Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: I1fosGyG3J5ThFcSVqMwtQD+jzxVAdzdiBRmVbw05Ig=
Subject key identifier: 29:A3:9B:8B:E5:FE:43:8E:8F:D4:CF:89:FC:B6:53:E2:F5:FB:2B:E2
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 019F927F05BF846504B15245FE85945D965F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 10AF
Signing time: Fri 24 Jul 2026 05:00:25 +0000
Manifest this update: Fri 24 Jul 2026 05:00:25 +0000
Manifest next update: Sat 25 Jul 2026 05:00:25 +0000
Files and hashes: 1: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (hash: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: ZwNNNosXFoMQ6uDCWdmLkfnqYBEE86WnVURtW/ZyUoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:05:bf:84:65:04:b1:52:45:fe:85:94:5d:96:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Jul 24 05:00:25 2026 GMT
Not After : Jul 25 05:00:25 2026 GMT
Subject: CN=29a39b8be5fe438e8fd4cf89fcb653e2f5fb2be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:46:d5:ad:da:3d:1e:20:74:77:c7:3c:c3:
28:84:b0:1f:98:85:1c:01:5e:68:77:2f:71:99:f3:
b2:6b:4a:63:e6:cf:62:1b:81:39:65:2d:23:3c:4b:
78:07:b8:fa:80:8e:f3:09:af:03:1d:78:28:78:9b:
97:19:38:26:81:b3:f5:c2:e3:ea:c7:64:ca:c5:15:
c9:85:a7:61:32:eb:3f:51:9f:15:f7:e1:76:f7:36:
1a:2f:96:f4:60:56:f9:78:a7:c3:f1:72:2e:0a:a8:
ed:5d:b2:3d:86:4f:b1:2c:33:0b:0d:07:f1:18:9a:
41:60:ef:ad:fe:21:5b:57:b6:5a:72:d1:91:06:a6:
c6:7a:4b:2e:9d:55:f4:51:03:72:ba:57:cb:d5:65:
ff:d3:4c:09:56:2e:30:80:b2:5e:5a:d6:fd:3f:bf:
a2:66:09:01:a0:40:56:4a:a3:cb:84:73:81:53:7f:
d7:9c:12:6f:55:3d:a5:51:84:60:0a:0a:c0:a3:7b:
d2:5e:78:af:9a:09:e1:fb:32:aa:a3:4e:b3:5c:d5:
a8:f4:d5:54:a6:87:97:8f:42:3d:8a:1a:90:d0:90:
9e:8a:9c:a2:88:a0:03:13:da:30:9a:fb:31:df:fa:
27:2c:ec:e5:3d:15:76:70:4a:05:8d:57:f2:0e:34:
c2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A3:9B:8B:E5:FE:43:8E:8F:D4:CF:89:FC:B6:53:E2:F5:FB:2B:E2
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b5:a6:96:ae:aa:cb:67:df:15:a9:59:3e:9f:23:1b:d8:92:
f3:85:6a:b3:92:e9:f5:40:34:ca:d1:34:d7:ea:88:d2:65:88:
68:13:59:b0:6b:a4:e1:a0:a7:5a:79:cd:a1:10:33:5a:93:4e:
dd:ec:84:bf:ef:b3:ec:8f:69:67:88:83:46:ac:c7:55:64:a7:
4a:c9:99:d3:e6:e3:6f:80:41:d1:39:31:4c:f3:7c:81:e5:36:
0a:4a:ba:dc:cb:8c:2e:a9:27:9c:76:f0:ba:42:e6:95:e7:66:
7e:85:cf:77:28:07:a5:6b:23:ef:bb:a8:7c:6e:a8:5a:0e:aa:
17:32:a9:5a:4f:47:4e:24:88:6b:f7:58:8d:db:e7:af:ff:59:
82:76:d4:5b:46:1f:b1:54:f3:d6:68:39:a4:9a:ec:7d:ef:ff:
fc:d6:2b:62:1d:7e:6f:b5:92:8c:f4:0d:77:2f:b4:55:a7:e1:
ae:7b:9e:07:30:7b:d2:6b:ae:e5:8a:c6:ae:14:bb:5a:0e:95:
28:05:29:e0:12:35:27:8e:fb:e2:f2:35:32:66:a3:78:57:0e:
13:a1:cf:6c:3e:a8:b9:d8:d3:6c:b3:d9:a7:fc:20:fe:cf:38:
54:23:cd:9f:f6:5d:5f:8c:0f:af:67:34:a2:e6:c4:d4:90:f5:
80:c9:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:20 2026 by rpki-client