
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
File: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft (raw, json)
Hash identifier: FCHku85TdV618krwFB72d+fXQkQyKVyUBxbdba1zVMc=
Subject key identifier: 06:C1:9C:6F:1D:BE:B5:BB:5D:21:30:05:24:0C:55:CA:AE:49:A5:11
Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
Certificate issuer: /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Certificate serial: 019FA898FC4FC0CE7FD4CA403270A5FE1E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
Manifest number: 01FA
Signing time: Tue 28 Jul 2026 12:00:26 +0000
Manifest this update: Tue 28 Jul 2026 12:00:26 +0000
Manifest next update: Wed 29 Jul 2026 12:00:26 +0000
Files and hashes: 1: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (hash: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g=)
2: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl (hash: iVdcHVe4RRZaSYjk3krTauQQFElQi6pOpvOMc7kF27U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:fc:4f:c0:ce:7f:d4:ca:40:32:70:a5:fe:1e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Validity
Not Before: Jul 28 12:00:26 2026 GMT
Not After : Jul 29 12:00:26 2026 GMT
Subject: CN=06c19c6f1dbeb5bb5d213005240c55caae49a511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:4e:19:7b:98:e8:87:f4:a0:79:45:73:ce:
7e:87:76:4d:60:73:14:5e:5f:4e:68:21:8d:70:92:
15:7c:a3:5d:0e:39:fc:c0:4f:7b:74:9d:1e:bb:fc:
f3:37:15:55:8d:0b:31:7e:f8:5f:da:4b:89:4f:92:
b9:3f:15:bc:70:f5:42:1f:65:1a:5e:cd:81:4a:84:
f7:cc:b3:2a:e1:ee:50:3a:b8:a4:dd:c4:ea:77:41:
a9:57:16:25:b0:c3:03:01:f0:c9:10:2d:4e:59:f8:
d6:43:c8:d5:8a:85:cd:83:3d:9e:e1:39:f0:2c:3e:
62:6b:da:f4:39:f9:7c:93:5d:4a:d3:be:9c:d7:a8:
12:f3:7f:12:1d:d9:5c:29:61:c4:ba:5b:09:2f:a0:
c2:f6:e3:03:de:85:18:d8:0c:51:93:a7:28:09:51:
18:06:8c:db:f1:d6:d0:38:5c:26:f2:8b:c7:bb:d1:
72:c1:9f:0f:eb:54:8c:a9:05:29:ba:fc:c9:ae:2a:
69:93:a1:73:48:d6:0f:95:9a:46:fd:1e:c4:63:89:
4d:97:a5:ab:64:8a:9c:c3:42:51:13:d1:1a:bb:35:
7d:f8:b8:be:48:f1:2b:23:7c:6d:dc:e4:9e:81:a8:
65:16:94:55:01:5a:94:8b:24:6b:a1:10:f7:82:2a:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C1:9C:6F:1D:BE:B5:BB:5D:21:30:05:24:0C:55:CA:AE:49:A5:11
X509v3 Authority Key Identifier:
keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:00:f0:1b:d8:46:a8:a8:a9:fc:59:fc:1f:6c:82:13:cd:ae:
2b:e1:b7:bf:8a:18:7c:2c:41:97:34:de:80:97:94:2f:fd:fc:
bb:ce:b9:3d:c7:f6:99:81:84:3f:dd:f8:10:a7:ee:33:6f:97:
8b:b8:30:23:e0:88:b2:4e:ff:5e:19:58:ea:74:71:31:8f:23:
4b:e8:aa:e5:b8:ea:a0:5d:fa:cb:22:cc:0f:0b:bb:37:cf:dc:
6b:c3:b4:54:60:c6:0b:56:b5:1f:58:b5:0a:80:f2:47:f9:eb:
08:a0:f5:56:84:48:02:ef:f4:ca:55:61:7c:37:ab:9b:59:b3:
f7:ac:3b:bb:be:c2:a9:dd:a3:9e:10:3b:ba:eb:15:fc:33:33:
32:39:63:e4:2f:df:d4:f8:01:1c:80:79:32:07:f7:20:17:d8:
50:d8:04:0d:cb:bb:ea:35:44:aa:b1:4d:b3:6b:70:11:e0:2d:
e8:81:dd:5b:6f:7c:1b:12:b3:c2:cb:3f:9e:cd:d5:b9:bc:a9:
7c:db:b7:ac:c9:95:bc:f5:b9:a3:50:7f:fa:01:a8:0a:b5:df:
54:1b:2c:e3:53:31:30:c2:9f:8d:7d:42:94:fb:cd:df:44:14:
ab:f5:31:64:4a:c4:59:75:66:1c:09:f7:db:ae:58:1f:fb:2b:
e9:7a:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:14 2026 by rpki-client