Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json)
Hash identifier: Qo3v7AgxgeU/pdTafoGKXh80ywf9PoUB1CFTjrVP7dI=
Subject key identifier: 7D:FC:57:3B:0C:CF:BF:A8:9C:ED:72:52:E7:AC:1C:9D:EC:1A:1C:12
Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Certificate serial: 019FAA87EBC2E5C2AF7E7C96E0509A6BACA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
Manifest number: 0497
Signing time: Tue 28 Jul 2026 21:01:02 +0000
Manifest this update: Tue 28 Jul 2026 21:01:02 +0000
Manifest next update: Wed 29 Jul 2026 21:01:02 +0000
Files and hashes: 1: 2QUxpcZo42MO8NPw3ViO527hXWk.roa (hash: jXv9njLEXA5SkLC2GOthlPZiLCWl9vdzZCcofBzcG18=)
2: JNor73gXz2ec5FVJvGqRzBpyxSI.roa (hash: k/2ZGjtnrbIQP29sZmOjF46Dom6I0jn9nqS/95MSEu4=)
3: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: t/+QYw3V7aXSx79p1v8Z6ctyPGm9dH+6A41VaywrpeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:eb:c2:e5:c2:af:7e:7c:96:e0:50:9a:6b:ac:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1
Validity
Not Before: Jul 28 21:01:02 2026 GMT
Not After : Jul 29 21:01:02 2026 GMT
Subject: CN=7dfc573b0ccfbfa89ced7252e7ac1c9dec1a1c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:56:d1:ad:e6:b5:38:17:27:2d:b2:00:b5:
29:fe:49:2f:c6:a4:7c:d4:bb:7d:fc:cc:99:c6:25:
3c:d1:d2:db:3b:1e:f0:49:c6:30:8e:09:9f:bc:c3:
4e:8e:10:8b:63:86:a1:77:70:a2:6e:5c:02:a9:d7:
d1:84:6b:6b:c5:61:5d:50:fa:58:58:6d:78:85:b5:
0e:95:a2:f0:ac:8e:a0:8b:e1:02:b5:44:8a:b9:26:
4f:da:71:02:a9:33:66:0c:a7:f1:46:85:1a:c7:de:
dd:a5:95:21:53:ca:e6:78:ed:6f:47:c7:24:1c:32:
ba:04:d1:5d:d9:25:7d:65:9a:a5:31:16:00:ec:6c:
bf:db:33:3b:92:ad:c1:9b:d8:a5:b8:99:3f:a8:ff:
d7:c4:55:aa:ed:75:a9:44:fa:d0:c1:d7:96:ad:0b:
c5:dd:b9:24:82:f6:a1:ed:d0:97:ac:aa:73:25:67:
56:25:c9:6c:34:a7:3b:f2:be:b1:cd:f9:06:74:1c:
22:e6:76:0f:44:c1:b1:d8:d3:38:9a:06:b0:92:9a:
bd:a0:0a:ff:bc:f9:f5:61:93:9e:ef:ca:f5:8f:15:
7b:3d:b1:d6:9e:30:7d:ef:0a:6d:1a:c5:3d:d4:04:
67:da:d0:bd:59:ce:3e:ee:5a:05:4e:8b:a9:5d:5b:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FC:57:3B:0C:CF:BF:A8:9C:ED:72:52:E7:AC:1C:9D:EC:1A:1C:12
X509v3 Authority Key Identifier:
keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a4:d4:74:fb:62:06:5f:09:e7:1f:cb:d4:8a:fb:79:b6:63:
16:56:5d:a4:b1:e0:c1:ec:6e:d7:3b:25:72:ea:bc:c9:35:36:
21:be:b1:ba:0e:ff:cc:77:15:26:99:4b:36:f0:c2:3a:12:5c:
4e:55:f5:fc:3a:ab:61:2e:c8:bf:06:cd:6d:6e:bc:bd:0c:be:
7e:f8:64:ea:07:f3:01:cc:ce:21:69:cb:00:53:09:91:56:a1:
f2:8e:8d:bc:c6:6b:91:c0:7a:37:80:76:da:5c:1c:28:07:75:
49:08:ee:f0:83:35:d5:77:76:99:e1:63:41:6c:61:cf:22:a9:
09:f5:4e:59:a5:ef:e5:67:d0:7a:39:27:98:3a:48:9b:6d:9a:
65:80:93:50:8a:fd:29:45:54:90:fc:0a:87:78:01:55:2e:30:
cc:45:c5:53:39:00:ff:a6:90:cf:0e:55:d3:78:74:47:13:d1:
f2:a0:77:be:a9:af:49:42:93:89:c5:2d:f6:43:91:7a:06:14:
a4:dd:ef:13:41:e8:5b:a7:ef:49:e8:f8:2b:b0:66:12:50:08:
65:91:db:77:56:2b:c7:92:e9:ed:45:19:e6:da:09:85:d7:e4:
3a:ee:e8:65:33:8a:dd:df:62:f2:4b:ed:d8:61:46:b0:ca:14:
3f:ee:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:09 2026 by rpki-client