Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
File: FgRPZYu8kicHhfe7ByrJNolfSTM.mft (raw, json)
Hash identifier: adnI3xqa/lhW7FBEi1a7Jzp6JOBifu9UWhXMwIcGmoY=
Subject key identifier: 69:B5:21:0F:8B:C2:B7:EE:22:31:30:D3:12:7E:0C:6B:5A:8C:56:1A
Authority key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
Certificate issuer: /CN=16044f658bbc92270785f7bb072ac936895f4933
Certificate serial: 019FAA8831E5CF0C0724DA2A634C8E28C052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
Manifest number: 0268
Signing time: Tue 28 Jul 2026 21:01:20 +0000
Manifest this update: Tue 28 Jul 2026 21:01:20 +0000
Manifest next update: Wed 29 Jul 2026 21:01:20 +0000
Files and hashes: 1: FgRPZYu8kicHhfe7ByrJNolfSTM.crl (hash: lggDK2S7dXCDbog6As+ZPnJCrwLshupg7gmQnFsItLk=)
2: WatKg_0MoVqhZNrvrktjemd-kkU.roa (hash: HB6mZ1x55io1eH3g2s4HymshoqNX8HC4t8plzzNViRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:31:e5:cf:0c:07:24:da:2a:63:4c:8e:28:c0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16044f658bbc92270785f7bb072ac936895f4933
Validity
Not Before: Jul 28 21:01:20 2026 GMT
Not After : Jul 29 21:01:20 2026 GMT
Subject: CN=69b5210f8bc2b7ee223130d3127e0c6b5a8c561a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3a:6b:33:21:ec:75:1b:7a:7f:22:2c:46:f2:
a2:3f:fb:ad:ef:2b:32:56:4b:ed:7b:1d:74:66:ca:
84:11:98:c1:12:46:45:98:7b:56:cc:46:cd:aa:f2:
c8:46:d0:da:4d:ba:c2:9c:17:90:37:5e:b2:c3:98:
21:c8:52:47:79:7c:9b:bc:6a:34:9e:f1:70:8b:8d:
30:72:2c:70:b2:f0:28:6a:ee:72:00:c6:a1:13:00:
45:c5:ba:15:10:76:d3:87:13:9d:45:4a:b9:89:a1:
95:d6:f9:f5:f6:4d:85:29:86:a1:bf:d0:55:a1:38:
1d:46:59:f2:fd:53:37:c9:0c:80:1c:d8:0c:24:50:
33:5a:20:85:32:f8:44:3f:d0:fa:bc:b9:6d:20:ec:
a6:ae:07:6c:c9:8d:40:f2:45:53:c0:4a:4c:6a:7d:
98:f3:53:24:98:98:81:19:d3:b9:7d:cf:f5:f7:bf:
b2:8a:9a:1b:d3:25:b3:e0:3a:0d:42:36:ce:86:0a:
13:ab:84:8f:f1:85:d5:a0:3d:60:05:85:46:f9:f8:
ce:9d:f6:10:99:7a:63:20:34:c1:a1:21:da:c5:92:
c0:dd:f8:52:3b:31:98:4f:b2:46:2c:07:06:da:e3:
33:0b:91:4a:e1:04:e6:e0:72:22:5f:4b:51:0a:11:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B5:21:0F:8B:C2:B7:EE:22:31:30:D3:12:7E:0C:6B:5A:8C:56:1A
X509v3 Authority Key Identifier:
keyid:16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ec:8c:aa:63:d8:59:1d:28:22:2e:fe:60:19:bc:ab:98:90:
16:09:d3:40:3d:7d:6c:e8:ea:02:33:20:5e:7f:0b:32:82:e2:
78:61:a0:e5:05:5d:4c:ee:e0:44:20:0b:8f:48:9a:a2:71:c4:
ab:66:2b:4f:4f:08:0a:bf:b1:72:bb:b5:2c:42:1c:91:7d:4d:
94:1a:42:3d:e5:f1:47:bd:fb:ea:19:93:cd:f4:99:6a:ed:d0:
21:6b:7f:5d:95:a9:a0:b5:42:a4:23:7f:39:61:d5:ae:a5:ae:
b8:15:b7:78:b0:fb:79:95:a1:eb:d7:c8:12:e2:ec:b3:8e:56:
9a:34:a5:fa:47:d5:0a:f5:fb:83:8c:98:05:f5:e2:b5:e1:27:
84:9c:ba:ab:35:07:ea:63:f8:64:5f:1d:6f:af:41:54:0d:1e:
c6:bb:89:da:52:98:0d:49:d7:d4:e0:96:fc:d9:c8:c7:95:51:
1a:ba:6c:9b:cc:ef:a5:44:6d:5b:0a:b0:ff:a3:e1:e8:58:b9:
c5:0c:77:84:1a:ce:b8:0a:a4:4c:94:82:5f:fb:b5:27:22:a9:
c7:14:fc:0d:e2:2d:76:db:86:e8:57:38:94:4f:44:ea:62:fe:
84:1b:29:91:bf:12:d7:d3:34:e8:55:34:ec:aa:43:5b:0c:6e:
73:90:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:42 2026 by rpki-client