Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
File: fIbxOptyHNGGn7uXTuU9kAIuqiw.mft (raw, json)
Hash identifier: 867pVdBcrqCeLbtuVQ84W6kWLgacKjWoo4AyuhAGLTc=
Subject key identifier: EC:85:06:E1:50:22:38:AA:22:59:5B:5F:C0:D5:66:28:B6:60:26:D7
Authority key identifier: 7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
Certificate issuer: /CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Certificate serial: 019FA907ABE31F2C8755304DD1478F53CA48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
Manifest number: 0A5F
Signing time: Tue 28 Jul 2026 14:01:19 +0000
Manifest this update: Tue 28 Jul 2026 14:01:19 +0000
Manifest next update: Wed 29 Jul 2026 14:01:19 +0000
Files and hashes: 1: f4bD2j2ZctfyMRffHbpMKHwXRSU.roa (hash: rtGJzd+eO3rg+u8EKiSavSngCqzv1WolCN9nYYZQY64=)
2: fIbxOptyHNGGn7uXTuU9kAIuqiw.crl (hash: 2VyfatBTYRFWQp5x7W4LkjScUnCO6wsJ1k1vh1Tmzhg=)
3: sWzc9UukZssUn_EjgB277LtZfe4.roa (hash: pyPZe27dAwl2biV/QtNdOvZ13e3NYVb6oI5PNCsGFz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:ab:e3:1f:2c:87:55:30:4d:d1:47:8f:53:ca:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c86f13a9b721cd1869fbb974ee53d90022eaa2c
Validity
Not Before: Jul 28 14:01:19 2026 GMT
Not After : Jul 29 14:01:19 2026 GMT
Subject: CN=ec8506e1502238aa22595b5fc0d56628b66026d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:53:61:a3:02:d1:5e:e1:e3:62:4e:25:19:
5a:ed:ba:9c:83:a5:a9:18:2d:45:93:c9:ed:8f:ac:
cc:5c:3d:e7:27:9e:ad:7d:5c:b7:f8:91:d7:74:9b:
d0:29:1d:71:de:1a:84:73:74:60:4c:b4:00:41:dc:
90:b9:9e:04:2f:cd:c2:9f:0a:28:dc:2a:57:81:ea:
20:2a:07:3e:9e:8f:2a:0b:f2:43:1c:da:bd:9e:5b:
bc:5d:fe:da:e5:1f:f8:21:7a:56:88:ed:0f:57:6b:
87:e2:43:1c:ed:f9:19:f4:71:0c:91:32:1b:a6:6d:
9a:dc:1f:37:6e:45:61:93:6c:9f:9b:89:ef:bd:fc:
ca:9c:ce:f5:25:5a:16:d2:c4:6f:43:8f:9d:5c:23:
17:be:58:f9:e0:be:dd:d3:95:8e:ce:7e:0e:99:01:
f0:06:ca:68:c3:75:56:cb:e1:d0:48:de:d6:34:c8:
ce:63:fe:5c:aa:8a:ce:29:9d:8b:58:b7:e5:31:fc:
a4:ee:c3:5f:69:b3:41:9d:13:49:0a:8c:12:e0:38:
5c:7e:3a:18:42:f6:54:2e:52:f7:2c:da:ca:43:0c:
71:24:fa:ed:6f:29:93:d2:ae:ca:73:20:2c:38:2f:
55:dc:c2:89:9d:92:8c:d6:c6:3e:1d:9c:09:b3:e8:
9d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:85:06:E1:50:22:38:AA:22:59:5B:5F:C0:D5:66:28:B6:60:26:D7
X509v3 Authority Key Identifier:
keyid:7C:86:F1:3A:9B:72:1C:D1:86:9F:BB:97:4E:E5:3D:90:02:2E:AA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIbxOptyHNGGn7uXTuU9kAIuqiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/607721-00ff-4581-80e5-6fa84402d6a0/1/fIbxOptyHNGGn7uXTuU9kAIuqiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:aa:d5:11:8e:4e:68:7c:79:8b:a3:6c:7c:6e:f5:dc:47:9f:
90:aa:c2:a1:93:6c:23:a0:d0:f1:08:4b:64:36:2e:83:62:f3:
05:26:47:e5:e0:93:58:1e:cb:7e:f0:b0:34:b4:3c:59:00:54:
11:9c:78:e4:ae:10:35:2c:bf:c6:87:ea:23:c1:75:26:d5:6d:
8c:94:31:f0:bc:c3:e2:64:41:d2:3d:4b:95:c9:6b:91:36:9a:
c9:95:5f:9c:1c:15:cb:98:ae:85:af:2c:4d:df:49:94:1a:4c:
45:36:f8:1a:fe:49:96:4f:25:97:e2:4c:4e:ec:70:fa:44:a2:
5d:8c:d1:b6:61:3d:69:33:36:f4:8b:aa:b3:38:a2:eb:06:eb:
9a:90:da:35:fb:ec:42:85:f8:ff:3d:68:91:3c:a0:b3:55:af:
8a:ea:9e:ce:a8:4f:57:ea:81:51:ee:53:06:75:ae:65:71:7b:
bc:17:f2:47:d5:6b:ab:be:ca:f7:f1:d2:de:62:76:44:29:e0:
ae:fe:96:6c:db:93:8f:35:38:9c:d5:ff:02:71:0c:4b:42:ec:
dc:a7:7f:bf:9a:d1:a8:1d:fd:63:29:4b:d4:a9:bf:7a:8d:28:
f1:05:8e:c1:ec:c0:eb:74:b2:77:64:27:fb:fe:8e:9e:dc:21:
32:f4:79:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:13:01 2026 by rpki-client