Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
File: Fi5IMpyL6O8gnplY2marAkAUXhk.mft (raw, json)
Hash identifier: iIudT1xyXexJ5tqp/wfywmzF/mVSn6fL1rZaIPrHfo8=
Subject key identifier: 3C:86:C2:9D:46:0D:62:9C:FF:08:40:39:80:08:95:99:65:55:A4:6D
Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
Certificate issuer: /CN=162e48329c8be8ef209e9958da66ab0240145e19
Certificate serial: 019FAB9A636B055D8BEE816E9A67AA680503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
Manifest number: 0AB2
Signing time: Wed 29 Jul 2026 02:00:49 +0000
Manifest this update: Wed 29 Jul 2026 02:00:49 +0000
Manifest next update: Thu 30 Jul 2026 02:00:49 +0000
Files and hashes: 1: 62jZg4gngBAnPwivfw6fHLKrFR8.roa (hash: x5Xq81WhPxvz0KcW7Qb+lmuqrFvDsxsxDYK9R0dFh5A=)
2: Fi5IMpyL6O8gnplY2marAkAUXhk.crl (hash: KzkTZXHr3W45KHsqdNlg38KKE59u1JucQqmHIg5U2hA=)
3: L1zbFMwgTo8k0cGpa43eL9rJSvs.roa (hash: 3nOYFWDqeUlGtXtuv/0p8OtC8pzPOMkeWtIsBYndPi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:63:6b:05:5d:8b:ee:81:6e:9a:67:aa:68:05:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19
Validity
Not Before: Jul 29 02:00:49 2026 GMT
Not After : Jul 30 02:00:49 2026 GMT
Subject: CN=3c86c29d460d629cff084039800895996555a46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:96:a1:4d:09:fe:0b:fb:78:1d:1c:05:c3:
f5:db:a6:63:a9:76:8c:86:98:42:68:26:10:73:73:
07:82:a4:91:4a:d4:a2:fa:07:7f:b8:18:c3:8e:db:
90:bf:c2:5f:d1:d2:35:bd:32:15:aa:77:8a:9e:5a:
dc:6b:75:34:3e:e9:fc:a3:97:0c:05:04:09:00:3c:
e2:11:cf:e4:66:4a:1e:9a:87:4a:af:3d:ea:db:67:
c5:a1:dd:59:4b:be:fb:c0:29:4d:68:2d:c0:d7:89:
1b:7b:28:ea:a7:d8:d5:fb:18:f8:3d:a0:b0:db:e6:
17:c8:aa:c9:ba:e0:88:c2:85:64:88:c9:02:9a:72:
12:e4:83:0e:6c:7b:ed:36:10:70:40:3f:22:52:61:
82:da:ad:bf:cc:fd:f8:dc:66:84:38:0f:b9:1f:31:
0e:0f:30:ee:15:c6:7c:b3:06:87:8a:e0:4a:82:6a:
77:06:4d:fd:4c:bf:a0:b0:ca:95:6e:2b:c2:9b:97:
21:95:13:65:90:06:c4:39:79:b3:67:66:70:6f:74:
45:23:46:db:57:1f:03:35:85:f5:f0:49:70:22:de:
67:00:7b:dc:6a:61:03:b3:81:77:b6:23:20:5c:c0:
13:6d:96:c4:13:94:66:dd:ff:7e:c7:4c:be:5b:59:
3a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:C2:9D:46:0D:62:9C:FF:08:40:39:80:08:95:99:65:55:A4:6D
X509v3 Authority Key Identifier:
keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:ac:88:4e:38:48:4e:27:df:24:0b:b5:47:84:f6:c3:8a:9f:
97:ed:8e:06:a5:e5:0d:2e:95:88:b5:75:c7:c4:6a:c0:a0:80:
6c:bb:de:f4:2d:76:32:71:87:69:5d:9b:26:6c:28:94:35:d3:
5e:31:c7:00:4c:9b:03:8a:2c:b8:25:84:24:96:6b:09:c5:db:
56:9e:54:4e:08:24:d9:9b:9f:2b:e8:ca:14:d3:fa:84:bb:cd:
a2:82:1a:c4:87:32:4e:b8:e7:d2:ae:02:08:32:92:16:93:a9:
73:5c:25:a2:8d:c8:18:0a:7a:e6:f7:20:2f:ed:bb:07:54:0d:
cd:db:7d:97:68:6d:c1:22:b0:94:ee:e7:03:72:76:4b:6c:d3:
de:67:69:2b:c2:0d:78:11:e2:49:54:9c:72:72:06:9f:34:bb:
99:cd:56:23:9e:c0:b6:b8:05:1a:00:b0:0e:ef:a8:3e:bc:fe:
e0:f8:74:00:4b:58:29:42:aa:d4:e5:63:67:fc:8a:d5:7c:5c:
1f:4f:f8:0b:df:20:74:79:92:89:72:34:5e:34:22:9c:ab:c9:
87:56:c5:f3:f2:27:59:53:db:47:91:6b:30:25:94:b7:bb:f8:
a2:07:c0:09:07:ed:f7:a9:19:c0:32:24:8a:ac:c5:76:a5:4c:
37:4f:c4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:44 2026 by rpki-client