Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: bkL8FlKkYrtbmi4eOOEGq6zwJ5awPtNEOj78IwZ7PG4=
Subject key identifier: 32:B7:AB:A3:31:96:72:67:81:D7:BE:4A:03:BD:30:1C:8C:C9:70:5E
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 019FAD88E517B406A192E94E38779F44EAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 1233
Signing time: Wed 29 Jul 2026 11:00:57 +0000
Manifest this update: Wed 29 Jul 2026 11:00:57 +0000
Manifest next update: Thu 30 Jul 2026 11:00:57 +0000
Files and hashes: 1: 49LVYnP73rA79wdiuJHMdcdFkIQ.roa (hash: WzC9WsaFwOO23usPmJCjxbi0AXme2savY/KQqeCN0+c=)
2: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: 3GZKYBe1EkAWZXk9iGj6ht2c22CRvKaBhatMh9xreCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:e5:17:b4:06:a1:92:e9:4e:38:77:9f:44:ea:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Jul 29 11:00:57 2026 GMT
Not After : Jul 30 11:00:57 2026 GMT
Subject: CN=32b7aba33196726781d7be4a03bd301c8cc9705e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:fc:5a:ae:58:02:05:61:5f:99:ee:21:23:
be:e8:25:dc:b4:a0:c8:70:2a:b0:68:b9:33:a7:31:
cd:a1:4a:ad:d8:c6:43:28:76:a9:3d:ee:9e:dd:b3:
b4:02:5a:53:82:c0:ce:a6:a6:7a:bf:93:e8:43:22:
64:71:fe:2a:69:bd:56:96:71:67:31:c2:df:65:c4:
65:04:bb:bf:7f:6f:35:ef:1f:40:0b:4a:48:df:85:
a6:09:4e:a4:84:a2:56:a2:3e:29:88:63:f8:03:a6:
dc:ee:6b:01:04:ee:68:6f:1c:8f:c3:21:cf:4f:dc:
5e:88:6f:a4:7a:d2:3c:a6:dd:ff:c1:2e:f4:50:90:
8e:c7:e8:a3:a1:5b:5d:83:ee:5b:0a:ea:be:a9:05:
20:49:46:5d:a6:2d:ba:9b:f3:55:c7:f7:78:29:1e:
bf:37:e7:a9:b3:3c:32:31:40:e3:d2:8d:41:e5:ab:
15:81:cd:1f:83:4b:b1:27:60:c9:3c:d7:f2:88:09:
8c:ed:31:0b:bc:54:18:05:6d:1c:2d:d1:f5:62:a2:
d7:aa:62:d2:92:65:24:17:e1:21:29:2d:7b:a4:3d:
b2:33:10:53:64:50:b1:15:a9:53:78:2e:65:78:e9:
f4:8e:de:b8:dd:d4:53:4d:8e:3f:cd:cb:a8:ce:fc:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B7:AB:A3:31:96:72:67:81:D7:BE:4A:03:BD:30:1C:8C:C9:70:5E
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:8d:cd:84:9b:52:43:58:07:cc:a4:4c:ab:f9:6a:a5:4d:
b9:74:7b:e1:05:ea:be:01:cf:a9:be:0b:24:77:ac:3a:b1:15:
10:6f:ed:8a:09:9a:87:22:54:53:10:7f:c0:10:f7:f3:50:4f:
96:e7:fd:93:91:49:ec:6f:fa:67:07:b7:40:2b:49:0d:32:ea:
e2:82:be:10:2d:2e:9d:95:94:4e:f5:39:b2:84:f6:5e:87:22:
8a:6a:bd:96:aa:b4:26:e9:28:a7:96:2a:50:9d:b5:33:e7:ec:
68:a9:cd:3d:33:7b:45:56:29:8e:66:4b:83:d7:f7:33:c5:e0:
7d:4b:e6:7f:c3:4f:fa:1b:31:33:1e:7e:fa:22:ec:8a:c4:25:
97:50:6f:b7:2c:39:64:28:b0:2b:d5:9f:db:36:48:10:fd:5d:
49:8f:79:cb:23:81:9f:66:5b:7c:2d:ee:73:d9:50:bc:5c:2e:
e8:ae:82:86:f8:f0:d7:74:69:d7:d9:0e:5f:bb:a6:bd:4e:2d:
ac:a0:fc:c0:71:58:4f:62:89:5e:83:52:ff:78:a7:e8:23:db:
78:ac:c1:59:e6:35:6e:64:14:03:da:06:08:83:86:3d:30:8e:
4c:55:8e:5e:18:cf:e7:b9:6d:fc:05:39:ec:d2:5d:71:8a:a2:
1d:39:2d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:05:01 2026 by rpki-client