Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: DTnN4FFh++QHhQe12lXggbh4bavpexocUuzh45xA6hY=
Subject key identifier: 45:82:B0:BD:BC:38:40:29:0F:AD:CC:F0:BC:11:69:81:72:A0:C5:0A
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 019F927F7E111342919F5B15ADE68291080E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 1847
Signing time: Fri 24 Jul 2026 05:00:56 +0000
Manifest this update: Fri 24 Jul 2026 05:00:56 +0000
Manifest next update: Sat 25 Jul 2026 05:00:56 +0000
Files and hashes: 1: KgDvJO7R9xt8L6g89R0awXRGW1s.roa (hash: ETsSBhdqQ9MlEMxi8CjWGna2tcafJ0md9vP0I27TipY=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: gQ8C41oD+95jHXnY6ykHIhoByvQsrL+d214W5LT1bY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:7e:11:13:42:91:9f:5b:15:ad:e6:82:91:08:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Jul 24 05:00:56 2026 GMT
Not After : Jul 25 05:00:56 2026 GMT
Subject: CN=4582b0bdbc3840290fadccf0bc11698172a0c50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:f1:61:e0:c5:5d:c3:64:89:1c:27:1a:62:
49:4f:d5:08:96:be:9e:4e:ae:f0:df:d0:82:72:57:
a8:a7:9d:45:50:b2:5a:10:11:6a:83:7c:b9:03:8e:
56:dd:fd:e3:f7:18:50:bc:b6:3e:b3:13:b4:9e:9d:
96:84:06:b4:1f:ac:cc:b9:94:55:8f:a7:68:a4:d7:
3f:43:b3:82:92:84:08:60:1a:77:ba:c2:6e:95:6d:
b8:e3:d0:5b:f2:fe:ba:b1:84:0b:38:07:44:c1:3d:
3b:86:5c:9c:77:03:97:9e:19:0b:8e:03:4d:f7:32:
af:5d:c0:96:d0:69:18:cf:71:0b:ec:4d:34:9d:1e:
d3:e8:9d:28:02:78:85:cd:86:05:b5:e5:99:97:75:
4d:d9:48:fb:72:ce:ce:0c:00:00:7c:36:4d:85:86:
00:ba:7d:b9:23:db:e6:fb:23:ec:f1:7a:8a:92:a3:
ca:c2:1e:d8:d5:fc:e0:80:cd:86:4f:53:d2:32:4b:
83:e2:3d:2d:b1:67:a4:f5:82:87:81:de:24:be:e3:
79:af:20:c0:5d:37:84:af:0f:e3:c0:b4:b3:1d:f0:
b6:86:6c:c3:3d:b9:12:62:b8:6a:08:29:a7:fd:79:
9e:e9:8f:52:8e:f6:8e:53:a9:44:f5:be:84:9c:5d:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:82:B0:BD:BC:38:40:29:0F:AD:CC:F0:BC:11:69:81:72:A0:C5:0A
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fc:66:ee:02:2f:17:df:24:6c:10:4b:76:1a:7f:37:6c:84:
a1:e2:7b:3c:03:4c:b3:42:c1:4b:32:5b:c1:8f:71:8f:0e:42:
26:08:df:41:29:a4:b1:05:73:df:82:e1:9a:29:0b:94:75:bd:
f9:bc:35:31:8b:da:3f:ad:3f:5a:c6:97:0d:b3:86:c4:d6:6f:
85:08:d6:a8:b3:2c:e9:05:28:b4:66:b8:45:cc:e0:0b:03:2a:
94:bd:e1:eb:79:a6:fc:14:09:30:1c:57:a7:5c:08:08:e2:2d:
1c:f6:46:53:9f:90:a0:c7:df:79:ef:08:4d:39:1c:da:9b:a3:
91:ad:e1:83:1e:42:3f:bc:d5:42:f8:b9:ac:1d:d1:b3:22:82:
4c:29:17:b9:ab:39:52:cc:59:21:13:52:ad:91:27:42:b1:36:
a0:55:34:9e:66:f6:a5:0a:98:db:47:c7:71:5d:0e:03:07:12:
42:e8:d4:cd:07:c2:c8:fd:08:3a:97:f9:1d:11:16:6e:c5:ed:
51:01:5a:7a:b6:00:03:07:75:fc:9c:3c:7d:0e:6d:6d:81:fa:
c3:50:eb:a6:c8:fa:fa:ec:9f:b3:0d:bd:40:48:e8:59:f6:a5:
7b:dd:57:6a:16:2e:f1:f4:4e:ef:7f:5b:bf:92:c2:7c:13:79:
77:6a:d5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:58 2026 by rpki-client