Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File: fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier: X38+Toc2e9tnLALJ6neMojbPYWRFMmofGs45w0DuHzA=
Subject key identifier: FD:40:47:A5:29:A8:12:55:BD:67:B4:F2:D6:F9:A5:5B:18:EC:B4:FD
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial: 019FAAF54294A740BC0BAFE2548D866C67BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number: 14D8
Signing time: Tue 28 Jul 2026 23:00:27 +0000
Manifest this update: Tue 28 Jul 2026 23:00:27 +0000
Manifest next update: Wed 29 Jul 2026 23:00:27 +0000
Files and hashes: 1: 9w9SZI03wkoC4C4p8xbj1xyQTSk.roa (hash: 4ZjNUluDOnXe4+ntofvgh0yoY5kqpiMhMwraHxso+o8=)
2: CfxZ0eGeh6IDIqEVp-fjZEspGOw.roa (hash: 64gVJuHjRSQovFr9XT+uIvTrz2Nlh3y9/QzHL+fzAZ0=)
3: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: JwogjTOF5KirjNKr6ska4v8zWdfIuv2SUpMuSwONgvI=)
4: hLVnBuf3u_JFi21jPT8scSeq55o.roa (hash: 9Kl/ni4B9iNPukEzlMtSOKbm3FCZbPlEMODKtlh8/eY=)
5: t9sZ-svkNCOn_aB5PqRUJcIA5qw.roa (hash: kWqIg6Zu9e2cjZJBsJNhAniK6OQKlOVK34Tp81YEZc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:42:94:a7:40:bc:0b:af:e2:54:8d:86:6c:67:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Validity
Not Before: Jul 28 23:00:27 2026 GMT
Not After : Jul 29 23:00:27 2026 GMT
Subject: CN=fd4047a529a81255bd67b4f2d6f9a55b18ecb4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:ec:de:00:68:62:12:47:0f:ff:8f:06:d9:
a2:3c:85:b6:e7:83:5c:e5:df:13:19:a4:2b:8b:af:
73:20:e8:62:19:0c:bf:c4:a4:fb:59:b9:db:5d:58:
4a:33:98:c6:3d:87:e8:9c:d3:78:81:c7:7e:14:11:
67:0d:41:87:bb:76:2e:99:31:cc:c0:af:e0:fc:82:
7c:57:dd:3b:ad:68:3f:d1:87:70:29:aa:93:12:5f:
9d:ba:45:d0:41:4c:d6:41:21:0d:11:41:b8:50:37:
22:a8:d4:79:f7:1a:c5:b0:ec:d8:78:0b:5d:49:f1:
fc:e0:63:cd:8e:1b:ca:83:4b:b9:ce:b9:d0:86:53:
7c:8d:2c:25:06:2e:8f:51:46:1b:f3:94:d8:57:85:
1b:15:b3:98:ad:5f:c7:91:ce:fc:84:ac:11:66:47:
d4:09:50:b1:29:43:d6:87:89:bc:68:87:5c:e0:84:
ac:c4:01:de:24:af:26:dc:dd:55:11:e8:b1:4a:52:
22:53:f6:f8:59:8f:83:bf:97:a7:8c:6d:e1:a5:02:
33:b8:67:29:42:af:1b:68:bc:72:5c:c9:07:d0:75:
93:31:e0:b2:9f:eb:e8:f3:bb:83:f3:21:f2:fc:54:
ad:30:64:8c:40:3e:86:28:43:15:7a:01:f9:8d:96:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:40:47:A5:29:A8:12:55:BD:67:B4:F2:D6:F9:A5:5B:18:EC:B4:FD
X509v3 Authority Key Identifier:
keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c7:da:aa:2e:b3:f6:31:ee:84:84:47:75:65:43:13:2b:87:
6f:23:25:c7:cb:22:9c:8a:cd:ec:b2:de:c2:27:52:84:f4:f4:
10:86:19:b2:62:20:af:ee:52:ed:07:80:39:03:54:49:d9:83:
60:0c:ec:ef:5f:f8:88:eb:ed:56:70:0c:6c:43:97:9d:2a:7d:
56:cd:7b:f8:45:ac:76:20:ab:64:07:e8:98:c7:5b:81:26:c7:
ca:af:2b:0a:e3:6f:dd:91:5a:de:86:8e:f6:af:8c:98:9e:68:
6b:4b:2c:9b:49:94:9b:cf:45:55:79:59:8b:6c:c1:8c:06:bf:
af:0e:95:4f:52:18:ba:66:5b:0a:3d:91:21:b6:54:83:58:88:
25:dc:39:8e:2c:18:34:1a:43:dd:86:f5:7b:10:c0:68:d0:59:
e5:60:20:29:8d:8b:27:38:38:4d:ad:e6:17:8d:53:59:eb:e2:
ee:49:a0:2d:d2:30:fd:bb:37:8c:c3:7b:53:18:b3:04:87:cf:
23:c9:25:01:e9:ab:49:0f:0c:07:e9:d2:13:d5:5e:b8:c8:00:
2d:e5:56:f8:fa:44:c9:13:52:cd:bc:7a:38:f8:5d:52:8c:6c:
91:df:56:61:72:4e:ab:3b:54:e2:49:a2:72:e8:0e:93:d2:8a:
c1:90:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:24 2026 by rpki-client