Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: xFuJB8JK1H17rA3evmPrpOgffYzvyhX90iPpqBw2Eww=
Subject key identifier: 8B:FC:08:0D:24:52:0C:72:EF:9C:DC:4F:98:79:66:23:B6:56:C9:E2
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 019FABD1367259B4E5D57E272D3B15373586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 12AD
Signing time: Wed 29 Jul 2026 03:00:42 +0000
Manifest this update: Wed 29 Jul 2026 03:00:42 +0000
Manifest next update: Thu 30 Jul 2026 03:00:42 +0000
Files and hashes: 1: MSIj_pvmmWV611TPzznzhVyMajg.roa (hash: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: Lly1aaa8WAdiNj2P6Ude3yxjobgiZmIkwiGPqYR/dkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:36:72:59:b4:e5:d5:7e:27:2d:3b:15:37:35:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Jul 29 03:00:42 2026 GMT
Not After : Jul 30 03:00:42 2026 GMT
Subject: CN=8bfc080d24520c72ef9cdc4f98796623b656c9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:19:db:d4:40:19:10:ba:04:a5:b4:c9:26:27:
84:84:b2:20:86:28:a2:7b:c4:a4:4d:47:0b:f3:ba:
6e:7d:eb:c1:04:82:8a:f0:23:2c:ee:ce:a8:01:a0:
3e:66:28:ba:81:5d:d0:99:01:31:43:30:e8:09:1d:
2d:14:ca:02:b5:49:87:e6:8e:1a:a3:94:3b:2f:f4:
5c:22:d1:b4:d0:bf:65:9c:04:82:11:9f:74:47:78:
9f:53:3b:51:86:40:90:1c:8b:4f:f7:78:c0:09:12:
2c:90:21:8b:fb:12:94:83:6e:5a:cf:44:c0:47:43:
23:d3:03:ce:ce:55:44:1d:cb:b9:c5:fa:56:f0:20:
71:0c:33:4b:46:ba:8b:84:41:7b:68:3f:d2:65:14:
f3:aa:fc:0c:63:0b:83:33:45:0b:66:34:ee:5d:4f:
fa:50:24:48:c7:7e:88:24:f7:40:fa:4a:7d:ed:1b:
2e:0d:83:ed:e8:be:1c:3a:09:df:a9:36:7b:f9:8a:
cd:ed:0e:a7:70:74:d1:06:03:e0:8f:cc:3f:86:1e:
f4:96:87:81:b2:b7:ca:12:c1:17:70:87:04:da:b9:
73:7d:ba:b6:e8:68:e9:45:61:48:d8:8a:50:a6:73:
a5:8a:52:46:b2:7e:04:c0:02:77:13:50:f9:31:38:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FC:08:0D:24:52:0C:72:EF:9C:DC:4F:98:79:66:23:B6:56:C9:E2
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:86:36:ea:63:54:49:73:33:72:44:d5:5e:3e:a1:dd:db:8a:
3e:42:ce:66:05:f4:80:62:d6:23:e5:b1:db:2b:89:32:b4:db:
e9:5a:26:eb:f1:f5:d2:51:0e:df:cc:37:f7:03:dc:47:84:07:
d7:ea:d1:19:23:0c:36:29:84:3d:c0:11:db:0b:d1:df:18:bf:
41:02:0c:d5:c4:8b:7a:96:2a:b3:60:0c:c5:b9:06:7b:cc:2b:
ef:3b:84:59:72:2c:a5:5e:42:07:02:99:4f:94:ee:b7:89:ad:
cd:5b:24:19:ca:7c:01:08:d5:1e:2a:18:14:6d:21:41:9a:6f:
d0:a9:df:45:12:03:4e:3a:68:93:ea:e7:29:1f:e1:1b:5a:ff:
21:d4:01:86:1c:74:2d:b5:54:a9:d1:3f:45:a8:c0:7b:4c:13:
de:54:92:71:5e:26:a9:9f:ef:61:43:66:77:62:b2:c9:9e:1c:
1a:0c:e5:9b:13:26:61:a7:ca:86:fe:f7:de:ea:8e:7b:96:f7:
ce:85:af:58:67:c5:c2:f1:be:de:b4:e7:60:57:28:45:bc:dd:
51:c9:9f:5e:37:27:40:f6:6a:ca:68:74:5f:1c:df:42:c8:f1:
c1:25:e1:44:d0:c9:4b:89:f5:ec:97:cc:9b:63:ff:75:c2:30:
2a:34:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:13:47 2026 by rpki-client