Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: lPRHgGsgyLby9P3C+1eAd/EnjbO3R5V6GApqMqDoJDs=
Subject key identifier: BA:F4:4F:44:05:05:04:5E:EF:0A:4C:74:10:D5:20:67:C1:D3:E3:C6
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 019FAA50A5675FE5541777532AB193F9706E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 1981
Signing time: Tue 28 Jul 2026 20:00:39 +0000
Manifest this update: Tue 28 Jul 2026 20:00:39 +0000
Manifest next update: Wed 29 Jul 2026 20:00:39 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: B6LYaSeJVXX59czOw94L+cxI7eCC1UTtOEEpgsjt17E=)
2: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (hash: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298=)
3: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (hash: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:a5:67:5f:e5:54:17:77:53:2a:b1:93:f9:70:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Jul 28 20:00:39 2026 GMT
Not After : Jul 29 20:00:39 2026 GMT
Subject: CN=baf44f440505045eef0a4c7410d52067c1d3e3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:89:87:99:b0:98:46:24:2a:69:42:44:ed:
38:b9:45:4d:80:de:9f:bb:bc:99:88:b4:c0:d1:42:
4f:ac:50:6b:de:20:14:dd:d5:30:7f:02:55:b4:10:
25:f4:b5:44:8e:4e:69:48:48:7c:00:8c:f3:36:71:
5f:eb:4b:bc:4e:e2:be:02:a1:e3:b4:dc:2b:3a:4b:
14:a8:11:48:6c:68:01:36:e0:81:47:ff:1d:70:11:
d1:21:03:c2:8c:c1:b2:11:ff:b9:f7:7d:50:48:ca:
3e:15:9d:54:fe:16:56:58:48:eb:7d:0d:73:0b:e6:
8f:9b:3f:04:0b:e0:fb:ab:d8:f3:b3:4b:93:9c:60:
d5:ba:c5:c7:b5:a5:bb:5a:49:0d:a2:b2:ce:a0:b2:
f2:f1:a8:57:ab:6e:f2:92:69:05:86:ba:f5:ce:eb:
b9:ba:80:76:7e:32:64:06:c5:e0:b0:1e:e6:ba:cf:
33:d1:09:67:7e:81:26:44:c5:89:8c:4f:fd:1f:b6:
06:88:31:9f:55:08:27:25:b4:38:6d:6a:60:78:d9:
e1:fe:ac:e0:06:c5:db:f3:af:72:d0:8d:19:b0:21:
94:c3:c8:17:f4:f5:59:42:2f:5f:6b:7f:c2:17:40:
0e:12:88:44:66:ea:ba:48:c7:32:61:aa:d4:9d:b5:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F4:4F:44:05:05:04:5E:EF:0A:4C:74:10:D5:20:67:C1:D3:E3:C6
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b3:fd:f7:10:64:3a:8d:1f:e5:5a:62:6f:68:d4:ab:fc:56:
9f:47:c2:b2:66:30:4b:51:cb:eb:7e:d8:16:42:32:56:8d:fb:
33:96:75:8b:9a:5d:18:f2:59:c0:e1:a6:5c:33:7a:34:2a:f4:
f6:c3:76:4a:5b:7c:cb:5a:6c:e1:7c:95:e2:73:a6:76:d2:71:
cd:18:2c:73:b8:06:9f:fd:79:df:bb:b4:d6:a1:f6:d1:7e:89:
ef:97:a8:12:7a:e8:9f:db:c6:16:29:88:60:91:3d:f4:04:3a:
43:ef:f1:6e:57:3d:e2:f5:f4:6d:c7:a3:1c:33:5a:70:39:5d:
f2:b1:ca:8e:71:ae:21:1a:b7:ea:04:15:7e:67:f1:44:c9:9f:
e9:f0:4f:ab:5a:27:33:6a:92:5a:4e:2a:1a:8a:61:c6:02:49:
e3:e8:c3:ae:88:51:da:4c:cb:b9:80:09:fd:4c:6a:3f:6c:07:
41:96:f0:2b:e3:5e:0b:bb:5b:01:23:02:11:be:4a:56:5f:86:
b0:35:4d:f5:22:1e:34:15:5e:94:a2:42:e6:ca:b1:95:44:bb:
02:57:f3:34:d6:84:36:76:00:1b:a2:e7:00:a5:f7:66:0a:50:
b8:8d:90:39:92:18:b1:13:35:83:d1:53:a5:54:9d:ae:53:3f:
88:c1:1a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:37:47 2026 by rpki-client