Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
File: fKWYMippkFpcbgKVoMoftVZmwUs.mft (raw, json)
Hash identifier: AvsDgwNzlh7/TAQvqJyUeoI6FNIbAFvSbQv0zYz5nHI=
Subject key identifier: B0:56:D6:D8:AB:BD:C6:45:1F:B2:6F:78:46:9D:55:C3:15:1A:FB:62
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 019F8FEBE5C2445BADE881CC5CC0C0816212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
Manifest number: 0970
Signing time: Thu 23 Jul 2026 17:00:29 +0000
Manifest this update: Thu 23 Jul 2026 17:00:29 +0000
Manifest next update: Fri 24 Jul 2026 17:00:29 +0000
Files and hashes: 1: 0yr8aXhOgym_087pCWjaXD2xwbo.roa (hash: ibUboXeSVZSey6KFBr4VW/S44K1bXt0+EVOA97v+hoA=)
2: IbaW7xjndY6EP4RVlLBG-ZEnYYo.roa (hash: ysgDo6QmZenYrn+i6Pxn3RI9PAFzW45gWtKEwSVQWB4=)
3: fKWYMippkFpcbgKVoMoftVZmwUs.crl (hash: Czn/P4ggrT5WWmHchGpG7sNeZi0GTpdDhg9K5xfzrZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:e5:c2:44:5b:ad:e8:81:cc:5c:c0:c0:81:62:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: Jul 23 17:00:29 2026 GMT
Not After : Jul 24 17:00:29 2026 GMT
Subject: CN=b056d6d8abbdc6451fb26f78469d55c3151afb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:af:09:21:72:6d:a0:f3:c9:33:b9:f3:bb:
b0:c5:34:75:87:8e:23:25:2c:b3:3c:96:5e:2e:6f:
99:85:77:04:bb:e6:12:cd:a9:d0:f1:91:8b:3f:8c:
8c:d2:e3:68:86:25:47:2c:c5:56:f2:c4:14:c3:17:
a1:45:da:14:5c:0c:a3:8b:28:9f:81:2d:77:76:f8:
f5:ee:85:16:a9:b0:cb:33:6f:2e:89:00:13:6f:ab:
5e:77:57:e0:c5:e4:28:24:42:15:6c:98:12:48:e8:
51:d2:51:e7:62:1d:2e:f5:8d:0e:01:95:75:53:48:
03:9d:98:ee:85:90:73:a1:22:4c:a6:02:ea:8c:5d:
c5:e0:53:21:e0:34:30:d5:c6:01:0f:77:b7:6e:79:
b0:b3:ef:a6:42:93:96:ea:da:62:da:09:ec:ff:eb:
e2:d4:e2:e8:14:cc:17:85:c8:86:95:94:c8:ec:b1:
8d:2e:b5:11:e6:74:39:38:3f:c0:b7:06:41:d6:9b:
e0:18:56:da:3f:ad:6a:03:e9:11:5a:a5:3a:80:3d:
2a:61:6c:0c:80:f0:4e:74:83:c6:54:d8:2e:fa:e2:
82:33:80:63:9b:7e:89:b5:c4:74:fb:2e:81:45:73:
21:de:eb:22:bb:4b:98:12:51:08:e8:04:f1:d9:d5:
8b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:56:D6:D8:AB:BD:C6:45:1F:B2:6F:78:46:9D:55:C3:15:1A:FB:62
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2b:a8:40:e5:07:4c:f6:e7:49:15:e5:6f:d3:ed:07:af:3f:
29:c1:ba:1c:ee:c5:c4:69:c9:9d:5e:c1:3d:b0:33:ce:7b:51:
cc:62:d1:28:18:4f:2e:47:a6:af:19:09:37:a1:57:6c:a2:b7:
7e:b0:c0:63:d5:ae:c3:50:bb:19:7a:2f:3a:e2:43:a1:1c:53:
5b:f6:c8:91:d0:84:d5:7b:a3:08:cb:8b:35:d1:8f:df:57:87:
3e:bb:a0:d1:2c:82:41:a7:59:b8:5f:fe:f7:0f:96:f9:5d:1c:
f3:13:e1:27:38:f4:f5:3d:3a:48:eb:46:ad:49:d5:3c:46:b3:
db:34:77:3e:0b:60:93:e8:13:7b:5f:2d:6a:3f:99:c7:a7:66:
f1:fd:6e:5c:92:7c:1e:54:77:e8:c5:fe:3a:6b:2a:4e:62:68:
35:d7:47:4c:ea:fd:cc:c3:33:1a:33:0f:eb:95:76:ec:f4:64:
a1:3e:6e:95:f5:79:fa:60:97:8b:b3:61:81:7e:62:85:39:9e:
4d:02:ae:d5:e9:d3:14:23:73:76:75:67:82:c0:de:1f:d8:72:
3e:66:9b:c7:8a:39:18:d8:4f:a1:7a:fe:a0:59:64:9f:20:fb:
fb:b9:44:d5:c9:b4:37:81:23:1c:18:8f:d1:72:70:b3:fe:35:
f1:60:ad:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:27:02 2026 by rpki-client