Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
File: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json)
Hash identifier: 6xjNgzaMS0LNfCMRhjO9c2v2HW4fHJQoeZ2xcvcXy4g=
Subject key identifier: E8:99:19:D2:09:BD:21:C5:85:1D:AE:8A:AC:2E:AB:A0:95:CE:C5:38
Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Certificate serial: 019F91DAC40562C1BF2D32E51AA44D51E608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
Manifest number: 032D
Signing time: Fri 24 Jul 2026 02:01:01 +0000
Manifest this update: Fri 24 Jul 2026 02:01:01 +0000
Manifest next update: Sat 25 Jul 2026 02:01:01 +0000
Files and hashes: 1: 5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa (hash: Rd6vx0quono9MPD1F0vpd55eYapHMtF51xcO/Hw6eew=)
2: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: nfkWWJxiMXl0jSDGQ5/EEEuhaLPPvR3WeJIziEEg1W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:c4:05:62:c1:bf:2d:32:e5:1a:a4:4d:51:e6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Validity
Not Before: Jul 24 02:01:01 2026 GMT
Not After : Jul 25 02:01:01 2026 GMT
Subject: CN=e89919d209bd21c5851dae8aac2eaba095cec538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:c7:f1:55:0b:c2:29:12:f2:26:88:9c:0f:
9f:6b:cc:f1:d0:f1:0e:bd:90:21:9e:0d:5a:09:a1:
2b:3f:c4:47:f7:ac:e1:35:b6:da:1c:d4:d3:df:1b:
d8:b8:a5:99:90:21:0f:97:d0:c8:19:a9:c5:f9:76:
6c:17:6c:21:91:be:c7:81:bf:31:57:97:1d:00:11:
09:0a:fa:6e:93:59:1a:83:79:89:ff:8e:e0:22:34:
c7:30:c3:ad:4f:28:a2:8b:7d:f4:ee:c8:09:1e:1c:
fb:b4:98:5d:37:fb:ba:26:1b:89:e8:5b:a2:97:08:
d3:d3:76:a9:96:00:3f:f7:29:66:46:67:07:07:3e:
b4:ed:8b:12:00:8d:8e:d1:06:b6:b1:ce:97:0c:3f:
ef:ac:c7:13:c6:07:c9:05:82:71:f7:45:c4:c9:74:
09:4a:c7:e8:db:30:de:d5:79:97:1d:9f:d9:1d:f9:
30:a0:7d:e0:a6:e4:fd:c2:98:0e:fa:29:03:08:1d:
97:aa:01:12:1e:5b:59:50:fc:96:42:c1:06:e8:d6:
1b:f9:0b:98:3d:4d:94:c0:c6:d8:c3:aa:d7:ef:dc:
9c:a0:93:aa:0a:a2:25:07:40:77:61:d3:bb:de:c4:
dc:67:6c:51:1a:b0:7f:fb:6c:3f:f9:59:5d:83:f9:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:99:19:D2:09:BD:21:C5:85:1D:AE:8A:AC:2E:AB:A0:95:CE:C5:38
X509v3 Authority Key Identifier:
keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:78:8f:e8:16:e8:1f:7c:ab:38:b0:f2:65:5c:8e:a5:28:9c:
7f:c0:8a:96:5c:35:8c:cd:d4:be:d2:ee:29:39:c9:08:5c:9b:
16:a7:fa:f7:8d:cf:38:1d:55:bc:56:77:0a:b7:94:22:cf:e1:
b8:6d:28:b4:34:6b:c6:10:e7:15:ef:8f:20:50:51:54:35:f9:
12:e7:41:3c:88:ca:46:c8:85:17:2a:42:90:44:15:e2:e8:da:
06:a0:60:25:5c:b9:61:76:a0:85:27:39:9d:b9:c6:6b:6b:a7:
c8:2f:c8:5d:22:a6:d7:04:c7:e0:5b:1b:d3:8b:01:b8:47:d0:
c7:39:1f:80:52:15:54:57:24:6f:f4:63:e2:ab:c5:aa:48:4f:
98:a1:d6:7f:5b:7c:60:1d:f2:30:de:10:47:5b:60:25:70:20:
43:b2:3a:5a:cc:5f:b2:64:36:16:87:43:88:46:a1:8b:82:06:
2a:d9:8c:d3:00:90:74:17:96:1c:ae:0b:f8:a5:3f:4e:eb:ac:
d1:ab:3f:55:7f:99:6a:10:06:bf:21:7c:59:35:c8:e0:12:86:
4f:08:0d:b3:c8:7d:52:85:3b:52:68:e0:15:5a:89:25:85:46:
16:c8:25:da:ff:f7:23:c9:0e:88:50:c6:d9:ff:1c:db:ef:aa:
18:ba:16:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:44 2026 by rpki-client