Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
File: fEDTjH5rzUtq76C7Ss17ZEznGkc.mft (raw, json)
Hash identifier: XO/SfOhcEOZ3hZ+5bphXVOBjGPhnIUWN07+0tmQxfmA=
Subject key identifier: B9:ED:0C:5B:33:10:74:F5:8E:A7:18:7A:A3:3A:FA:2A:64:7D:DF:BB
Authority key identifier: 7C:40:D3:8C:7E:6B:CD:4B:6A:EF:A0:BB:4A:CD:7B:64:4C:E7:1A:47
Certificate issuer: /CN=7c40d38c7e6bcd4b6aefa0bb4acd7b644ce71a47
Certificate serial: 019FAA87583A8D8B6A320A6FEF2C216C4D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
Manifest number: 0173
Signing time: Tue 28 Jul 2026 21:00:24 +0000
Manifest this update: Tue 28 Jul 2026 21:00:24 +0000
Manifest next update: Wed 29 Jul 2026 21:00:24 +0000
Files and hashes: 1: JOrZbv5P8xa_uNN_bW2nd8t85fw.roa (hash: +tU3FVRnRItU1Djfz+HewHPi/7UJ09UTc4dbTgRdd4Q=)
2: fEDTjH5rzUtq76C7Ss17ZEznGkc.crl (hash: osuPkEujZQtF4ns63iLQczf/Lpb2BQTrFdqAN4bqkeY=)
3: zOYOJF9DfijezlN9iaw-AlTXC9Y.roa (hash: 9l40cVFv1YhreHGWhH0joF4uHabuY804EXNUsY9cFxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:58:3a:8d:8b:6a:32:0a:6f:ef:2c:21:6c:4d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c40d38c7e6bcd4b6aefa0bb4acd7b644ce71a47
Validity
Not Before: Jul 28 21:00:24 2026 GMT
Not After : Jul 29 21:00:24 2026 GMT
Subject: CN=b9ed0c5b331074f58ea7187aa33afa2a647ddfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e1:6b:e0:a5:22:96:de:82:22:2e:72:28:c2:
30:2a:09:5f:a1:9a:84:54:b6:94:cb:d1:a1:ba:09:
93:30:fb:07:c5:e3:53:79:17:9b:1b:e7:95:82:aa:
33:45:70:c5:c0:93:06:e1:1e:6e:01:e8:e9:8c:33:
45:44:56:f4:da:5f:79:ab:36:c4:ca:71:c7:bd:36:
8b:2e:19:72:a7:db:10:72:00:81:21:10:45:23:05:
2b:41:cc:15:bd:af:d2:16:4c:32:c1:5a:85:92:62:
b7:09:1c:05:7e:2e:45:55:19:02:6c:55:90:56:1c:
e0:5c:0b:99:6f:5b:64:3c:ae:0d:7d:be:60:45:c6:
3c:80:cd:5d:43:ac:ed:17:7b:67:ad:30:2c:bc:26:
08:eb:cc:94:45:c8:36:26:4d:2b:73:c2:c1:c1:85:
f0:04:4a:98:84:af:72:fd:cd:1b:1a:fc:c4:d1:f3:
4b:24:b2:10:78:a3:f0:8a:1b:5c:b0:c8:b6:99:b8:
eb:11:d0:cc:22:b8:e1:6b:72:29:c4:82:b9:5c:87:
1b:80:1b:da:98:69:09:44:b3:16:ed:77:95:7a:bc:
71:29:9c:90:21:be:f3:99:0e:2f:ab:3d:41:0a:d9:
12:cc:5a:e8:80:2c:c9:41:c2:c7:e4:47:21:19:00:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:ED:0C:5B:33:10:74:F5:8E:A7:18:7A:A3:3A:FA:2A:64:7D:DF:BB
X509v3 Authority Key Identifier:
keyid:7C:40:D3:8C:7E:6B:CD:4B:6A:EF:A0:BB:4A:CD:7B:64:4C:E7:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEDTjH5rzUtq76C7Ss17ZEznGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89f12f-caec-4e7a-8ac9-d6b51d37aff4/1/fEDTjH5rzUtq76C7Ss17ZEznGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b5:ef:d4:29:b7:d1:0a:af:51:06:ed:e8:21:2f:e4:ca:93:
44:82:8c:f7:f4:bf:b2:ef:47:e6:74:fd:df:01:d6:99:9b:8d:
7d:03:3b:8c:e1:b8:8d:f4:a0:3a:ba:f7:a1:0d:11:2b:04:e8:
c6:49:53:c8:86:6c:12:89:e3:73:91:4c:50:29:c3:af:1e:f5:
b5:60:c6:a7:95:c9:bc:f9:9f:72:31:52:52:97:b9:6b:59:8c:
ab:ee:f9:3d:38:b8:24:63:b3:2e:49:3c:34:7d:c0:81:a3:d8:
bb:29:d6:10:b6:0c:da:47:40:1d:c8:1b:4c:53:c2:02:02:3d:
83:d4:05:a3:6f:ef:52:44:31:30:4a:d7:b1:06:a0:59:84:19:
3b:be:d5:68:86:fc:07:3c:c0:e3:2d:aa:99:c2:b6:eb:2e:06:
77:75:98:1b:c2:56:82:c7:91:7f:33:8c:f4:bd:ad:40:17:ce:
b5:5d:14:e1:83:92:26:bf:fd:12:2c:17:06:84:20:96:74:95:
df:7c:63:1c:e3:1a:26:dc:7a:59:fc:6a:c7:94:4a:94:c9:a4:
3b:9d:8b:e4:10:c3:66:56:ee:4e:67:8c:3b:f9:3c:c5:da:db:
72:45:54:d5:57:e7:35:8e:5e:88:25:50:1f:12:3b:21:71:c0:
e6:d7:23:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:00 2026 by rpki-client