Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: cvEZjsXjgN7E9drLPLJ+tT8qXBx8GzRW+CvBWo6i4iQ=
Subject key identifier: 1A:F9:7E:42:1F:56:F4:C1:E4:9E:53:4D:2B:36:34:89:C9:4B:B2:DB
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 019F8F7F76BD62759A2D8B1B83C195238505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: 0489
Signing time: Thu 23 Jul 2026 15:02:03 +0000
Manifest this update: Thu 23 Jul 2026 15:02:03 +0000
Manifest next update: Fri 24 Jul 2026 15:02:03 +0000
Files and hashes: 1: 2QUxpcZo42MO8NPw3ViO527hXWk.roa (hash: jXv9njLEXA5SkLC2GOthlPZiLCWl9vdzZCcofBzcG18=)
2: JNor73gXz2ec5FVJvGqRzBpyxSI.roa (hash: k/2ZGjtnrbIQP29sZmOjF46Dom6I0jn9nqS/95MSEu4=)
3: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: cqRAfTlNu6SHV1CcY1JXj0gbNTZdYHEOD8OQY2QDaeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:76:bd:62:75:9a:2d:8b:1b:83:c1:95:23:85:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: Jul 23 15:02:03 2026 GMT
Not After : Jul 24 15:02:03 2026 GMT
Subject: CN=1af97e421f56f4c1e49e534d2b363489c94bb2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:0f:a1:3b:29:d8:07:c7:5d:1e:bb:7d:57:
0d:b0:f9:db:58:a5:e7:8f:7f:36:c0:05:c1:c7:a3:
aa:41:48:e0:57:34:07:be:8e:57:38:46:39:a3:ee:
07:94:dc:65:73:8c:2c:74:db:75:a6:a7:d9:fe:05:
7b:bb:fe:ce:36:7a:a1:2e:3c:a6:64:aa:b0:fd:87:
3d:85:a4:d7:ff:e9:6c:54:99:d5:bc:e8:2d:e6:58:
ae:ee:12:9e:66:4a:b5:45:2b:a5:dc:e4:6b:5a:54:
66:2f:04:c5:3c:b0:39:03:44:ff:ff:14:b1:e0:9d:
62:4f:45:ed:82:33:26:53:98:28:38:83:db:6b:5f:
f6:f9:a1:7b:36:32:a4:34:73:d7:81:42:48:9c:25:
f7:71:57:8a:73:51:1e:45:6e:ed:f2:6a:d1:fa:9f:
92:55:b4:d5:ca:f5:52:a5:c7:26:fe:a2:9d:ac:34:
5d:15:05:b9:63:41:3a:cb:96:97:d6:8e:c8:47:bd:
e9:92:b1:52:4d:a0:25:1e:dd:34:b7:e9:04:c7:47:
bf:78:4b:8b:29:e1:2c:4d:15:c9:b5:ae:10:bd:f2:
63:bc:95:f2:99:5b:4a:84:bd:c8:44:f8:82:4e:59:
5c:67:41:d6:06:95:12:48:e6:7a:54:eb:5c:01:aa:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F9:7E:42:1F:56:F4:C1:E4:9E:53:4D:2B:36:34:89:C9:4B:B2:DB
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7d:bd:a8:84:c4:53:68:f6:3d:e5:82:18:ef:98:48:60:c2:
24:d6:e7:d7:95:09:ad:8d:52:df:a5:72:1a:26:c4:96:8b:5f:
e6:7b:65:9a:95:03:18:1c:7d:d4:54:f0:44:0b:70:ce:44:ab:
45:03:13:a1:f9:62:d0:51:1f:a3:0f:88:16:00:51:9a:56:9d:
70:02:e4:5e:64:f8:90:52:0c:a3:02:e8:20:b2:72:5b:e4:11:
b8:b9:da:f9:e9:85:bb:97:96:8b:f6:ed:83:58:9f:16:ce:3b:
b4:7f:18:52:37:07:4e:53:c4:46:94:ca:ee:3a:19:65:f5:72:
05:20:c8:9b:ef:09:20:bf:54:fa:18:0c:ca:4b:b5:a3:fd:f3:
34:d5:51:d8:b1:93:cf:ad:92:2f:6e:ed:95:c0:52:b7:15:14:
a8:30:3f:2f:84:f7:3c:50:89:fa:ac:be:f0:71:e0:bb:49:4e:
09:46:e1:78:59:cb:7e:0d:3e:96:b7:43:44:de:0e:01:f7:ff:
fa:30:1c:5a:8f:e1:f3:69:84:93:3c:c0:33:dd:da:78:3b:48:
6b:fc:80:c1:58:68:4e:57:c9:59:45:62:94:2c:34:b7:d3:c4:
d6:f1:cd:07:38:5a:fd:bf:2e:ca:76:24:2e:9e:0b:7b:a4:58:
70:e6:63:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:43:05 2026 by rpki-client