Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json)
Hash identifier: pYAcsYmu5TaoZUcBT2cU3QrO2MTZ1yrEuVern4Ds8mU=
Subject key identifier: 8D:DC:57:14:3B:10:29:62:B8:32:45:E8:D1:80:94:A5:B1:98:F0:89
Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Certificate serial: 019FA907947B9398FC4FB497C8FAFBEA668B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 14:01:13 +0000
Manifest this update: Tue 28 Jul 2026 14:01:13 +0000
Manifest next update: Wed 29 Jul 2026 14:01:13 +0000
Files and hashes: 1: CEyBPj5VD8UxRiqVxqInbi9mDx8.asa (hash: OtsKbdUFAn6cy1skhcCn+WuIejDR78hfMFZ1vJq0JOA=)
2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: LWCuTMfTx7Yc+w9+s4ndgLI8nfq88b5pOpp/F7N0TqI=)
3: srGtxdotdL1gGYebpFyhRC2KgLw.roa (hash: peHYPQm6+m6K0GIm1p2M4aZrPJFnCNdM3/dYTyUbnoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:94:7b:93:98:fc:4f:b4:97:c8:fa:fb:ea:66:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568
Validity
Not Before: Jul 28 14:01:13 2026 GMT
Not After : Jul 29 14:01:13 2026 GMT
Subject: CN=8ddc57143b102962b83245e8d18094a5b198f089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:73:76:30:ba:08:e2:1d:e1:18:05:fb:85:
a3:56:99:ae:3b:69:c9:05:e4:f9:f2:9c:64:cf:f3:
c1:a9:e5:ee:35:2b:a9:11:23:c3:68:07:70:4b:93:
15:d0:b3:5b:60:75:1b:63:d4:db:b3:bf:2a:4e:17:
d4:ca:2e:6c:fd:c5:0a:4d:70:f9:02:ca:5a:f3:02:
17:1b:45:57:53:24:97:9b:54:fd:62:6c:17:e5:06:
f2:fe:d3:66:37:f8:c1:5d:3d:31:20:3b:c7:4d:f1:
5c:68:52:a1:7d:52:66:3b:d1:45:f8:77:69:d6:46:
bc:20:5a:56:2d:1d:67:08:a2:9d:6f:55:ed:4b:3d:
0e:ae:36:ec:87:7f:9f:89:6c:29:93:3a:31:bc:3c:
86:b1:c9:92:dc:e3:1c:46:85:10:50:07:2e:16:2b:
70:32:0e:bb:fb:4f:7a:44:31:84:36:42:da:1b:45:
8f:ac:12:06:37:d2:d1:87:88:54:03:0d:b7:b2:df:
e8:57:db:86:a2:d1:c7:d1:7f:29:25:94:8e:3b:dc:
31:7a:2c:1e:1f:21:ff:21:3c:19:60:dd:03:b3:83:
66:89:d7:3d:46:0b:8e:c2:53:5b:20:2e:9b:39:a8:
6f:1b:4c:b6:45:3c:17:57:37:3f:3d:d6:0b:e9:37:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DC:57:14:3B:10:29:62:B8:32:45:E8:D1:80:94:A5:B1:98:F0:89
X509v3 Authority Key Identifier:
keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a4:50:5c:80:e9:b3:07:29:44:62:95:a4:c4:dd:75:7c:58:
11:c5:19:eb:e1:ba:cb:11:79:3d:a1:8c:78:ee:56:9e:77:78:
d0:ea:35:f3:ee:db:79:fa:43:f9:08:53:d7:0b:6b:aa:0f:aa:
81:46:41:ad:22:04:6d:92:7f:b4:15:fd:fa:cc:9b:41:e6:a2:
07:dc:69:8b:63:7e:98:0f:75:98:e9:0c:f6:cf:08:77:e4:27:
c5:d8:32:3d:af:da:d7:b9:17:47:bd:81:da:e7:5d:ce:c3:43:
7e:47:da:28:78:ad:f4:07:4b:bf:86:bf:27:4a:e4:4d:c2:27:
8a:dc:df:1f:b4:2b:32:72:8f:8b:09:c6:80:93:48:71:ce:91:
ed:69:99:f3:9e:67:56:cd:a3:1a:40:cb:a5:90:3f:78:ea:02:
51:0f:cd:ed:6a:b9:30:54:58:a7:19:35:82:83:68:ba:91:e3:
6e:ea:67:1a:18:a6:f5:87:c3:32:ad:fc:05:c8:62:49:39:85:
e4:ae:8b:bd:63:bd:31:cc:18:10:92:4f:05:20:6e:4d:32:20:
b6:fd:58:0b:1c:3f:95:ae:bd:e4:7e:2e:a7:67:ae:aa:3f:a0:
94:48:a8:91:9c:87:b9:e9:a9:cb:6e:0d:c4:56:2e:54:3d:0f:
9a:a6:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:25 2026 by rpki-client