
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: Ol7s9qfWe+S7rIZojG3sK7fTEZ3wXye4b5nn73i7tIQ=
Subject key identifier: 85:BE:37:57:D9:09:98:C6:65:AA:86:C2:07:A7:EB:15:F9:3E:27:FC
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 019FACACA1952FD3595804183980B9AD1635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 10E9
Signing time: Wed 29 Jul 2026 07:00:22 +0000
Manifest this update: Wed 29 Jul 2026 07:00:22 +0000
Manifest next update: Thu 30 Jul 2026 07:00:22 +0000
Files and hashes: 1: FG6edaLthXtNRXgQz784XZNgYd8.roa (hash: 5nX8hTmpLoy7w0liaeZHVLXCjdNjFlEQzahTMpZo9sE=)
2: PPe7b3DP3EbyqgiJ60wDtHpl8Tk.roa (hash: gl6f8DXeLthMCjyLTaJ3OgpTkOvLgi2P9WVTX4qF9dE=)
3: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: 9RSBEjPHUYBHKzt26X92P5ST+i2zx+2kPdBAWwSEJXg=)
4: iAcU8TmU3XO9pInkys3o4nP2d1o.roa (hash: 8kLlqWjTG7qODVMxiGmAdLlFMj+sGZZsSvd11HBghdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:a1:95:2f:d3:59:58:04:18:39:80:b9:ad:16:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Jul 29 07:00:22 2026 GMT
Not After : Jul 30 07:00:22 2026 GMT
Subject: CN=85be3757d90998c665aa86c207a7eb15f93e27fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:41:13:c8:0e:7d:1a:e2:37:2a:49:1c:44:8e:
8c:db:f2:5d:2d:4a:84:e7:c8:f2:a6:49:4c:da:84:
57:f8:dc:19:ad:38:d2:e3:76:8f:31:9b:92:73:4b:
5e:d4:8b:65:cd:dc:80:9f:e7:c4:05:30:20:96:27:
a9:a3:fd:5a:9f:29:79:8b:de:e0:f7:e0:b6:97:26:
31:56:b3:cd:1a:0c:30:a4:7e:0b:cd:f1:5c:d1:91:
ed:c9:a3:0d:64:92:45:31:09:e4:e0:45:f4:d4:78:
86:74:de:74:71:ec:48:55:4e:8e:48:1c:7b:89:c5:
f7:5a:22:77:e5:9e:9a:19:85:4c:85:45:25:32:97:
9e:94:65:e0:34:a5:14:0c:3e:c1:45:0b:c0:5d:f9:
74:a8:6b:f4:97:89:40:a7:a0:1a:71:d3:2f:d9:79:
8d:22:d9:a0:7c:02:f7:d0:ea:1a:0b:98:e4:14:83:
6c:41:97:13:3b:a7:e3:8c:68:6f:e9:bb:ca:5b:cc:
44:53:6c:0b:2c:f7:96:ee:70:9e:6e:79:69:a6:50:
7f:3f:03:cc:ee:31:66:b4:2b:c2:07:96:ae:3d:d2:
c4:bf:9c:91:45:2f:48:24:e4:6a:5a:35:20:a8:c7:
ce:aa:6c:ad:c2:c0:5a:06:e6:1c:10:80:55:32:b9:
4d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BE:37:57:D9:09:98:C6:65:AA:86:C2:07:A7:EB:15:F9:3E:27:FC
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:65:fe:b1:8b:c5:d2:cc:87:07:4e:ad:e7:f0:f9:08:8a:
8d:8d:55:46:1e:35:fa:63:a4:52:f8:8b:8e:75:67:03:b2:c3:
97:96:9d:ae:c8:6e:d1:df:33:7f:ef:cb:82:70:5c:21:25:9e:
91:ce:59:11:02:8b:8d:2d:ec:e6:60:01:51:95:36:97:20:c5:
61:5a:f3:fe:b7:79:ce:43:fc:aa:3b:dd:59:69:42:19:0f:69:
a2:11:21:a3:6d:4f:e3:49:c0:6d:b3:4a:30:69:4d:12:73:cb:
5f:23:e3:e6:20:f0:a2:25:6a:c1:22:c1:2b:8e:67:31:b7:ea:
0a:31:34:b4:1f:2e:96:2c:46:5d:e4:06:34:1c:fc:b1:c9:9a:
cf:ad:43:37:28:9d:fc:f7:58:a6:7a:db:87:e2:3f:24:51:b5:
1b:aa:8a:9e:77:62:84:82:a8:11:a6:77:4b:4b:d2:f5:13:34:
30:26:a3:e1:54:05:69:6f:8d:e2:dc:d4:c7:b1:78:ff:4c:91:
b8:3b:02:ff:50:41:83:5a:3f:e7:f0:ae:90:33:d4:e3:b8:1c:
65:ef:dd:34:36:63:d7:c6:29:1e:0b:68:4b:6b:38:93:5b:86:
29:4f:19:fe:68:9b:0e:fa:c8:78:55:a0:3c:b8:1a:41:27:83:
80:9b:6f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:07 2026 by rpki-client