Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
File: D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft (raw, json)
Hash identifier: /qicJqXkZ1HeILiVwOF8IpjEujcw4ESftP/Hpki4czA=
Subject key identifier: 7F:B9:B2:81:1E:E9:7E:11:A9:25:F2:A3:70:5C:7B:80:B6:20:43:48
Authority key identifier: 0F:A7:C7:D8:61:72:67:5F:78:E9:55:4A:D6:73:54:CE:BF:18:D2:90
Certificate issuer: /CN=0fa7c7d86172675f78e9554ad67354cebf18d290
Certificate serial: 019F8F7F3A7F5AFF9D83AF031E19200AD6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:47 +0000
Manifest this update: Thu 23 Jul 2026 15:01:47 +0000
Manifest next update: Fri 24 Jul 2026 15:01:47 +0000
Files and hashes: 1: 2UUE-Rf-2WGceuB-WkLEF7WoUTg.roa (hash: 4bgTyI2sRmPi6hIWWdFcnzZt2fLQPiRH1Jt4gV4iEG0=)
2: D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl (hash: buxxiYBnetZSL571YU2MIL0LNY99AKEwVLj7TnX6fpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:3a:7f:5a:ff:9d:83:af:03:1e:19:20:0a:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fa7c7d86172675f78e9554ad67354cebf18d290
Validity
Not Before: Jul 23 15:01:47 2026 GMT
Not After : Jul 24 15:01:47 2026 GMT
Subject: CN=7fb9b2811ee97e11a925f2a3705c7b80b6204348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3a:95:92:b3:c8:61:9e:46:6a:c1:2e:2b:c0:
26:73:20:f4:21:8c:dc:4b:95:60:2f:a7:df:82:1f:
2c:52:9a:5f:2f:b1:fd:2c:c7:68:fc:a0:d8:a8:ec:
82:9a:4c:e5:ff:c7:d6:68:f3:53:43:3d:58:d1:a8:
8f:97:ff:01:44:bf:68:ff:07:bd:c6:4a:8b:09:18:
c6:1a:ee:6c:60:76:16:05:b2:27:7d:f7:1c:14:03:
02:fe:91:70:03:bf:b7:81:aa:86:bb:34:fc:d1:0f:
2a:e3:72:cd:64:41:f4:58:0c:65:fb:af:10:0b:41:
75:19:8f:71:af:2d:27:1f:8a:f3:37:ac:8c:c6:f4:
36:2e:35:c8:b8:2b:bc:6b:39:90:fe:71:a6:ed:81:
9d:80:5f:97:aa:62:29:36:94:f2:7b:b6:61:91:e5:
b9:c3:b9:be:b5:22:fa:ef:21:6b:2a:68:86:e6:b5:
13:0d:9b:09:93:d0:dd:40:fe:46:ec:38:b2:3a:a9:
e7:ed:01:52:2c:83:96:e1:b6:09:a6:c8:09:3a:9f:
9d:2a:e5:1a:38:7b:80:4b:c5:85:8c:e5:27:c5:cf:
f2:cb:08:13:f4:08:76:50:9d:f1:9f:f9:ce:37:f8:
4e:9e:10:83:26:74:91:85:46:f1:bc:41:31:1f:76:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B9:B2:81:1E:E9:7E:11:A9:25:F2:A3:70:5C:7B:80:B6:20:43:48
X509v3 Authority Key Identifier:
keyid:0F:A7:C7:D8:61:72:67:5F:78:E9:55:4A:D6:73:54:CE:BF:18:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6fH2GFyZ1946VVK1nNUzr8Y0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e22192-be00-48c0-a711-7f96c9f05f54/1/D6fH2GFyZ1946VVK1nNUzr8Y0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:41:3b:99:59:cf:17:c7:30:55:d9:88:d6:4e:d0:5a:c0:a4:
52:e0:cb:94:7b:75:bc:79:ac:2e:4a:39:5d:d5:5d:ef:a8:46:
fa:ac:0b:2b:d8:17:9e:c7:4e:9f:f3:b6:01:a1:75:f1:02:cb:
5a:f5:0e:05:1f:2c:73:2b:17:f7:cb:f8:d4:3a:92:18:21:21:
7e:90:30:a8:04:41:54:33:3f:fa:0d:2e:91:bd:02:d5:90:8b:
b0:b9:28:1c:e5:f0:ef:a5:ee:fc:20:62:a6:51:8a:12:ff:a5:
df:19:53:cb:fa:15:fa:a1:f0:cc:75:34:f4:61:f3:19:25:e0:
48:d4:23:3f:90:f6:55:06:c7:be:6f:14:17:cd:3c:6d:74:10:
01:06:58:40:7e:a3:57:a5:89:7a:44:84:c4:74:b8:99:06:46:
2e:82:6c:79:b8:ea:0b:28:c4:70:0f:6e:27:42:c8:d7:ef:14:
12:2e:b7:48:fd:95:1f:88:dc:ef:f9:d9:d0:f4:52:a7:47:30:
95:90:9f:2d:0b:5e:f2:37:2a:ab:db:cc:e8:36:d9:f5:cf:4e:
07:01:61:22:5f:bf:52:39:c4:bb:b9:c2:09:fe:0a:42:0f:0f:
6b:43:e9:0c:95:59:0c:31:cf:23:12:e1:9d:64:7d:43:34:87:
58:5a:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:17 2026 by rpki-client