Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: kZnVlr27HNcPmw2ODGh8jU2CQW02ylyuDBqNVmApDtI=
Subject key identifier: F4:FA:4C:D5:6F:39:0A:DA:9A:C5:52:8E:96:7F:C8:7F:F9:D3:9F:7D
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 019F91DA472CB2EFC99E6AEA8B44DD6B0E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 02:00:29 +0000
Manifest this update: Fri 24 Jul 2026 02:00:29 +0000
Manifest next update: Sat 25 Jul 2026 02:00:29 +0000
Files and hashes: 1: CEyBPj5VD8UxRiqVxqInbi9mDx8.asa (hash: OtsKbdUFAn6cy1skhcCn+WuIejDR78hfMFZ1vJq0JOA=)
2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: hheEdHTtcASH+rRIdbJyvhYIstkLirxHBtV370SCZ6o=)
3: srGtxdotdL1gGYebpFyhRC2KgLw.roa (hash: peHYPQm6+m6K0GIm1p2M4aZrPJFnCNdM3/dYTyUbnoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:47:2c:b2:ef:c9:9e:6a:ea:8b:44:dd:6b:0e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Jul 24 02:00:29 2026 GMT
Not After : Jul 25 02:00:29 2026 GMT
Subject: CN=f4fa4cd56f390ada9ac5528e967fc87ff9d39f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:bf:ee:db:89:ab:47:16:5d:c6:07:75:c3:
55:0c:b7:df:2b:14:0a:7f:d0:f6:40:28:2e:3a:29:
fc:2e:6b:00:c7:c2:d9:0d:b0:61:df:0e:79:34:08:
41:7d:47:a7:4d:8c:29:32:7a:37:42:23:77:f7:e3:
fd:5e:39:18:26:c3:36:e4:87:96:33:c6:7e:11:30:
73:c1:7c:15:8b:c2:95:1b:19:f7:1b:c3:f9:1c:8d:
95:13:0f:48:58:ce:aa:6c:0c:4f:39:3d:95:0e:1b:
c9:d9:ff:94:6d:d5:d4:50:e1:1c:45:ee:68:66:51:
28:b0:a3:a8:13:67:f7:63:0a:be:10:4a:29:88:c1:
0a:3e:36:fc:91:6d:18:d0:08:9c:5f:d0:2b:fe:31:
51:a1:2b:dc:3d:48:0d:4d:d0:d2:33:48:95:fa:82:
62:62:02:78:9b:6d:b4:24:96:78:31:65:9f:ef:ea:
da:9f:10:14:5a:e9:23:96:0f:2c:f5:d9:c3:22:91:
b5:b5:fc:ed:51:55:4d:39:b7:55:ea:5d:39:13:11:
a6:d3:ba:45:89:a1:59:44:56:03:8a:e8:ce:e2:19:
58:4a:b6:8c:58:cf:17:f6:bb:e0:7d:2d:51:cf:b2:
ac:21:8c:39:14:f7:c6:1c:e2:cb:80:b7:a2:3f:1b:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FA:4C:D5:6F:39:0A:DA:9A:C5:52:8E:96:7F:C8:7F:F9:D3:9F:7D
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:95:51:c9:15:0e:53:8b:5c:ff:ae:c1:cc:80:fc:c6:e8:75:
08:da:f7:66:c9:dc:34:6c:de:d9:b2:54:98:0c:6f:22:19:56:
d0:6b:de:e3:56:ee:a4:f8:ac:c4:0e:7a:ab:6a:91:44:cb:90:
e4:15:5f:1d:35:57:76:2b:cc:d5:28:4a:cc:a7:3e:36:4b:15:
a0:f8:db:de:39:b2:24:8e:bb:62:91:9e:ea:71:28:07:a2:c1:
c1:06:e3:89:37:ca:81:68:84:b7:57:fa:30:c2:bd:b2:84:8d:
bd:c9:56:9e:10:0f:76:b9:04:50:aa:78:b6:49:3a:12:de:11:
b9:96:71:0c:98:57:22:8d:7a:2f:00:f5:d7:ca:10:fa:55:70:
85:2b:4a:a2:11:36:98:6b:5c:a6:35:00:82:f2:db:b9:3b:35:
e0:31:97:9f:d5:d9:63:00:2e:02:6c:66:3a:17:f9:c6:7f:26:
b6:51:c4:af:ee:b6:19:cc:d2:0b:d3:cf:30:07:e4:38:76:43:
76:13:0c:ab:b0:84:1c:c0:e8:14:2a:62:fe:43:ce:39:c5:ec:
13:b4:24:88:e8:7c:5d:44:c9:2f:57:2e:5d:6a:06:dd:c6:a7:
a1:f6:dc:91:ed:d7:61:ab:44:15:cf:1d:1b:2b:47:1b:52:72:
36:00:a4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:12:16 2026 by rpki-client