Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.mft
File: fCimJ8ox8pJiLD67o5SC405dlWw.mft (raw, json)
Hash identifier: JowpKIDbVCPxk9fPczjIknI2lyGRQIWaJzK8+6m43pc=
Subject key identifier: 9A:6C:79:04:D0:FB:CE:B2:A7:E9:53:99:6D:A3:37:D0:19:BB:79:13
Authority key identifier: 7C:28:A6:27:CA:31:F2:92:62:2C:3E:BB:A3:94:82:E3:4E:5D:95:6C
Certificate issuer: /CN=7c28a627ca31f292622c3ebba39482e34e5d956c
Certificate serial: 019FA89A5D1EEEE12CC59E852F312604BE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCimJ8ox8pJiLD67o5SC405dlWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.mft
Manifest number: 73
Signing time: Tue 28 Jul 2026 12:01:56 +0000
Manifest this update: Tue 28 Jul 2026 12:01:56 +0000
Manifest next update: Wed 29 Jul 2026 12:01:56 +0000
Files and hashes: 1: B0aaQzDUymEy_TMI7vVm762HqmA.asa (hash: flZ5LVNjeKipvaNx0Yaj9neDFvSoUInt+O77VeDAqvk=)
2: fCimJ8ox8pJiLD67o5SC405dlWw.crl (hash: mgH34mVyxbHKdxhfJcEjvf9BUSvSXgH9+M3ooyJtriA=)
3: rWg34RDLNclyJ8h9Kinq56b8NJk.roa (hash: gt1C9E3imgPTL1bHVhUKlCkyG2mLcYb0pVG6jC6JYNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCimJ8ox8pJiLD67o5SC405dlWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:5d:1e:ee:e1:2c:c5:9e:85:2f:31:26:04:be:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c28a627ca31f292622c3ebba39482e34e5d956c
Validity
Not Before: Jul 28 12:01:56 2026 GMT
Not After : Jul 29 12:01:56 2026 GMT
Subject: CN=9a6c7904d0fbceb2a7e953996da337d019bb7913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:ea:88:ee:e4:87:81:29:90:bd:0e:c1:79:
7f:32:23:49:48:5a:f7:84:d2:44:59:1e:0a:9e:b6:
12:4d:55:fe:f6:f3:06:9a:5c:6d:d9:f2:64:38:8c:
0f:81:bd:d7:92:23:a7:57:50:e5:52:54:f2:da:61:
ed:41:6f:b9:6c:21:c1:87:f8:73:20:59:d5:81:7c:
92:6c:cf:83:34:66:c5:d1:cd:e3:dd:e6:21:4d:12:
a9:d2:b6:b8:eb:2e:ad:ae:c6:57:4d:24:c7:6e:34:
b9:56:30:34:ef:c8:24:b9:a6:63:96:6b:95:43:01:
f4:8b:50:02:20:92:d7:1f:f3:f1:bf:2e:f2:5a:1c:
0e:83:2a:88:06:6c:01:d3:09:8f:8c:aa:52:1c:13:
e8:45:92:75:66:83:e5:eb:f3:c6:f3:1a:9e:0a:80:
e2:15:d1:b5:f9:89:cd:e0:01:09:59:f6:42:67:70:
d1:7b:a7:c2:46:56:b1:c8:c3:1f:49:8a:30:eb:2f:
67:a3:7f:4b:f2:16:6f:64:b3:cc:be:f8:03:25:46:
9c:4a:e3:95:f4:6c:95:3f:ad:6f:46:28:ab:89:36:
00:7d:93:71:f3:d9:c8:53:36:05:d1:56:44:1a:b3:
ea:e6:96:b1:70:ad:d9:37:ec:9d:ce:3b:50:98:4b:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6C:79:04:D0:FB:CE:B2:A7:E9:53:99:6D:A3:37:D0:19:BB:79:13
X509v3 Authority Key Identifier:
keyid:7C:28:A6:27:CA:31:F2:92:62:2C:3E:BB:A3:94:82:E3:4E:5D:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCimJ8ox8pJiLD67o5SC405dlWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b70c26-5e06-42f8-80cc-a887b70cdae8/1/fCimJ8ox8pJiLD67o5SC405dlWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:89:d5:33:0d:70:94:2b:4f:85:9f:ec:21:a1:99:11:4d:9b:
e3:83:57:10:2f:b4:04:76:2f:46:85:cc:52:29:84:76:fc:39:
72:2b:34:aa:83:f4:84:31:df:f0:3f:89:d8:d4:14:b9:81:67:
30:4b:0a:08:f9:b6:b9:7d:6a:11:ec:d1:82:76:9e:6e:06:1f:
67:18:d0:81:07:b0:c5:17:d5:9b:57:19:47:7b:5f:02:26:0f:
f8:6f:42:6e:80:3b:bc:07:16:ed:68:0c:e4:44:f0:41:b2:2e:
b1:e2:31:43:4d:cd:68:51:d9:14:08:1d:8f:69:f2:fa:d3:ff:
92:91:a3:ce:cf:88:d0:a3:fb:27:2c:cb:7f:fd:18:bb:05:e2:
ec:75:4c:36:bb:c8:c5:87:72:47:2f:f1:a5:58:8c:bd:31:7d:
0d:3d:bd:82:7f:44:9a:0a:55:18:e9:81:d1:87:93:6b:c7:d7:
e2:29:07:c1:6e:c0:d4:cb:61:43:04:0e:8e:7d:82:7f:60:57:
88:b7:34:1e:87:fe:4b:3c:37:2f:72:85:66:11:d5:34:27:3e:
2a:08:65:b1:a7:5b:0f:58:17:5b:32:02:de:62:42:c1:0f:f6:
f9:99:fe:e8:8b:83:7f:de:37:18:71:10:cb:74:14:12:9f:df:
e9:a4:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:38:06 2026 by rpki-client