Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: SOOWe4ZfvG/wUdFCAJYKgdkucTG2cHMwywcn4lG2lOU=
Subject key identifier: 84:BF:C5:70:74:B5:05:FC:E9:AB:4C:E0:A0:D2:06:39:DD:F5:45:14
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 019FAC3F5CC9DF3B719643544060056150E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 09FF
Signing time: Wed 29 Jul 2026 05:01:01 +0000
Manifest this update: Wed 29 Jul 2026 05:01:01 +0000
Manifest next update: Thu 30 Jul 2026 05:01:01 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: qZspVm5j5Z+ZDQP9U3LNsr6ulpc1vN4JGr3zu47Uzk4=)
2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:5c:c9:df:3b:71:96:43:54:40:60:05:61:50:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Jul 29 05:01:01 2026 GMT
Not After : Jul 30 05:01:01 2026 GMT
Subject: CN=84bfc57074b505fce9ab4ce0a0d20639ddf54514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:47:27:e1:cf:d2:ed:88:86:18:50:0a:ae:10:
f1:b6:85:1b:99:30:b0:09:62:e5:ef:26:a7:7f:85:
1e:51:26:47:36:48:4f:d6:87:c0:bf:ef:35:1c:35:
f9:5d:48:f5:8d:f8:c6:13:18:9a:a8:bc:31:51:9d:
0d:cf:d6:e1:80:5a:b5:f1:9c:d8:8e:78:54:8d:83:
97:c9:07:52:55:8e:74:0c:19:e1:93:2c:33:c5:b9:
c0:36:b0:d3:cf:2c:cd:af:3f:e7:43:9c:1e:0f:35:
dc:ed:00:18:5c:b9:7b:84:44:ca:c8:95:cc:54:15:
69:b8:30:35:7f:f9:4d:af:23:37:4d:20:d6:fe:4a:
63:a1:57:2d:64:7a:fc:5f:0f:5b:5f:b8:f4:d9:0e:
ba:13:58:77:2e:bf:bf:bd:f1:92:19:f1:85:f0:da:
05:26:3e:20:c5:4f:e5:a0:15:3d:af:64:e0:1f:4e:
e0:85:10:03:fc:9e:7c:c7:b8:8c:7a:b8:c0:ba:9e:
6e:9f:ee:4e:71:99:7d:8d:ce:b8:8d:df:45:bc:b9:
eb:5c:26:35:94:9d:87:08:27:54:fe:91:e6:39:73:
de:b4:10:4b:8b:58:1e:ef:37:fd:be:a5:81:0e:81:
76:42:52:88:6b:de:4a:fe:f8:b5:26:18:c0:2e:30:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BF:C5:70:74:B5:05:FC:E9:AB:4C:E0:A0:D2:06:39:DD:F5:45:14
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ea:95:df:4f:9e:86:54:b5:31:71:f0:f4:5b:39:1d:6b:7a:
59:34:d4:fe:a5:5f:4b:2b:57:0c:06:6f:08:d0:ef:7c:78:0d:
43:6c:96:54:3f:3b:bf:a5:76:d3:99:e8:96:50:bd:b8:45:73:
92:58:3f:d1:40:73:8b:3a:fb:2c:5d:cb:24:52:14:04:bc:58:
86:64:62:8b:3a:2d:d0:be:ba:06:cc:54:fa:01:cd:a3:2e:48:
70:ea:96:f5:14:a3:89:19:d0:2a:3b:2c:6e:b2:12:7c:17:8e:
5a:4c:35:1f:a8:6e:73:b7:66:83:ff:86:d9:48:4b:b3:b7:31:
15:0c:90:c3:e9:88:84:c6:2a:43:b9:f3:88:be:f4:bf:2e:4a:
29:66:e1:5c:f2:8e:b5:cd:db:d0:b8:48:a9:5c:6e:60:e9:f0:
e4:38:0f:b5:26:68:ef:d7:84:82:ad:62:09:33:68:2f:63:8b:
d4:86:09:3c:76:dc:0b:3a:2a:c2:0d:16:3d:e1:e1:dc:60:0f:
3b:d7:92:f8:f1:9e:05:20:62:2b:35:f1:26:30:14:9f:5e:f2:
da:07:1b:55:c9:db:1a:5f:4b:16:b3:d4:e3:57:9a:fa:c7:78:
55:47:f8:8a:f1:e9:ca:53:f1:af:34:56:0f:fa:11:c6:74:39:
e0:18:a7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:46:13 2026 by rpki-client