Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json)
Hash identifier: kskq3j3qBxaGEeSO0T53ozjSccZ+vlFKpZjYhsH4atI=
Subject key identifier: A5:A3:91:67:89:D3:6B:D4:88:F9:B0:80:9C:CE:3E:CB:07:03:BB:8F
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 019F9210FF7EC6D57227E83732E110E27F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
Manifest number: 1A1E
Signing time: Fri 24 Jul 2026 03:00:15 +0000
Manifest this update: Fri 24 Jul 2026 03:00:15 +0000
Manifest next update: Sat 25 Jul 2026 03:00:15 +0000
Files and hashes: 1: 1-gD4Hq6k3_IBwrhpxMMG_5-Bhrc.roa (hash: D/5u0x0tc9amqj7LxNMrUHo2Ohz0yRVArWNlJ2DKIqA=)
2: 3Ntb8637r4izsCpVwd5gcAHqdG4.roa (hash: v8fDaBY/Qsb7VQFSR88lHqJauVxk7NICenthut3N3XE=)
3: CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa (hash: rA9XhkKgyB7cXpzG2udSGKxNb3vtZoJSLVB744tVVnU=)
4: FQaFiTcf67x6YrpuBrF65w_8hug.roa (hash: CNjoRJ7uhvB1XswkiORZT6na1N/pFMt+GGKFD8Y6iH0=)
5: LKLutE-uCKR41ay5iaoVFawv-Gs.roa (hash: oOu8i7EWf5PBDu9YcMHQbEXmrmW+EZz9feEFexijuIs=)
6: OUSNJic16YHsFdydiuaFE2ZdqEU.roa (hash: Te9uOokwyk9iyAdeUIheCIvhMu20V8m5YnWWnhDRCII=)
7: QYcFCUvrty_eEw95bsUeyFFjK-c.roa (hash: jbyRPBMO6AQ8+x+sL1BfcSXlfYOvQy8bP202dnbtn6o=)
8: SaQLJTN3Tu68cjM5ZHbz4FW_mpg.roa (hash: WsziI7VNkNBzfhBKLzBNR8KU16oQ4434je9QUJEHNAU=)
9: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: bVlxv++3fpCW/KDPhW192yzLZN2hIzp9shZyw9c35hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:10:ff:7e:c6:d5:72:27:e8:37:32:e1:10:e2:7f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jul 24 03:00:15 2026 GMT
Not After : Jul 25 03:00:15 2026 GMT
Subject: CN=a5a3916789d36bd488f9b0809cce3ecb0703bb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:91:55:5e:13:95:10:97:4c:1a:18:e3:3f:
7f:28:42:e6:4a:45:f9:33:ff:a9:1e:b6:be:2f:a7:
4f:96:6c:5d:5e:53:d7:18:d1:8e:84:e0:99:6b:e6:
7d:df:ce:92:92:b9:b4:91:76:bd:8f:e5:7a:51:89:
0f:f3:73:68:16:17:b1:e8:9a:a5:24:f8:f5:87:6c:
d8:41:be:e5:09:bd:9f:b9:d0:89:97:99:72:d8:09:
bc:d8:4a:51:fe:62:4a:0f:72:68:b9:6b:a2:13:7c:
2e:7a:87:ce:16:cb:e2:b2:c7:81:8e:68:0f:91:19:
3d:65:4f:83:58:cd:7d:09:a6:58:f9:08:be:de:53:
b1:81:de:33:ff:2c:19:7b:5f:1d:44:5c:e4:08:de:
4c:f4:44:3c:95:4a:1b:d3:3a:f5:e0:f5:55:5f:f7:
17:56:c2:42:c4:7a:27:30:1a:1b:36:c5:10:a8:1a:
42:df:5e:c1:56:5f:7b:1e:63:bb:ae:3b:ea:b3:53:
28:a2:2e:9e:37:e0:ab:00:12:c8:b9:8a:b4:fa:c1:
e2:b0:68:43:ab:1d:f8:14:c1:7f:85:ac:fb:21:fa:
86:ab:5a:8d:16:56:26:8a:d2:66:de:f7:af:a3:3d:
24:03:4d:54:83:7f:56:bd:3a:53:ec:18:d2:9e:59:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A3:91:67:89:D3:6B:D4:88:F9:B0:80:9C:CE:3E:CB:07:03:BB:8F
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:cc:8a:10:15:d0:3c:8d:51:13:ba:7e:52:de:80:a9:96:fe:
a2:c6:8b:88:84:f8:39:87:49:4c:e4:1b:98:c1:63:e4:f0:03:
4a:69:37:3d:01:db:23:03:12:a7:53:33:7f:2e:c2:de:e6:25:
5e:dd:43:88:eb:a9:fa:dc:c4:99:a6:54:4c:82:07:61:83:17:
62:b3:f7:fa:63:63:9f:c9:cb:ad:77:b5:eb:06:35:80:73:3f:
17:48:f3:ee:0f:ad:fe:9a:91:58:31:16:fb:97:be:75:57:02:
43:95:2a:62:c2:11:2d:5e:f3:6a:b6:c1:3a:a3:2a:da:7e:89:
01:a9:3d:49:e3:96:9e:8f:e8:95:78:d5:11:52:64:a4:dc:42:
f7:e6:43:ff:d9:89:8a:96:36:cd:8d:6d:cf:a0:56:62:e1:86:
d0:ec:03:be:a3:fb:a4:44:20:10:53:7e:82:33:a9:c2:94:26:
08:c1:ab:30:92:70:bb:55:75:2a:34:f5:0d:cd:01:56:88:6c:
5d:4a:a6:f0:f6:5f:99:5d:c9:39:67:68:3b:d5:71:01:0f:ec:
8e:91:74:60:17:89:ec:4f:05:9b:ff:97:ca:3a:67:37:53:b5:
96:c7:9a:e5:f2:e6:e6:a0:5a:94:82:56:8c:1e:07:35:cc:6b:
af:1a:b7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:44 2026 by rpki-client