Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier: ivej/Q8VjN4KuCPO4SvLbGGzdx7J/vUnE1UOIuFHAfs=
Subject key identifier: 38:D4:AA:61:99:56:99:1B:3D:C6:36:F5:EA:A3:4C:90:A8:B4:2A:29
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial: 019FAB63250CD50EC11853CFBE406F481993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number: 04DB
Signing time: Wed 29 Jul 2026 01:00:29 +0000
Manifest this update: Wed 29 Jul 2026 01:00:29 +0000
Manifest next update: Thu 30 Jul 2026 01:00:29 +0000
Files and hashes: 1: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: 2dQ364XjYTqAzxlN7NVbilXoDOQs4yQtvdKqlfJtdVw=)
2: gZN0ubYqOfKHhkHWa3AckTvwRLw.roa (hash: tkY9Znd59Usph4Tm3soVWPi523DI015PBAn20gIz7Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:25:0c:d5:0e:c1:18:53:cf:be:40:6f:48:19:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
Validity
Not Before: Jul 29 01:00:29 2026 GMT
Not After : Jul 30 01:00:29 2026 GMT
Subject: CN=38d4aa619956991b3dc636f5eaa34c90a8b42a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:2b:59:0d:61:5d:a6:8a:95:91:d7:59:b9:
1f:e9:bf:f5:50:6a:b3:fc:44:5a:60:41:93:4c:d3:
38:0e:68:7c:8c:e9:8b:1f:23:7b:fd:01:fb:47:95:
53:d1:c7:43:1e:ae:c8:61:a4:79:9b:15:5b:22:64:
c3:0e:be:07:cf:57:74:40:80:f5:ba:bf:9d:d4:97:
36:ef:91:52:9f:96:48:91:89:cf:6d:92:be:71:c7:
b4:8c:f0:b7:db:e8:69:9b:c4:fc:1a:43:0a:dc:46:
3a:87:81:23:b5:3c:30:b5:10:9c:2c:79:c3:6a:b6:
aa:2a:20:3f:19:ee:9f:5e:64:dd:95:6b:84:28:8c:
ca:45:4a:46:13:1b:9a:0c:87:8e:69:0b:af:71:75:
d4:90:e2:5f:fe:29:94:15:ea:74:c8:8d:46:7b:c6:
33:eb:5c:de:3e:10:14:8b:15:46:52:87:02:5f:01:
ce:d5:6c:2d:af:6b:d5:92:e6:30:00:4a:e6:0b:52:
b1:ac:f5:3f:11:59:17:a9:bc:83:57:64:82:a9:78:
f2:6b:66:a0:7f:2d:bd:d6:3c:6b:57:fa:02:c9:22:
97:01:9b:f4:1a:bc:4a:11:7c:4a:fb:9b:bd:e2:83:
48:1c:37:76:e2:3e:97:82:6a:9c:4a:6c:03:e3:5f:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D4:AA:61:99:56:99:1B:3D:C6:36:F5:EA:A3:4C:90:A8:B4:2A:29
X509v3 Authority Key Identifier:
keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cb:01:50:74:27:ae:9b:42:10:9f:a7:f1:6b:d4:83:b7:d1:
b8:ab:f8:50:78:b2:f9:a8:db:ce:00:ea:9d:e6:73:f0:d6:db:
54:da:89:bf:1f:c6:90:f4:de:fb:37:0b:65:29:b6:c2:a5:62:
78:33:56:00:9a:47:e2:90:70:9d:48:c3:49:f3:1b:d7:d1:b7:
94:9a:89:40:2c:92:d0:18:0d:42:8e:73:06:e9:ed:fe:45:8d:
43:0c:81:98:60:76:4c:e2:7b:c5:88:ab:ce:34:ef:15:99:b0:
a9:74:73:34:61:54:a5:87:b5:15:39:fe:39:3d:68:87:2e:c9:
0d:d5:d0:d0:73:f1:1c:5e:7c:b0:a2:a6:4a:41:14:f3:e1:ca:
71:06:00:a7:3e:46:de:04:c6:40:0e:3c:0b:e3:41:ca:1c:1f:
a8:44:e6:77:af:35:e3:45:dc:65:6e:43:fe:92:5f:93:c3:a7:
13:11:e2:06:c3:7f:d5:43:73:97:4d:dd:5e:c6:85:c4:7a:da:
84:30:06:40:67:24:70:64:a4:e1:2a:39:32:a5:56:38:b9:1b:
13:20:25:b5:6b:10:4d:2a:63:81:a0:bb:e6:8f:29:20:66:71:
2f:d1:ab:11:66:72:82:52:e4:7b:b5:59:a5:0f:e5:73:c9:a9:
a5:c8:d8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:59 2026 by rpki-client