Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json)
Hash identifier: A/d5J8PV2jWkFbWPWDXoGjglPq8S18gzsHJCJ5EPrDk=
Subject key identifier: D6:9D:BF:B9:56:7D:22:B4:89:10:4C:F8:BC:AA:88:C1:F2:8D:C9:F4
Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Certificate serial: 019FAB2C70E615235C73E9D41D7014FC2DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
Manifest number: 149A
Signing time: Wed 29 Jul 2026 00:00:44 +0000
Manifest this update: Wed 29 Jul 2026 00:00:44 +0000
Manifest next update: Thu 30 Jul 2026 00:00:44 +0000
Files and hashes: 1: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: Nf98T7J88UpcwFsvVjNctInUOCW9fPdD95SZoxL4P/M=)
2: lTrIYbwh25WZaMx9FTa-lJOaOXw.roa (hash: yIg48QwH4K69I8dvoAjoM5Eex+bVMTIw9/IsxOLJtfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:70:e6:15:23:5c:73:e9:d4:1d:70:14:fc:2d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1
Validity
Not Before: Jul 29 00:00:44 2026 GMT
Not After : Jul 30 00:00:44 2026 GMT
Subject: CN=d69dbfb9567d22b489104cf8bcaa88c1f28dc9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:22:2a:fb:a1:32:01:31:de:8d:63:f0:90:
54:df:44:90:e2:e2:d6:e2:9b:20:a6:af:a4:a3:3c:
22:59:7d:8e:cd:03:e5:65:ed:3e:27:94:f2:0a:62:
9c:1a:bf:7a:be:57:bb:99:3e:03:16:5c:4c:dc:bb:
bb:64:d4:dc:1c:36:86:bd:01:3d:b3:9b:24:4d:8a:
09:72:00:e8:3c:f1:9c:cc:b6:e1:d0:85:d5:c4:11:
cf:77:38:87:5a:29:b2:0f:11:d9:4a:5f:5e:79:80:
71:0f:75:9a:f0:8f:f8:27:71:45:ca:af:1c:73:54:
0f:68:70:d6:b7:9f:da:c8:c1:e5:32:6b:bb:df:1e:
06:01:34:65:4e:20:b2:5c:02:94:d8:25:b9:09:eb:
92:ab:94:31:9d:d2:68:35:2b:df:54:d7:81:b6:94:
78:5a:f3:b8:17:f7:5a:3a:a9:ac:4e:9c:09:96:4a:
29:e3:c9:a3:ba:66:75:3c:e3:33:05:d7:58:69:a3:
f9:c2:83:dc:0d:7c:e7:a3:74:c6:14:dd:13:7c:25:
7b:4b:4a:6a:f5:f6:7a:cf:ff:24:6b:34:50:a6:3d:
ca:98:6b:a9:0c:12:09:73:79:d2:df:23:0e:27:58:
8a:69:b7:99:2d:6a:67:08:90:96:15:da:73:3c:75:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9D:BF:B9:56:7D:22:B4:89:10:4C:F8:BC:AA:88:C1:F2:8D:C9:F4
X509v3 Authority Key Identifier:
keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:55:82:92:4b:6e:d0:60:e1:a2:b1:ae:b3:dc:59:2b:cc:11:
74:2f:00:02:02:9c:6d:0d:70:e2:ca:23:5f:6a:40:9e:90:32:
19:00:45:40:32:c1:ec:ab:ab:5a:f6:2f:5f:78:a4:21:d4:1a:
2d:2e:22:7f:17:8a:f9:3a:8d:0f:d8:7c:ce:84:29:8a:f2:62:
07:90:d0:d8:5d:08:05:88:af:d4:10:7e:88:bd:0e:ed:cc:76:
a2:2e:26:a9:0c:5b:31:2c:f8:c5:16:8b:d6:fb:47:03:97:6f:
75:34:74:36:97:b9:5a:03:d2:86:49:93:a4:5f:eb:a7:87:41:
87:72:4f:02:45:08:b8:77:7c:37:13:1a:db:73:7e:0f:7c:ca:
b8:bb:a6:86:ef:2b:bb:aa:97:60:29:86:97:fd:2e:92:20:9e:
08:f2:3b:35:37:6a:9c:eb:51:e3:a5:20:92:bb:1b:67:e4:ee:
a5:ac:b5:30:cd:e9:fa:c6:5d:73:dd:02:f7:97:d2:19:2f:0a:
a7:9f:9c:3d:47:23:ee:46:4c:e4:d1:ed:cb:b7:0e:7e:6a:34:
71:87:1f:0f:c5:47:d0:6c:ee:53:93:54:73:b7:30:a7:8d:4c:
79:c7:b4:90:27:74:7a:6f:25:05:d4:85:2a:ca:f6:0d:2a:b2:
b9:c9:1b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:59:36 2026 by rpki-client