Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: vGGLBpnxuWzO4oO5lD+LFv51ZNyxn+xi0M9I3/cxCAw=
Subject key identifier: 1A:A6:93:CF:87:6B:AC:C4:DC:64:B4:2A:E2:43:39:52:31:F6:0F:6A
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 019F92EDC5B897ABF0B1F071976E3B982DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0BD4
Signing time: Fri 24 Jul 2026 07:01:23 +0000
Manifest this update: Fri 24 Jul 2026 07:01:23 +0000
Manifest next update: Sat 25 Jul 2026 07:01:23 +0000
Files and hashes: 1: E3jz9qmqTjg_zIJIvHv94CK6zsY.roa (hash: 0Lk+ZfoyEeeu5e++mGbGnXSf6tV5iYmorQKGtAl1EXE=)
2: GIL9uqecVqs2J_KF2ar2nbKLRYY.roa (hash: R/5DgAUg2cp6Uj0SCyngsXoMIJaoy6aqdVqAoNaJ2f8=)
3: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: 2+xiDrXSxJnw9veYZg0DrvI3X7UnIf2qhAggk+i8m94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:c5:b8:97:ab:f0:b1:f0:71:97:6e:3b:98:2d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Jul 24 07:01:23 2026 GMT
Not After : Jul 25 07:01:23 2026 GMT
Subject: CN=1aa693cf876bacc4dc64b42ae243395231f60f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:e6:9d:42:24:43:44:07:a3:8d:43:bf:f2:
5b:bc:fa:8a:36:5b:df:ce:ef:6d:8d:cd:51:6e:6b:
35:d5:e9:7e:6b:98:ac:09:0d:70:15:18:8c:80:15:
39:1e:d6:58:f5:76:c6:73:20:94:77:fa:80:31:e4:
46:ca:04:ae:ae:a2:3e:7d:3e:55:60:da:83:a9:7b:
4c:93:b5:7b:eb:98:70:f2:9a:0e:a8:63:d9:b6:f2:
16:8b:a9:2e:09:fa:26:fc:da:dd:27:c0:70:95:9f:
bd:e2:f8:2b:ae:25:49:11:c5:b6:e1:12:bf:28:28:
ac:e7:e3:8f:a5:83:4b:04:18:9d:78:80:12:53:34:
bf:db:33:4d:15:d4:bf:ec:eb:e9:51:4e:ce:0a:eb:
c6:7d:07:52:0e:63:19:86:39:3a:d7:16:d1:2d:8f:
ca:bf:1e:d2:bc:d6:14:c4:57:66:37:48:f3:0f:59:
fe:ef:04:9a:b0:f8:ca:57:56:30:26:1c:7b:f0:87:
e6:2f:f0:8f:4f:da:d5:c0:b2:34:26:6f:d3:5c:6b:
6e:e0:3b:87:64:11:86:97:bc:53:21:31:d5:1f:df:
da:74:ad:18:d8:bf:2d:38:e6:03:2f:eb:e3:09:f5:
24:00:57:0a:d5:46:69:77:c9:1f:79:a0:c2:cb:36:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A6:93:CF:87:6B:AC:C4:DC:64:B4:2A:E2:43:39:52:31:F6:0F:6A
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:37:b6:25:d9:fd:3f:56:8e:5b:ee:ff:1d:6f:85:c2:64:84:
35:e5:8c:fa:1e:ed:ea:f8:f6:37:f1:7d:4d:fa:56:bf:e2:c7:
e8:70:f2:7e:14:99:0d:52:13:a5:f0:7a:8f:10:c4:1c:50:fc:
0e:79:5f:08:8e:62:53:ea:90:de:c0:cf:67:fc:16:4c:83:a9:
2a:de:d7:45:c4:3c:a1:c2:e3:27:17:92:00:fe:61:33:ef:af:
7f:c3:50:32:37:c2:c6:7a:7a:c6:f3:3d:98:4f:a1:b4:d2:cd:
3f:3e:13:67:a8:92:98:9a:f3:c9:60:37:97:47:e3:cd:93:3b:
44:21:51:d9:eb:5f:2e:2c:a6:8e:5b:c7:25:4b:ba:7e:14:97:
c1:ff:a4:4e:1e:d0:32:62:d1:5c:e7:8a:5b:e9:b9:9e:7f:99:
4d:a7:9b:b5:d4:90:0e:2f:f2:cb:42:90:85:4a:6b:de:72:8b:
00:97:17:a7:69:55:6b:8f:83:6a:7f:71:f9:e9:15:07:af:02:
cd:4c:45:a3:49:26:bd:4f:da:2a:86:35:35:a8:2b:65:4f:77:
4a:99:e1:76:f8:79:ae:21:42:8f:d7:56:37:ae:2f:85:5d:2f:
26:c5:43:af:f1:6c:bd:4d:fc:88:f2:00:6d:cc:d0:30:cd:42:
31:8d:88:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:54 2026 by rpki-client