
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: 7YRg5JHwomvVQ/lvs6cjtJWF4VDUZDnOArBNkS97IR4=
Subject key identifier: BD:89:4D:49:36:02:90:0F:0B:6F:5D:14:FE:86:88:F3:2A:A0:89:37
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 019EC3DC804F4B314AEC3B7805D8EA94D890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 02D8
Signing time: Sun 14 Jun 2026 02:01:08 +0000
Manifest this update: Sun 14 Jun 2026 02:01:08 +0000
Manifest next update: Mon 15 Jun 2026 02:01:08 +0000
Files and hashes: 1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: dxB2RizXy29DlHEUZ+bF0nSPqwVQGmUIdEATICvXxwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:80:4f:4b:31:4a:ec:3b:78:05:d8:ea:94:d8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Jun 14 02:01:08 2026 GMT
Not After : Jun 15 02:01:08 2026 GMT
Subject: CN=bd894d493602900f0b6f5d14fe8688f32aa08937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:a7:0e:5a:2c:57:02:64:8b:4c:6e:35:56:
38:7b:3c:0b:a4:6b:04:be:75:db:e9:27:98:b2:e1:
e8:d4:aa:6c:c5:f0:7a:e2:dd:f7:75:dd:52:5a:c3:
82:61:8b:5c:32:18:40:54:44:b4:44:a8:bc:6c:38:
d2:2e:c8:db:6d:6c:93:07:c6:ac:34:59:1f:d0:b7:
89:92:62:15:ed:1b:d4:45:4e:c0:c6:64:c2:fe:f2:
40:a2:25:24:76:30:4b:b4:f0:dd:0f:5d:8d:bc:7f:
b6:95:a4:54:b9:31:88:94:32:fe:c5:fc:73:6f:ef:
07:e1:2c:da:aa:64:d3:bd:c6:41:f7:b8:c1:79:23:
2b:8f:3a:0f:b7:c2:ed:7a:b9:f1:aa:e1:2c:87:a0:
5e:a4:e3:3c:dd:9e:97:8d:7c:43:67:6f:99:9b:a2:
d6:9e:a4:1c:4f:02:0b:56:38:2d:01:ae:e4:bc:6c:
f4:c7:01:83:1b:69:74:fa:36:b7:fa:2b:c6:32:20:
2d:f2:28:25:ab:cb:0f:56:c6:b3:9f:26:ff:cd:9a:
40:80:a2:8c:28:7f:f4:4e:8e:92:3f:07:07:61:67:
0e:35:ab:43:c3:8a:d2:15:b5:e3:0a:5b:3e:85:77:
8d:20:14:8b:78:5a:89:ac:17:f2:21:ce:77:22:15:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:89:4D:49:36:02:90:0F:0B:6F:5D:14:FE:86:88:F3:2A:A0:89:37
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:39:d1:4f:85:7b:2f:78:37:43:ea:c1:80:c9:0f:25:50:68:
32:a4:a3:bd:de:ef:b9:9d:e5:bf:a6:2e:f9:85:b1:ac:95:99:
55:9c:b8:fa:2a:62:28:42:73:3b:46:55:d1:f1:f6:5e:a0:a4:
7a:57:12:41:bb:f4:c5:4a:24:fc:de:25:3e:02:2b:fb:2e:5a:
38:c1:bc:47:63:bb:c5:15:cf:0e:c4:e0:3f:2c:9d:53:70:17:
18:d8:2b:7e:c6:02:8e:b2:79:69:a8:bb:b0:ef:d9:7a:fa:27:
2c:1a:d8:b6:22:be:7c:2d:65:b8:f2:37:ed:40:6e:7f:44:e1:
fe:97:f4:c1:af:4b:eb:a3:3b:30:90:5f:ae:22:b8:42:02:55:
d7:9b:b0:41:c6:bc:24:a8:e4:44:35:46:46:c1:3c:1c:7b:45:
3f:f6:e2:35:e7:5f:ad:f1:b7:95:35:45:41:a9:ae:40:db:67:
b0:41:7c:fa:f4:2a:79:54:b9:6b:52:27:44:46:9f:a3:cc:93:
be:cf:79:f2:75:10:4a:a5:2a:24:88:59:8b:ed:da:71:af:67:
66:42:74:e0:9e:35:7d:fd:37:86:f8:5a:1c:c7:de:f7:59:da:
44:7e:d4:68:bb:cd:e6:85:90:30:f3:3d:b8:71:d7:3e:c7:01:
fc:fc:91:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:48:59 2026 by rpki-client