Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: jCLMkwrl8XjiHH9Jg7rVyxxhol45CWXtRdWG4n8m2XE=
Subject key identifier: 97:66:FD:15:37:33:B5:59:57:CE:F8:C2:7F:9C:BA:E5:99:1F:08:99
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 019F9022F222ECD0A0494DA4CFBE30F5C82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 19D1
Signing time: Thu 23 Jul 2026 18:00:37 +0000
Manifest this update: Thu 23 Jul 2026 18:00:37 +0000
Manifest next update: Fri 24 Jul 2026 18:00:37 +0000
Files and hashes: 1: 2_cvz6D9pSRXH3JvxyHd7c81FF0.roa (hash: zk9dbjzt7GrGJFcExlsnVL8+hMzQCq9y8eRk95K4UnU=)
2: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: BO05wsmmsODtKopDaRSALz7Jg6w10crF0HLFpoW5MYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:f2:22:ec:d0:a0:49:4d:a4:cf:be:30:f5:c8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Jul 23 18:00:37 2026 GMT
Not After : Jul 24 18:00:37 2026 GMT
Subject: CN=9766fd153733b55957cef8c27f9cbae5991f0899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:0b:9f:a2:75:b8:54:f2:e0:17:e5:5e:ba:
2f:f1:75:a9:b5:d6:95:41:5b:4c:0b:62:39:ec:1f:
16:97:bd:1d:21:99:c3:1d:b9:64:b8:9d:fa:a2:60:
c5:13:11:4c:7d:37:61:5b:e3:e8:d3:64:dd:7b:d4:
3e:96:d1:4f:b0:cb:c6:ed:71:80:e5:ad:02:0c:3b:
f7:08:42:3e:1b:c5:bb:06:6c:a8:41:8a:f0:51:3b:
90:70:fe:6b:ee:2b:6c:22:97:11:e5:d4:7d:35:1e:
33:f4:fd:f4:66:b3:d9:f1:7f:d0:86:52:ab:b1:c2:
ba:3c:28:39:5f:72:2f:0d:43:b5:86:8e:1a:bc:49:
3d:45:0e:02:bc:79:0b:ba:1d:c4:3f:d4:9f:3a:cc:
b9:ac:1a:ec:c8:9d:8a:14:87:8c:a9:70:8a:52:d4:
d4:1c:e0:f2:e8:12:07:cc:8f:05:aa:ce:37:7e:49:
e2:b2:24:57:1e:2b:db:09:96:46:86:af:55:82:b8:
2b:5b:87:d8:09:e9:18:25:59:d0:92:8b:fa:6a:9d:
c5:c4:6f:d2:c5:36:ce:d2:a0:2c:48:5c:8f:de:2b:
3d:55:f4:1d:a4:0d:17:d6:02:6c:21:94:3e:6b:4f:
bb:05:2d:87:80:55:a5:4a:d0:5c:d6:ad:b1:b1:cc:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:66:FD:15:37:33:B5:59:57:CE:F8:C2:7F:9C:BA:E5:99:1F:08:99
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:40:e1:9d:a3:0b:2b:fc:87:32:26:59:86:00:fa:6e:74:52:
33:e3:93:dd:d6:d1:fc:68:d0:70:3f:1a:3d:04:61:5e:a6:70:
5f:f5:ad:2d:42:c0:ae:d9:d4:eb:04:24:50:f7:d8:03:b7:27:
41:19:41:63:b5:e9:40:ab:06:ca:50:38:be:49:f3:71:80:3a:
f2:21:62:15:33:dc:cd:60:f9:93:1d:70:79:3b:7d:de:92:14:
04:66:79:02:ce:a3:ea:40:bd:c1:34:b0:4a:0a:d5:93:21:af:
88:2f:f9:bb:84:51:99:5f:dd:2b:e5:9a:1f:48:f5:73:f9:02:
b0:94:56:6c:70:11:1e:b3:a9:bd:1f:14:f8:02:eb:a0:37:cf:
2e:25:74:da:e6:fc:7b:17:16:fa:8c:bc:08:c6:9e:6b:49:2c:
e5:b4:fe:9f:a0:cf:3c:67:65:a3:63:88:88:48:6f:31:93:08:
05:98:c8:8a:b6:6a:29:3e:5f:28:3f:e0:ce:06:b0:17:73:84:
61:5d:be:10:a7:81:43:22:9c:e1:84:6e:1a:ac:a2:71:05:04:
dd:f8:b8:ee:fc:1f:99:b8:bf:b3:63:17:0a:77:10:bb:e7:10:
0a:26:64:9d:d6:d9:45:91:f6:8a:5f:7c:d7:b0:11:42:e3:0d:
94:11:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:14 2026 by rpki-client