Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: zBvxctdmhvU/IFb7CdnhTWc+w+2dQLn3+SqA4wNNHko=
Subject key identifier: 88:ED:4D:0C:C3:01:C1:88:58:68:4D:A0:3C:9B:2F:D9:9F:93:0B:BF
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 019FA9ABB74C217FF8FB64FBDFC4E261357E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 17:00:30 +0000
Manifest this update: Tue 28 Jul 2026 17:00:30 +0000
Manifest next update: Wed 29 Jul 2026 17:00:30 +0000
Files and hashes: 1: AeJ2zlCCxAGqIGZJMGxpfScT4aY.asa (hash: vV3sJH5TnYIMyxRcZZhNX1B1hLvxAZFKHPAv1rfCpfU=)
2: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: 6hlfEsKzC9Wx0mm1Nh27ZI1ozdWJCv3tEyOAZW6u5/4=)
3: hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa (hash: xzNRvq9UxlokWK6wW9763CTDxuLBGl6gUz0jxPwvuI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:b7:4c:21:7f:f8:fb:64:fb:df:c4:e2:61:35:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Jul 28 17:00:30 2026 GMT
Not After : Jul 29 17:00:30 2026 GMT
Subject: CN=88ed4d0cc301c18858684da03c9b2fd99f930bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:96:97:7d:c2:6e:4c:7f:d2:44:94:3c:f6:
cc:17:9a:f3:51:6f:ec:9a:39:be:e6:40:1e:6c:ee:
bd:a9:3f:15:ca:c7:70:52:a4:34:35:8a:bf:63:aa:
bf:f0:df:b3:5e:58:b2:90:48:a7:6b:06:65:de:93:
cb:c1:c7:34:7e:92:db:44:3a:a2:db:78:12:e4:0f:
99:12:18:5f:da:1b:84:f6:f9:3a:5f:18:57:ab:3c:
d2:24:9f:91:59:9e:ed:54:d8:93:61:30:e3:29:a9:
15:e3:ec:72:ba:9d:a5:2c:10:7d:1f:b5:ca:e0:b6:
73:21:16:2e:92:54:0a:e5:3d:b5:97:36:4d:19:16:
6c:0f:3b:04:29:91:0f:59:53:3e:99:ec:1b:2b:bd:
43:85:d6:3a:0e:c4:84:c2:92:7c:71:53:2e:3a:3f:
80:35:62:6c:35:ad:30:be:85:7c:1f:90:91:68:ba:
aa:1d:b8:36:11:b5:f5:14:9c:02:10:08:d0:7e:87:
8e:cb:f8:11:fb:45:54:ff:6e:c8:58:9a:df:e4:65:
15:b7:63:17:d6:72:7d:b4:02:56:22:d1:ac:94:9e:
de:cb:e5:ec:4c:94:14:df:8f:4f:46:70:4f:d1:09:
4f:8a:7c:78:a5:91:c7:4e:47:27:f4:11:ca:f4:0d:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:ED:4D:0C:C3:01:C1:88:58:68:4D:A0:3C:9B:2F:D9:9F:93:0B:BF
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e3:c0:af:07:dd:a9:b4:38:90:30:58:fd:7d:a9:c7:23:6f:
d1:12:a5:93:1c:ba:25:dc:b0:91:76:ef:18:7e:20:4d:5e:2a:
30:a1:6a:77:6e:0e:e9:9c:b7:42:37:90:eb:d1:53:28:f1:21:
b1:23:32:d4:a9:d5:46:04:9c:54:5f:8e:dd:4a:10:8d:3b:84:
84:9f:80:ca:90:32:85:f0:30:63:a3:84:c6:4c:09:a7:0f:eb:
54:5f:0a:c8:f9:0d:76:02:ab:4b:71:20:12:d7:8d:e2:d2:f5:
c6:c9:8f:d9:ed:07:1e:60:95:97:bf:f6:6d:0d:57:8d:5f:2c:
45:d3:3c:b5:4e:6e:94:34:19:02:06:c7:8d:dd:82:09:e4:5b:
64:b8:c6:84:53:b2:0b:17:db:73:96:55:67:e0:33:04:95:9c:
51:53:a3:66:86:14:86:b9:de:88:ba:99:dd:a8:95:95:16:db:
d0:a0:f8:c5:7f:88:9d:2c:65:1b:8e:6f:34:49:85:f3:fa:cf:
ee:9d:aa:3c:c8:c3:27:cb:08:ba:fc:12:2b:8d:9c:39:55:1c:
bb:ce:3c:87:cc:0a:18:a7:1f:ff:82:94:75:11:98:c1:ad:62:
02:df:f0:cd:89:7e:da:aa:84:08:47:07:b9:ed:38:41:3c:b5:
91:29:4a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:15 2026 by rpki-client