Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
File: rFxTEhWE19himH8m_3vtWuE4FqE.mft (raw, json)
Hash identifier: QJj/wnT+1hsmzfwl8QlXIWeFxxFcz9BdS5LVm4qhU04=
Subject key identifier: 38:BD:40:52:8A:5A:A5:8F:F3:0E:F6:53:7E:53:76:8A:D2:4F:44:14
Authority key identifier: AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
Certificate issuer: /CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Certificate serial: 019FAABE513DD4133886A6EE85C5C1C1043A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
Manifest number: 0399
Signing time: Tue 28 Jul 2026 22:00:26 +0000
Manifest this update: Tue 28 Jul 2026 22:00:26 +0000
Manifest next update: Wed 29 Jul 2026 22:00:26 +0000
Files and hashes: 1: Ln3OJ6zDWx7Blw5HCll4po4CH-M.roa (hash: BZd7Kwg87H/bospWBtm/c29GcUHDV3xSrqHEL2bm8Hg=)
2: rFxTEhWE19himH8m_3vtWuE4FqE.crl (hash: UWrscYrUGZ5sASq0sOV5h4Yz9Z272orpVyNa85tTsb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:51:3d:d4:13:38:86:a6:ee:85:c5:c1:c1:04:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Validity
Not Before: Jul 28 22:00:26 2026 GMT
Not After : Jul 29 22:00:26 2026 GMT
Subject: CN=38bd40528a5aa58ff30ef6537e53768ad24f4414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:fa:c4:b6:7e:8a:3a:a0:8d:49:05:2c:54:
2b:bd:01:0f:4e:08:5e:f9:2c:ac:95:ec:13:c2:4e:
27:03:11:67:6e:36:70:c0:c6:57:42:6c:b1:67:8b:
b8:dd:33:7d:c0:45:09:bb:3e:d1:36:fb:da:cd:2a:
51:5a:66:36:12:87:56:4e:65:f2:6a:68:58:7c:ba:
7e:23:70:d2:1f:49:86:8b:9b:41:cc:46:dd:01:02:
ea:dd:47:f2:4e:8b:43:4b:56:ee:82:36:a4:ff:a1:
c8:ff:a6:b4:ff:ea:13:ed:00:8e:0d:3f:81:26:77:
cf:3b:e1:5c:d9:7c:22:a1:37:42:b9:62:67:94:60:
12:41:af:8d:8f:cd:07:80:ae:6e:70:02:c8:e5:36:
0c:80:76:e1:b3:8a:d4:c0:2f:c3:35:22:10:fb:6c:
ab:09:99:fb:39:22:82:83:5c:15:de:bf:9e:93:28:
21:75:7e:a5:d2:05:35:22:b9:93:83:16:fd:e1:01:
ef:2b:a1:6e:6f:b4:d0:98:9a:fc:8f:05:f0:16:59:
34:43:01:4c:ca:a7:ff:fe:3b:7a:a6:94:ea:a2:14:
73:0c:90:ce:03:a0:03:f4:65:d9:5c:af:c0:41:27:
e9:27:27:b2:28:fb:55:1b:a3:97:85:47:cc:74:2f:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BD:40:52:8A:5A:A5:8F:F3:0E:F6:53:7E:53:76:8A:D2:4F:44:14
X509v3 Authority Key Identifier:
keyid:AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f4:ab:89:50:3e:5a:13:fd:e1:cf:80:4b:32:af:53:aa:58:
89:ba:6b:b3:bf:22:87:ef:a3:17:ea:5c:95:dc:30:f9:a6:97:
21:4b:48:da:cc:69:63:18:91:04:a4:97:80:2b:bb:dc:cf:44:
42:99:11:c3:b9:7d:1c:2a:7e:9c:bd:eb:3b:26:66:43:64:e8:
72:8e:7f:e9:fc:1b:98:5f:fe:58:4b:11:cd:c3:5c:a5:12:6c:
08:52:ba:92:6b:e6:4b:2d:1b:c0:4c:a1:65:e4:d6:c0:bf:34:
16:5a:c9:be:f4:0d:11:8a:69:ef:7a:d5:95:b5:23:72:42:52:
b6:b2:f5:d4:a2:d9:a7:be:fc:a8:9e:7a:b2:57:06:9f:34:0e:
3b:06:0e:09:1f:8f:d0:e0:4b:81:8e:48:68:f8:e2:65:86:fe:
8e:91:d2:7f:2e:2c:e5:33:55:17:b8:0a:5d:db:90:97:7c:a9:
e9:14:1a:cd:8e:50:75:f9:87:e8:d5:ae:40:30:7e:66:a5:d9:
26:ab:6e:38:97:97:00:df:d9:91:33:05:43:0f:f2:e5:2d:d0:
1f:ef:f4:bb:1d:f1:1d:02:99:18:d8:f3:24:26:2d:0b:a1:20:
5b:be:26:3f:a4:a1:f1:57:b4:e9:43:2d:30:63:99:44:96:32:
de:3a:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:39:05 2026 by rpki-client