Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: rBUsJ4LaMgaHQkoYqI6b9+VTKbauUNnHPfiM5cd4PB4=
Subject key identifier: A3:D3:B7:95:12:AC:5D:23:E4:BB:7B:2A:5E:85:93:04:C1:66:E7:AA
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 019E1D5927B6C4BE882324CACE7EB6165705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 13CC
Signing time: Tue 12 May 2026 18:00:42 +0000
Manifest this update: Tue 12 May 2026 18:00:42 +0000
Manifest next update: Wed 13 May 2026 18:00:42 +0000
Files and hashes: 1: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: SYeLHq+snZBPY1OAemY+AQWhgqiRovVQmte2aC9kFXA=)
2: lTrIYbwh25WZaMx9FTa-lJOaOXw.roa (hash: yIg48QwH4K69I8dvoAjoM5Eex+bVMTIw9/IsxOLJtfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:27:b6:c4:be:88:23:24:ca:ce:7e:b6:16:57:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: May 12 18:00:42 2026 GMT
Not After : May 13 18:00:42 2026 GMT
Subject: CN=a3d3b79512ac5d23e4bb7b2a5e859304c166e7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:9b:34:3f:76:ed:e5:a3:0a:58:32:e0:a2:
c0:e9:31:4f:f1:05:2f:6e:03:ee:54:d7:d1:71:b2:
60:97:36:0e:03:47:c1:55:73:07:cf:2c:1c:d7:bb:
40:23:88:68:81:db:7d:66:2c:9b:c1:b5:63:9f:da:
47:57:aa:bf:fb:69:23:52:db:be:9e:bf:b2:01:3b:
13:25:b8:91:d1:ec:d6:b8:ca:11:25:e7:22:8b:3c:
ed:16:b2:f4:93:09:23:6f:4c:b7:15:be:14:bc:07:
00:96:95:98:5a:88:d8:03:29:37:12:a6:f3:b8:41:
a0:62:25:8e:ac:05:fe:7a:4e:f4:d0:54:02:b7:9b:
58:fc:9d:8f:a4:b2:71:37:b3:7f:f7:a9:ae:8a:2a:
8c:8d:e3:9a:e9:52:31:cb:34:8c:35:c8:16:33:f0:
c8:d2:2d:fe:90:9d:ec:19:f9:27:f3:aa:3f:8a:e2:
4a:42:e5:9a:e4:58:cf:68:5f:cd:23:e2:e1:30:53:
ee:79:f3:8d:a9:3b:ad:fa:99:3f:1e:d7:2a:5a:e5:
45:ab:a4:26:38:c8:92:0e:30:d7:75:6a:3f:9d:b0:
3b:5c:ef:fe:38:3f:b1:22:58:64:9f:e5:0d:6e:6b:
21:23:a4:f3:7a:19:b7:2c:ad:99:25:77:13:90:2c:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D3:B7:95:12:AC:5D:23:E4:BB:7B:2A:5E:85:93:04:C1:66:E7:AA
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:97:ed:49:56:7e:25:2f:97:f5:76:6b:13:73:b3:ab:ec:56:
6d:08:2c:09:e6:9b:f9:23:0f:40:e8:c1:d0:cd:8c:47:a4:bd:
e5:31:cc:7e:a7:f7:d5:85:2d:0b:ac:d1:cf:24:0b:c2:b5:79:
13:61:24:0e:79:f1:44:e6:cb:2b:35:eb:05:59:49:b1:e7:ad:
1d:3b:59:6b:76:51:e1:10:03:cb:b8:90:47:5c:a7:cb:0d:5a:
db:27:69:66:17:ff:b6:9d:56:79:ef:f3:67:46:f2:eb:72:d3:
e2:bc:dc:2f:e0:0f:1d:39:f3:b7:05:d4:81:24:1c:cb:d1:13:
85:85:63:26:4c:f4:21:75:27:23:8f:a5:46:9c:ed:52:56:bf:
d5:b9:a2:74:ee:1c:0e:99:da:7b:b6:bf:6b:21:f9:82:9b:4c:
94:6f:bf:d3:d8:df:d3:af:b1:e4:67:ea:8b:7a:70:2b:54:58:
d6:58:93:83:c5:7b:d1:fb:3d:3d:54:8c:be:b5:7d:d9:60:b0:
42:c8:c3:4a:56:1a:80:ef:e5:4a:39:71:15:81:00:9d:12:11:
e1:e6:54:a3:e6:78:e4:0b:86:25:1a:84:a6:81:5b:1a:48:8f:
5e:69:7b:de:1f:7d:d8:37:17:ee:0d:8b:7f:14:50:19:01:87:
47:fc:b2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:36:07 2026 by rpki-client