Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: ZRqCz/uNs0hbsBHN4PbEwsycA02t3gqrFCCcYls27JE=
Subject key identifier: 2C:95:93:5C:CA:C1:C4:7B:18:9E:EC:7D:78:7A:44:79:3C:91:27:65
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 019FA86208F5469F72F94FB57B70EF82F4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 11:00:24 +0000
Manifest this update: Tue 28 Jul 2026 11:00:24 +0000
Manifest next update: Wed 29 Jul 2026 11:00:24 +0000
Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: RRmGTIdp+YiBAXpbcLQzBGVebroZPzSYMXkvP+2JoSQ=)
2: ZWBJxYdw0yqefP_6w5hTElTjn_w.roa (hash: ka3/3w04e1WBZfQiP+cb8ld/BzE1PNW9ESTV22owMjY=)
3: nQOGLsDTu8U8pFDRgHktBs12LXo.asa (hash: fwzFvF5IHbE+z4rN1nerwJCzmr6g02nn5C2pFL2CM0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:08:f5:46:9f:72:f9:4f:b5:7b:70:ef:82:f4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Jul 28 11:00:24 2026 GMT
Not After : Jul 29 11:00:24 2026 GMT
Subject: CN=2c95935ccac1c47b189eec7d787a44793c912765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:08:11:c2:f0:6e:c5:6d:f6:75:3c:76:92:
ef:88:3d:90:4f:72:a9:5a:dc:4d:80:1d:92:93:f9:
92:46:1f:bb:85:01:9e:24:b3:d0:a5:ac:c8:f3:e1:
38:d9:02:b6:79:91:e0:b8:15:b0:be:6a:aa:23:a8:
43:b6:9c:b0:70:47:46:70:a5:02:98:60:f5:ba:dd:
c5:9b:40:cd:33:dd:f4:79:5f:f6:14:ce:31:c2:30:
45:97:47:e4:dd:80:63:ca:ef:7f:41:0d:e0:a1:fa:
d7:0d:a0:18:64:5a:11:c4:60:99:a5:ec:37:e6:4f:
d3:86:8c:3d:db:26:7b:42:ee:6e:f5:4e:22:eb:bc:
80:31:f0:bf:52:5e:88:2c:3a:1b:c3:03:f1:e0:02:
e1:4f:22:01:34:01:da:a7:1b:0e:73:3d:49:c9:20:
6d:c8:0e:87:b4:1b:28:9a:b6:d5:c0:04:3b:0d:de:
03:dd:6a:d9:95:18:a0:2a:4c:d9:a9:a8:ee:ae:7b:
82:44:9f:bd:b3:cc:6c:a9:46:d8:c4:e1:a7:5a:34:
43:9b:19:7e:28:c1:2f:4b:74:8a:45:eb:64:bb:40:
eb:d8:10:6b:76:0c:8c:55:b2:4a:db:a6:11:43:7e:
16:37:da:60:1a:56:0b:4d:a6:59:03:42:8c:fb:70:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:95:93:5C:CA:C1:C4:7B:18:9E:EC:7D:78:7A:44:79:3C:91:27:65
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:28:67:74:6b:63:b0:ab:bf:82:9f:c0:60:f0:9b:e2:76:5a:
45:1e:8a:49:7c:a5:ed:57:8b:82:bf:67:59:7f:f4:87:f7:b6:
3b:1c:6b:9e:a1:11:84:6d:aa:b7:7f:4a:d5:50:49:8b:f9:09:
11:ee:6b:44:09:69:e4:ef:e5:0c:7d:16:1e:d5:4b:86:4b:e8:
99:53:eb:3b:ba:95:11:ad:f2:25:71:df:b2:38:27:42:b4:eb:
c0:a5:d7:ed:a7:1a:1e:98:83:30:00:d0:b3:ed:84:b0:90:17:
28:2e:ec:2a:79:72:e9:55:59:ea:a0:58:75:14:35:e2:93:6f:
07:25:09:58:fb:ae:c8:fb:51:c2:e7:32:36:80:9c:4a:fd:03:
b8:11:69:84:f8:40:53:42:1a:c7:33:aa:a8:49:84:4f:8b:e4:
43:61:96:22:c9:85:3a:fc:6a:f6:f0:50:e4:8a:f3:2e:ce:07:
22:a1:d8:58:95:a9:6f:b2:58:b5:e1:13:d7:93:7b:c8:43:7d:
6d:eb:0a:28:5d:6b:74:07:b2:6c:3b:86:64:5e:e8:d8:0b:04:
46:e4:0b:c3:eb:48:d0:ed:aa:d3:8a:4c:0d:76:1f:88:9a:ac:
23:95:5d:cc:16:2d:22:c0:fc:68:9d:a3:cd:8c:53:d9:82:5b:
a5:d7:57:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:33 2026 by rpki-client