Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: jmHwAKChGreQGuveGpD5ygV3BTC+hXs5FIDBViyKTnM=
Subject key identifier: C9:7A:45:99:EE:D2:A9:96:C9:98:1F:83:85:B6:20:9E:7D:0D:0B:CD
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 019F9248604C4087435B72A34CAB9E35BA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 04:00:44 +0000
Manifest this update: Fri 24 Jul 2026 04:00:44 +0000
Manifest next update: Sat 25 Jul 2026 04:00:44 +0000
Files and hashes: 1: D76OthKlE46ZLM9sdNaSig1Ng6I.roa (hash: pYj/tdJI8tEjZZC6XXCFhJYt0bHwBpZtynKtpFqoszk=)
2: PTI5qNiMxJTaYsRviRjCASyPtOI.roa (hash: PgMrdxB9fQmJxz2ju9KDJjW/D8w0BstDoOfXkw+BC8M=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: 12Yy1TTfBex+LOEjEsE66SkKyPd5ZdJ8K2wBvwpPANg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:60:4c:40:87:43:5b:72:a3:4c:ab:9e:35:ba:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Jul 24 04:00:44 2026 GMT
Not After : Jul 25 04:00:44 2026 GMT
Subject: CN=c97a4599eed2a996c9981f8385b6209e7d0d0bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:e5:82:98:d1:c6:21:7e:01:93:32:2c:dd:
54:fa:ac:c1:ad:31:20:d0:50:21:da:19:7e:93:ea:
a8:e0:7b:5f:a6:39:bf:c4:4f:62:b4:8c:59:e1:9b:
d9:45:67:cf:44:8e:24:ff:92:81:18:83:8a:92:03:
d2:cd:25:0c:93:08:70:e8:ca:dd:e5:08:f1:39:ad:
12:8f:e6:33:33:3f:89:74:31:6c:75:eb:d0:8c:25:
44:44:05:a2:38:8e:45:35:9c:de:34:03:0b:9c:8d:
05:3b:4d:f2:3c:cb:99:45:a1:10:7f:dd:c0:83:61:
0a:40:8d:7e:65:d2:c6:25:a6:76:4d:66:06:60:27:
4c:5a:74:08:32:08:7d:fe:fb:af:75:9a:5b:5f:31:
48:20:e9:5c:7e:a6:e6:90:63:e1:c8:f6:0c:eb:2f:
9e:5f:dc:19:00:44:73:f5:3b:11:6d:7d:bb:60:6a:
04:3c:71:fd:c8:fa:d3:ea:78:fa:3e:e2:cd:4b:36:
c3:2c:bf:bc:ee:2c:0c:07:b2:70:26:34:a3:7a:7d:
d1:a8:e4:e6:4f:f6:d7:f7:74:3a:c0:f1:89:33:07:
2a:82:13:4d:ac:9a:4d:70:91:8e:80:fd:9f:bd:70:
01:fc:c5:43:90:4b:8b:10:da:f3:7d:ae:60:bf:bf:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7A:45:99:EE:D2:A9:96:C9:98:1F:83:85:B6:20:9E:7D:0D:0B:CD
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e7:bb:ef:65:75:23:b5:a1:33:51:55:d5:1c:d3:6e:7b:97:
1f:49:58:4d:db:7e:a8:e0:14:27:62:df:bc:af:3d:2b:fa:a0:
8a:aa:c8:a3:5b:6d:c7:1d:e2:24:11:5d:2a:f0:70:09:e7:ff:
27:3b:d3:e7:19:05:fd:70:62:0b:a7:15:13:1d:0c:a3:56:38:
12:9e:be:30:41:df:f4:64:2f:0d:d9:4e:33:0e:80:e3:ea:96:
54:6a:5e:a8:89:3b:42:ce:52:63:8e:32:db:e9:5d:f1:91:99:
ea:f6:f0:f0:ff:e7:61:34:cd:70:4f:cf:fa:da:f8:ee:0c:99:
59:ac:68:f0:8a:c2:2b:3f:d2:f1:0e:65:e8:2f:d6:84:43:03:
0e:74:47:0f:32:29:b8:3d:d0:df:38:7b:4b:d7:fa:e4:ec:7c:
f4:ca:02:78:c3:a1:0e:ff:35:43:b7:b3:d4:29:48:e7:4e:31:
1c:6c:b4:f5:8b:18:99:41:e4:00:49:20:0b:39:6a:88:31:d2:
ef:24:27:b3:b3:9d:61:dc:22:6a:cc:27:45:00:e9:8b:8d:d9:
80:8e:7c:c2:dc:73:08:d7:4e:2f:84:20:d2:72:83:f3:39:5f:
e3:eb:16:3a:c5:83:67:d0:d7:be:e2:06:b6:05:88:09:b2:0a:
8c:a5:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:57 2026 by rpki-client