdUdgI4WaXbf3ig5OVuKv0d8
0P/icHLtrn5SUQA91DWtghDjmt3rc5u05m6W4bR8QJPhSYCwpIFUDDegX1wGbW7h
SE9BNNc+iYdJ5V6w61ASwtgCTyMaGkUsLBuF9fW57yLq6ntOIAwK2nIR3H8/1A6S
8PmB1JJ0dD6izsR+/ZidKYphUuGcB+UXUI+giwLCOHX49P0HzIwJ6Gm2KALi9Wq5
AbAYE+mC2niHAQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:53:10 2026 by rpki-client