Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: kb235CvGlHRkfUl3ZSZcNia0G6jrKxcDUbZRgdZ39VY=
Subject key identifier: 29:F9:B3:B7:1D:E8:92:50:53:FB:01:19:4B:35:76:A1:CD:2D:59:BB
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 019EC3DC04A89C1043C4B3857FABBCC16182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 1607
Signing time: Sun 14 Jun 2026 02:00:36 +0000
Manifest this update: Sun 14 Jun 2026 02:00:36 +0000
Manifest next update: Mon 15 Jun 2026 02:00:36 +0000
Files and hashes: 1: M81Qxbtts07Ib9z19i7shUVMtA8.roa (hash: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: 5at4mpCQeCtvpl9jce9MYASAbdzgPc4bx9PsVsWV2CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:04:a8:9c:10:43:c4:b3:85:7f:ab:bc:c1:61:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Jun 14 02:00:36 2026 GMT
Not After : Jun 15 02:00:36 2026 GMT
Subject: CN=29f9b3b71de8925053fb01194b3576a1cd2d59bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:1a:5b:f0:d2:00:95:08:66:85:56:34:86:
10:d2:04:4b:03:62:b7:45:79:31:ec:1f:67:96:4f:
f8:9d:40:a2:50:2e:a0:7c:67:7a:79:c9:26:9b:ae:
17:97:11:1c:90:8b:ec:45:97:b0:d0:93:a1:e6:f6:
51:94:25:33:d8:23:c9:6d:52:72:82:c3:63:e7:01:
d6:f4:a5:1c:45:c0:13:77:df:b0:27:e6:2e:30:ff:
4b:f4:59:d5:e1:78:b0:8e:4d:8f:37:f5:d1:14:fc:
1c:9d:12:fc:a8:30:83:98:2c:7e:55:78:d6:0e:4e:
f5:c5:87:eb:3b:30:06:06:df:e0:0d:8a:b7:c1:7b:
b9:63:9b:f7:7c:61:39:ed:a9:2f:0e:2c:d3:3a:b7:
5c:b0:7c:dd:00:0a:a8:f0:be:43:57:ed:88:a0:07:
7c:d8:28:b9:d9:71:f1:7b:e7:67:77:59:38:a9:52:
f3:85:0a:35:b5:85:a3:57:53:6b:de:11:43:52:7b:
dc:61:c2:f5:2c:6d:07:e0:0a:67:3c:9d:1e:81:ee:
6c:8c:3f:f9:38:a5:fc:af:f8:dc:fd:43:ce:17:dd:
ca:85:85:e1:41:ff:8b:12:c9:ee:30:40:7a:a6:47:
da:e9:c0:3d:71:91:55:eb:b5:d3:db:46:32:3a:b0:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F9:B3:B7:1D:E8:92:50:53:FB:01:19:4B:35:76:A1:CD:2D:59:BB
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:14:90:6f:70:c1:88:2c:60:bb:16:c3:51:ad:c0:74:09:6f:
05:8b:4f:a0:0d:27:8c:b7:69:86:9b:8b:02:07:b2:21:f6:26:
85:90:b4:e9:42:0c:26:8a:28:2a:4d:f0:50:49:39:30:bd:25:
25:03:75:29:06:a2:7a:1d:be:57:cb:0a:e6:d9:84:19:35:26:
69:73:8b:a7:34:9f:37:53:38:2e:70:d3:ef:8c:76:03:71:be:
72:68:18:f0:e1:71:6a:07:ee:49:c4:c9:a4:6b:0e:1b:b0:25:
99:ca:fc:d7:8c:f9:e6:04:02:ff:41:41:94:51:45:f8:f2:10:
2f:fc:eb:6e:8d:a9:e3:10:03:60:a0:ff:a4:46:67:86:16:ea:
f6:d1:9d:3b:40:e7:df:ae:aa:99:e0:87:02:b4:be:88:68:ed:
11:42:54:a1:93:d2:4d:47:80:e2:7a:3e:57:f6:ad:60:dd:e2:
97:aa:2d:84:49:26:9b:64:25:b7:82:ef:01:c5:6d:70:cf:47:
1a:54:14:2d:50:4d:49:4f:d6:61:dc:74:9e:d4:76:46:e7:35:
ef:7f:c5:b6:8e:34:de:3b:2f:37:5f:6d:05:54:8b:27:38:94:
ce:21:a1:1e:1d:6c:06:90:44:fa:50:9e:88:9e:9e:b2:1a:32:
86:9b:76:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:44:53 2026 by rpki-client