Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
File: FvE3AfZKMRbctbspxVll5OhlJy4.mft (raw, json)
Hash identifier: oBm5pkfXGdBGOCDcgZ6i2u2XCnODmQPoSy7QDU/Dn1E=
Subject key identifier: E9:8E:6C:96:C4:BC:93:85:E5:1C:14:24:93:07:73:C4:84:0A:39:1D
Authority key identifier: 16:F1:37:01:F6:4A:31:16:DC:B5:BB:29:C5:59:65:E4:E8:65:27:2E
Certificate issuer: /CN=16f13701f64a3116dcb5bb29c55965e4e865272e
Certificate serial: 019FA898FECCEA0E188EA8DA13F909DBD791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
Manifest number: 32
Signing time: Tue 28 Jul 2026 12:00:26 +0000
Manifest this update: Tue 28 Jul 2026 12:00:26 +0000
Manifest next update: Wed 29 Jul 2026 12:00:26 +0000
Files and hashes: 1: 42BDqtAQ9lcIeaUyJpKcjUQ10_0.roa (hash: +iVqlQUSZD75lSN3BubqoOzjwru6qo7Xro+7FeWxjTo=)
2: FvE3AfZKMRbctbspxVll5OhlJy4.crl (hash: 5EfUdE5HtejPA8i3+/1fCxzwRbvAqHeZ4q9J6eHO/mk=)
3: JWfknnBNHDqUE3M6T3I9yPrA24o.roa (hash: IOoAUOjkIl51WKcsbMSHfbV6UaLjPVCL/lOBBYW1YHk=)
4: YnilPx2dZcJqh4ls6xq-N2uRQ5A.asa (hash: 3verUtS7uFBpvS0G2iTLLXTPGgLAY1LSZCEh5YEovjE=)
5: zV0V8DTB4694rawMjTYOOLyWN-U.roa (hash: Gx3HbT7EtEgUlyYa8PmgpRY7z4AnqrNUbdr60lJPtvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:fe:cc:ea:0e:18:8e:a8:da:13:f9:09:db:d7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f13701f64a3116dcb5bb29c55965e4e865272e
Validity
Not Before: Jul 28 12:00:26 2026 GMT
Not After : Jul 29 12:00:26 2026 GMT
Subject: CN=e98e6c96c4bc9385e51c1424930773c4840a391d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:c1:8e:66:8a:a9:4a:37:1a:cc:6f:bb:fd:
fd:7d:c9:45:fa:b7:b8:dc:1d:fa:01:26:86:ef:0c:
70:f9:12:92:35:80:89:d0:3c:4b:cf:6b:05:59:3c:
eb:fe:9a:e7:eb:53:e7:c8:d0:d9:a9:9c:19:b8:7d:
91:9a:e2:4a:31:2d:41:75:6a:a4:13:ff:33:eb:30:
c5:89:a3:20:c8:10:90:ab:6a:ce:51:58:f8:19:de:
4c:c2:0f:98:c6:a7:b7:34:59:1f:99:e1:1a:22:af:
2f:af:d8:b9:6e:e1:95:c3:c9:91:31:38:95:2b:67:
fe:32:5a:b9:33:d1:c7:d8:29:e3:ec:68:25:00:37:
75:4d:4d:65:8b:d6:cf:f1:af:c7:ce:61:66:d7:dd:
48:b3:2b:57:86:99:0b:ec:56:69:d5:bd:68:e4:05:
e1:2a:71:b3:9a:48:92:38:3e:af:e3:8a:1a:38:65:
8f:c2:b4:fd:a7:07:29:e5:04:85:68:2c:f8:9a:fb:
fa:38:73:1d:49:3f:11:78:66:3a:8c:27:e5:4e:65:
fe:c8:4c:db:99:b0:aa:ff:fb:49:b3:95:01:fa:4c:
25:77:b9:84:d9:80:41:37:91:19:82:3b:b5:81:f0:
9f:82:36:4d:b3:ff:9e:c9:07:0d:0f:4e:a1:ba:1a:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8E:6C:96:C4:BC:93:85:E5:1C:14:24:93:07:73:C4:84:0A:39:1D
X509v3 Authority Key Identifier:
keyid:16:F1:37:01:F6:4A:31:16:DC:B5:BB:29:C5:59:65:E4:E8:65:27:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvE3AfZKMRbctbspxVll5OhlJy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2418fe-7819-48ff-9fc6-e50031c6b2c5/1/FvE3AfZKMRbctbspxVll5OhlJy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e2:bc:e5:5a:5e:03:dc:0d:80:bb:84:a9:68:39:ea:fa:7c:
88:95:0d:15:26:1b:ce:66:cb:97:9c:bf:77:dc:17:7d:19:bc:
ce:53:fb:0b:69:e3:0f:4d:f0:f1:ad:56:2a:fd:c9:cc:f2:34:
d9:68:12:96:ec:32:a3:b7:be:4c:ea:fb:19:96:e5:88:a3:a2:
d8:15:d7:fc:5a:74:05:4b:4c:90:0c:83:01:26:43:3e:bc:04:
da:88:90:df:c6:f1:10:f9:a8:16:b4:68:21:b5:02:a8:ff:b4:
0d:ba:3b:75:97:75:dc:2f:c3:e4:ed:f4:14:f7:46:15:49:7e:
a5:64:5a:39:4a:f4:46:57:46:4a:99:0a:56:de:18:78:fb:9a:
2f:09:13:f9:b4:e2:4a:9e:0f:d3:0a:4e:21:8f:70:bd:26:67:
0f:6f:93:2a:5f:c3:fc:fd:5f:f0:a5:61:17:a1:71:83:3e:d5:
8d:8a:b1:ba:93:3d:77:58:c8:9d:83:9a:db:a3:00:51:8d:37:
45:f2:97:6d:b5:4b:43:a8:b7:3b:dc:55:a3:55:b3:1c:1e:c0:
fd:be:ef:8e:fc:de:24:ac:3e:54:2e:e4:71:5b:d8:0f:57:43:
42:0b:91:87:61:79:68:0a:32:ae:d5:ea:de:7d:7c:b0:47:79:
ba:e2:36:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:05 2026 by rpki-client