Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: dAsdiI/f8dZsMF9PshIKFEPEx5Sbs4o9EX+GruKrdpA=
Subject key identifier: 1C:E4:4D:79:88:39:27:97:DC:76:BF:20:43:3D:9E:35:B7:57:EF:F0
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 019FAD889491A88FA65405FB7D678EE5B0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 10BD
Signing time: Wed 29 Jul 2026 11:00:37 +0000
Manifest this update: Wed 29 Jul 2026 11:00:37 +0000
Manifest next update: Thu 30 Jul 2026 11:00:37 +0000
Files and hashes: 1: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (hash: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: MZK7OhtTBl90j/oQX/9kmgTGRYDVrZU3exEsnLsiA2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:94:91:a8:8f:a6:54:05:fb:7d:67:8e:e5:b0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Jul 29 11:00:37 2026 GMT
Not After : Jul 30 11:00:37 2026 GMT
Subject: CN=1ce44d7988392797dc76bf20433d9e35b757eff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:ae:10:95:ac:41:f8:f8:3f:16:dc:78:39:
b9:94:34:70:28:d9:66:8a:ca:88:60:67:1b:da:0a:
8d:97:dc:80:1a:4b:3d:67:aa:0e:a0:71:31:37:a1:
d6:09:31:51:25:70:eb:fe:b0:2a:06:67:c1:38:5e:
d7:cc:8f:b3:9d:08:69:bd:aa:2a:a2:53:2a:23:c4:
b0:f2:cc:95:dc:f4:12:86:cf:98:0b:f9:fd:0d:e1:
ff:aa:eb:57:8a:68:2b:f0:6e:0e:53:97:42:ee:89:
b1:6f:2e:00:4a:00:5c:9b:85:a6:3e:4e:2b:92:b4:
57:e1:66:21:c5:6f:e3:e1:90:0c:a7:c5:8b:e8:60:
13:96:19:d1:3d:5c:0f:e6:b1:3f:bd:77:87:f1:d1:
79:c2:11:88:77:3a:77:0f:0a:9b:30:21:d2:57:ca:
53:48:86:ec:1c:d5:0e:1e:df:b0:67:ae:ad:88:33:
9e:ff:52:95:24:25:25:2f:a8:51:3c:8a:d2:39:fe:
ea:50:95:5c:21:b5:21:07:ee:49:c1:14:59:e2:b2:
d9:c5:a1:ad:e8:d1:b9:8d:72:04:37:b2:cb:6e:40:
e7:17:c0:e2:10:7e:8b:3a:52:cf:ae:61:c6:b3:ce:
21:01:b9:ed:bd:3d:92:0c:d0:3d:52:49:61:1d:34:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E4:4D:79:88:39:27:97:DC:76:BF:20:43:3D:9E:35:B7:57:EF:F0
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6b:34:5b:d1:25:e3:73:ee:ba:44:e7:aa:f5:67:c4:76:cb:
10:b5:32:a4:cd:a0:36:bf:13:05:4f:79:ae:33:48:c7:2f:35:
db:5c:15:4e:c8:11:0d:5e:56:b7:bf:e5:2d:d1:a0:c6:e1:32:
56:a3:60:b7:41:9b:53:21:76:e4:ba:a7:3e:e9:ed:d3:71:16:
b1:95:a3:ef:a5:f3:7f:eb:25:d7:97:5e:42:e5:81:7a:88:b2:
34:d4:d6:1c:23:ad:f2:56:f8:eb:0c:18:2a:37:1c:39:58:32:
70:ae:30:3f:47:4a:3e:d6:7a:2c:ec:de:7e:8f:c0:5c:80:27:
8c:17:d7:7a:26:00:51:3a:aa:0b:39:c3:36:d8:c5:b9:d4:6c:
61:dc:e9:09:2e:47:9e:f2:e8:fe:d5:cf:9e:f0:df:73:36:51:
a5:09:28:f1:dc:66:bb:af:93:ac:97:81:54:b8:12:db:cf:40:
bd:4a:77:30:38:69:e4:88:69:7e:a8:b4:5c:1b:14:80:7a:d1:
1d:fe:24:dc:16:ac:01:09:ff:4a:ad:d1:7b:49:21:3c:d0:8f:
4c:28:d4:ea:26:38:fa:68:9b:aa:cf:04:d8:60:85:a7:d5:62:
d2:18:2f:eb:5f:0f:fa:43:2f:1b:8c:c8:d8:ab:b4:d1:fd:ed:
0a:07:0d:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tiJSRqI+mVAX7fWeO5bDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZWM3MjgzN2VmYmJjNGVhNmRkZDRiZTk0MzYxOTE2YjRj
MzYyZGEwHhcNMjYwNzI5MTEwMDM3WhcNMjYwNzMwMTEwMDM3WjAzMTEwLwYDVQQD
EygxY2U0NGQ3OTg4MzkyNzk3ZGM3NmJmMjA0MzNkOWUzNWI3NTdlZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj2uEJWsQfj4PxbceDm5lDRwKNlm
isqIYGcb2gqNl9yAGks9Z6oOoHExN6HWCTFRJXDr/rAqBmfBOF7XzI+znQhpvaoq
olMqI8Sw8syV3PQShs+YC/n9DeH/qutXimgr8G4OU5dC7omxby4ASgBcm4WmPk4r
krRX4WYhxW/j4ZAMp8WL6GATlhnRPVwP5rE/vXeH8dF5whGIdzp3DwqbMCHSV8pT
SIbsHNUOHt+wZ66tiDOe/1KVJCUlL6hRPIrSOf7qUJVcIbUhB+5JwRRZ4rLZxaGt
6NG5jXIEN7LLbkDnF8DiEH6LOlLPrmHGs84hAbntvT2SDNA9UklhHTTfOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzkTXmIOSeX3Ha/IEM9njW3V+/wMB8GA1UdIwQY
MBaAFH3scoN++7xOpt3UvpQ2GRa0w2LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUt
Mzg2NjE3YTY2NGZlLzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUtMzg2NjE3YTY2NGZl
LzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2s0W9El
43PuukTnqvVnxHbLELUypM2gNr8TBU95rjNIxy8121wVTsgRDV5Wt7/lLdGgxuEy
VqNgt0GbUyF25LqnPunt03EWsZWj76Xzf+sl15deQuWBeoiyNNTWHCOt8lb46wwY
KjccOVgycK4wP0dKPtZ6LOzefo/AXIAnjBfXeiYAUTqqCznDNtjFudRsYdzpCS5H
nvLo/tXPnvDfczZRpQko8dxmu6+TrJeBVLgS289AvUp3MDhp5Ihpfqi0XBsUgHrR
Hf4k3BasAQn/Sq3Re0khPNCPTCjU6iY4+mibqs8E2GCFp9Vi0hgv618P+kMvG4zI
2Ku00f3tCgcNhw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:44 2026 by rpki-client