Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: XjiJDu41PIeoMkWdXUOCfOKCyVEYcRlVaCHrHKWjpM8=
Subject key identifier: ED:C2:60:7F:94:44:C5:BB:CD:60:AC:F1:C6:AB:93:C2:D7:DF:0C:74
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 019F94DC283201765B97454687796C1A1125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 0559
Signing time: Fri 24 Jul 2026 16:01:23 +0000
Manifest this update: Fri 24 Jul 2026 16:01:23 +0000
Manifest next update: Sat 25 Jul 2026 16:01:23 +0000
Files and hashes: 1: 0hS-dXastI13cpwFNDpfMzpMJMo.roa (hash: /PWpz2GpXrpBSZf2HusroGndm5V0a7tNkaagb+MoyqQ=)
2: T2C7WIfF0wbXIdpisxkUUAqC7Vg.roa (hash: IG8wYbRO9EgR+lhTadWwp9VBM4VCFO/ElkXU+SiTN5o=)
3: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: N4pf9sESDm5Vu0Hle3hjyMI3piVaKNbaILeRxYB7G9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:28:32:01:76:5b:97:45:46:87:79:6c:1a:11:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Jul 24 16:01:23 2026 GMT
Not After : Jul 25 16:01:23 2026 GMT
Subject: CN=edc2607f9444c5bbcd60acf1c6ab93c2d7df0c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:47:41:a0:52:34:e2:07:11:b2:0f:84:9d:
94:90:72:3a:cc:d7:35:69:10:4b:0a:42:9e:3d:4c:
8e:fb:7e:c0:d9:6d:d6:68:c1:19:4d:6e:75:54:ee:
35:e0:20:6f:c1:b9:66:ea:51:a0:62:fa:69:c8:3c:
dc:a7:c4:89:55:cf:cb:47:74:9e:5d:f4:5c:41:55:
1e:38:93:5e:05:5e:b0:b4:cd:19:57:9f:7e:ab:68:
6d:f3:bc:29:d7:e2:10:59:9f:18:94:be:2c:2a:06:
a8:a8:a3:e8:d7:24:45:9c:2d:82:f2:d4:20:c1:f3:
29:87:0b:1b:e2:78:a1:9e:28:95:d0:bd:8a:6d:be:
bc:df:f4:16:70:5c:8d:fd:6a:48:2b:65:7c:97:45:
1b:fc:ac:83:c5:2c:a9:95:3c:0f:10:a4:cc:ca:01:
03:b7:39:3c:c3:6c:74:0c:8a:9d:33:16:ab:d5:28:
45:b4:43:1e:7f:01:81:28:19:ee:1e:aa:a4:9d:92:
0f:1c:a3:70:f3:a5:46:42:82:66:2a:f6:c5:13:48:
fd:0d:e7:5d:c5:01:2a:b0:c7:27:cf:eb:6c:32:5b:
ed:50:18:12:00:9e:b5:04:7a:5b:dd:8b:10:a2:10:
0e:40:92:8b:b5:5c:4c:df:c7:7a:86:e6:97:0b:f5:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C2:60:7F:94:44:C5:BB:CD:60:AC:F1:C6:AB:93:C2:D7:DF:0C:74
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:be:aa:2a:ef:44:d1:dc:9a:1f:9a:79:0a:b9:fa:78:ec:cc:
a9:72:4f:2c:1e:40:3e:c0:9b:36:56:6e:a6:b6:81:9c:9f:f7:
c8:19:90:11:7f:1d:2f:4a:df:18:f7:16:12:8f:67:c4:66:94:
bb:71:b7:8b:fe:c6:0b:1c:1c:88:9d:72:65:bb:f8:0b:58:35:
30:ca:33:45:0d:d7:6c:41:12:d6:09:f2:01:7b:b2:94:44:0e:
06:c0:f2:4b:43:ff:7e:3a:26:6d:2c:67:6b:93:c8:c8:81:f3:
22:60:86:5a:15:5f:77:03:9a:83:50:90:e7:af:b0:ee:93:bb:
5e:92:d6:cf:4e:92:33:09:0c:e8:74:83:1a:e0:b5:fb:91:9b:
6e:45:af:f3:b1:59:1a:9c:18:d5:9b:b0:eb:22:d1:81:f9:75:
f1:08:bb:dc:72:5b:62:0c:fd:d0:cf:2a:6e:46:ae:8f:7d:3c:
b8:e5:da:89:00:86:21:ce:07:91:ef:12:57:85:b1:45:af:16:
7b:53:74:96:6f:d9:80:49:21:07:e7:35:4e:fb:3f:0e:0d:42:
fa:b5:f4:05:02:af:2e:fb:cb:90:42:9a:4d:71:be:b4:ae:07:
1e:0b:05:69:e3:e3:96:e9:87:bd:36:45:dd:f7:fb:90:bd:db:
25:94:d0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:54 2026 by rpki-client