Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier: 30ZHNt+b9HfWLBXtbZ9/ODjRAGAQrG+z7hkABf9U+Ns=
Subject key identifier: 8E:6A:4C:86:65:CA:98:26:BD:4B:A7:A9:55:4A:73:E4:12:05:9B:79
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial: 019FADF6A8AD352BF6F6FB73FB958AFD3D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number: 0EDE
Signing time: Wed 29 Jul 2026 13:00:51 +0000
Manifest this update: Wed 29 Jul 2026 13:00:51 +0000
Manifest next update: Thu 30 Jul 2026 13:00:51 +0000
Files and hashes: 1: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: te7Ny2ZyQtEMfF4nwxqpbtucAoNEU+cRoUi8tIxVZVo=)
2: iuDASUb0OcEG7E9NhPvGrlzMShY.roa (hash: ap/QCleQpzEp2XCCBDxsxK10769HbmIBZHWPFMwID/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f6:a8:ad:35:2b:f6:f6:fb:73:fb:95:8a:fd:3d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Validity
Not Before: Jul 29 13:00:51 2026 GMT
Not After : Jul 30 13:00:51 2026 GMT
Subject: CN=8e6a4c8665ca9826bd4ba7a9554a73e412059b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:bb:d0:1b:6d:9f:ff:b8:3d:09:55:e7:12:
f6:80:fd:04:7f:34:9e:16:4d:7b:4c:d4:8f:27:15:
dc:38:8c:33:75:81:a9:3f:21:09:35:4c:c8:6e:a7:
cd:83:36:97:f1:38:68:ca:92:f1:41:73:6c:0a:7a:
f7:b9:9e:c0:56:3f:60:5f:ce:a7:fd:19:45:55:92:
4b:47:b1:76:3f:57:78:56:a4:22:0b:ba:13:81:2d:
b0:dc:0d:66:af:d5:31:68:a6:f7:6b:6f:4a:3f:cc:
1c:42:21:f1:bd:d1:ee:2f:f4:59:58:06:e1:c6:c2:
1a:3c:61:f8:87:d9:c4:25:0c:5a:6e:f3:4b:ce:af:
1d:4a:13:ed:99:e0:d7:2a:32:b8:d7:72:46:4b:0d:
a6:19:6f:51:df:9c:0a:0e:46:e7:91:ad:ba:c7:bb:
2f:e3:50:9a:ca:2d:a8:4f:68:94:68:17:78:75:c8:
4e:e7:08:47:3b:7b:a6:46:4f:fa:09:69:92:17:15:
e0:00:f1:7c:45:a7:ac:64:16:e3:97:a5:59:9b:7f:
8b:69:97:13:1c:d1:2c:08:0b:28:be:6f:05:0d:d3:
63:c7:59:e6:89:9e:5b:8a:0a:fa:30:7e:fc:77:81:
52:6c:a7:11:f3:63:bc:f4:fc:db:7f:b8:9a:69:dd:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6A:4C:86:65:CA:98:26:BD:4B:A7:A9:55:4A:73:E4:12:05:9B:79
X509v3 Authority Key Identifier:
keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:78:22:dc:66:e5:e7:c9:b3:da:01:7e:e3:90:c3:0b:d7:d0:
b5:3f:ce:5f:a4:4f:b9:9e:ff:d6:e1:21:ed:cc:4a:e5:34:6e:
87:ef:d5:0a:42:39:f8:c0:b3:27:68:b0:3a:29:b1:95:d6:82:
34:88:89:f2:ee:71:33:33:e6:fe:26:41:21:1c:14:35:93:8e:
e1:b0:5d:46:76:43:ca:d3:d8:79:7a:f9:de:03:38:6d:fb:f7:
9b:a8:c7:93:c4:58:99:18:9d:c9:1c:83:8a:f8:c5:d1:e2:55:
79:e1:da:d8:b4:50:ad:c0:da:df:51:cd:dd:8e:b3:6c:4a:a8:
7a:f6:10:d9:fd:c4:87:1e:71:d0:fc:45:5b:0c:9e:ea:5e:37:
73:d2:d3:54:72:8c:e6:e6:f5:e0:45:54:cf:e6:05:1a:1b:ef:
e1:49:b2:3e:d8:e6:7d:f1:91:94:90:e3:60:14:07:d6:af:73:
51:4a:09:f0:a4:cb:8e:d8:25:bc:21:ac:8f:e7:0c:d5:a7:4c:
57:e0:4b:d5:17:75:91:19:19:69:c9:15:30:bc:52:57:a1:85:
0d:86:67:d0:88:1d:0e:51:5a:c1:36:29:8f:ef:b3:6c:bc:38:
fd:c6:7a:d8:d8:dd:3b:8c:50:64:1f:8c:20:dc:42:13:b1:fa:
ab:6f:82:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:01:47 2026 by rpki-client