Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
File: Fi5IMpyL6O8gnplY2marAkAUXhk.mft (raw, json)
Hash identifier: a9qj7gbqmK9AKAsI6OcBjzytNylEEVokJfYSstwiYqo=
Subject key identifier: CF:A9:4E:C4:F1:34:CF:17:34:6E:5B:6B:1C:5E:FD:95:E7:0F:AF:83
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Certificate issuer: /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial: 019F927F77DA689F09B3ADB5924347639ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
Manifest number: 0AA5
Signing time: Fri 24 Jul 2026 05:00:54 +0000
Manifest this update: Fri 24 Jul 2026 05:00:54 +0000
Manifest next update: Sat 25 Jul 2026 05:00:54 +0000
Files and hashes: 1: 62jZg4gngBAnPwivfw6fHLKrFR8.roa (hash: x5Xq81WhPxvz0KcW7Qb+lmuqrFvDsxsxDYK9R0dFh5A=)
2: Fi5IMpyL6O8gnplY2marAkAUXhk.crl (hash: ZIQepk58ntzN1Tlxt/mMSKMmz5Kh0uf58jn6+0W6gZo=)
3: L1zbFMwgTo8k0cGpa43eL9rJSvs.roa (hash: 3nOYFWDqeUlGtXtuv/0p8OtC8pzPOMkeWtIsBYndPi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:77:da:68:9f:09:b3:ad:b5:92:43:47:63:9a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
Validity
Not Before: Jul 24 05:00:54 2026 GMT
Not After : Jul 25 05:00:54 2026 GMT
Subject: CN=cfa94ec4f134cf17346e5b6b1c5efd95e70faf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:7d:97:6c:9b:7b:3d:28:e8:77:40:64:1f:
25:5e:17:7f:4c:30:00:18:eb:76:c0:24:6f:9f:47:
55:b9:60:1d:5e:0d:e3:c0:60:e8:6e:83:8b:de:7e:
30:4a:c5:65:59:ee:21:49:08:44:10:0a:ac:34:53:
99:1b:b4:f8:24:85:30:d6:c6:73:cc:56:62:53:5c:
1d:60:98:a2:de:a9:a1:b9:54:1b:01:58:0c:07:bb:
04:2d:74:61:85:e6:1c:35:c7:4d:5e:08:8e:4b:34:
8c:a8:72:cd:37:fe:4f:ad:16:46:e5:45:47:c2:3f:
64:d0:b1:d7:71:4d:d4:19:af:aa:0e:4c:16:da:a9:
9f:0e:45:88:64:31:72:6e:48:83:43:69:d0:84:13:
7b:40:14:b6:19:bf:88:13:82:88:c1:0b:9c:f7:59:
ba:0a:81:99:1c:47:a9:6b:c5:0e:b8:7a:b2:a7:97:
09:d0:6e:27:68:34:28:cf:4f:ab:84:9e:21:e1:c9:
a4:b5:56:5f:e7:35:c1:50:27:09:36:8e:d5:2f:e6:
64:03:49:9c:b7:5e:5d:3a:cd:09:d7:e9:00:27:b9:
54:86:d2:95:12:23:7c:3d:97:e7:45:a0:45:a9:82:
9c:bc:f6:1e:72:eb:a4:74:e3:72:0c:50:93:4b:b1:
ac:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A9:4E:C4:F1:34:CF:17:34:6E:5B:6B:1C:5E:FD:95:E7:0F:AF:83
X509v3 Authority Key Identifier:
keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9d:4f:d5:b0:ef:9f:63:52:5f:25:b4:bf:a8:ab:dc:e5:8a:
df:84:d1:5b:fc:ce:48:94:62:3a:c9:70:44:52:3e:c1:ab:85:
29:1d:48:5e:87:25:62:52:bc:d0:ae:f2:02:07:5c:9c:4f:68:
da:d4:db:c9:63:3c:68:8c:30:05:80:60:91:8d:39:c8:ce:4d:
88:15:90:1c:af:ce:3f:9e:46:82:a4:c8:72:88:dd:95:f4:6f:
ea:f7:b8:96:f6:33:e8:04:85:8e:a2:8e:3e:14:e4:76:34:f9:
52:06:11:52:bf:73:bc:ff:f8:36:4b:1f:68:8d:9b:16:28:01:
6b:7d:73:db:78:6a:85:01:42:54:11:33:e1:fe:f1:50:f1:bb:
6e:d0:44:50:45:25:02:98:a0:95:a3:cf:53:11:a3:30:cb:80:
b9:8f:84:85:10:2d:e5:86:30:06:e4:ed:62:10:c6:52:9c:f7:
6f:d8:7f:7d:25:32:bc:b2:3d:9a:4e:23:99:95:8f:ed:76:5e:
93:1e:d3:0b:72:90:03:b6:c5:c6:62:ed:64:bf:e4:0d:16:d7:
df:63:32:96:5e:89:9b:b1:06:20:c2:32:16:82:8c:a7:75:73:
20:f7:0f:6b:f5:01:78:81:cc:48:da:6d:30:a8:23:86:64:b2:
32:38:df:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:05:20 2026 by rpki-client