Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier: BKNUWN0sbjwyJp9Fd/mPXmWz/ORGs6Wa/WD1UTOcbyU=
Subject key identifier: C2:08:C6:30:16:8A:9C:DA:DD:F6:F2:AF:F8:FF:2B:54:3F:3C:D9:A8
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial: 019F829E75FE6553DA10306141F1107B44AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number: 1122
Signing time: Tue 21 Jul 2026 03:00:50 +0000
Manifest this update: Tue 21 Jul 2026 03:00:50 +0000
Manifest next update: Wed 22 Jul 2026 03:00:50 +0000
Files and hashes: 1: 45BMgCuqB7Qqmdq4IfySW95860Q.roa (hash: /3yVgENUMMM3hvYZVMX2EJz9expmMzP+geHM5UtLC0g=)
2: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: OCCNwMk1pLdTWVpRgAk7Zk2ON9FptZwRx19Xz1+N6/Y=)
3: RWQ71z2DZSS9r_C7kS5T8uzb9QA.roa (hash: gaz/WwXIMVoLlKWboyvLKp3LOZlOzuqEFf6XY+CWPxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9e:75:fe:65:53:da:10:30:61:41:f1:10:7b:44:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
Validity
Not Before: Jul 21 03:00:50 2026 GMT
Not After : Jul 22 03:00:50 2026 GMT
Subject: CN=c208c630168a9cdaddf6f2aff8ff2b543f3cd9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:27:de:7f:67:8c:c0:f2:d5:1e:4b:03:81:
46:85:25:cc:4a:d7:a5:d6:c8:7a:18:20:b7:a4:6f:
fd:90:6a:8a:52:76:b2:4d:44:b4:e6:89:12:a8:c3:
0c:be:df:48:06:c6:70:4f:71:b8:78:55:30:7f:d8:
b5:b1:00:62:42:40:c2:e4:8d:bd:27:22:c3:69:cd:
69:de:ae:ea:9b:2d:13:eb:86:c8:3c:a1:cc:aa:50:
80:1f:18:97:ff:95:9e:04:8b:2c:5d:1c:ad:5d:98:
f0:67:3e:c9:90:81:c8:a8:c6:38:c0:ba:97:a9:d0:
0d:06:93:3a:15:c9:0f:26:e0:28:bb:2f:11:d9:8d:
47:c2:cf:b5:91:db:c7:24:74:3b:c0:15:0e:00:c8:
53:a3:3e:a0:47:8a:88:38:b8:bd:f5:c4:04:f4:19:
84:d2:c9:b0:6d:37:52:3d:5e:4f:b6:09:48:73:fb:
ad:e1:a5:2d:77:47:ea:4c:24:c2:1b:49:c1:c0:24:
3f:4c:fe:06:fb:e0:6f:8d:78:e6:65:a1:90:53:2e:
e4:ba:57:30:aa:21:03:13:90:c8:a9:ca:31:c1:5c:
0f:1f:0c:d0:1f:96:5f:3d:5d:f0:26:06:c5:8c:42:
51:13:97:35:dd:5a:93:20:ed:2a:3c:16:87:83:02:
d6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:08:C6:30:16:8A:9C:DA:DD:F6:F2:AF:F8:FF:2B:54:3F:3C:D9:A8
X509v3 Authority Key Identifier:
keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:63:56:15:6f:95:5c:5e:db:cf:7b:ef:c8:b0:03:3b:41:a3:
01:2b:bf:a8:a4:81:d6:9e:0e:73:cb:de:d5:57:78:73:83:4c:
dc:f3:82:21:22:7c:aa:13:46:a6:bc:1b:f6:88:43:32:b9:10:
06:30:83:8e:7d:2e:8c:ac:af:f6:12:30:f3:64:62:2a:77:e9:
78:cc:11:ea:8d:c4:7a:9e:fb:44:5e:ee:33:a3:7f:03:2b:2e:
8b:54:f6:9f:99:08:13:ae:e7:eb:4a:0f:f7:00:96:48:5a:ad:
01:17:63:d9:69:fc:48:de:08:2d:db:d7:fa:2d:2a:8d:d0:a4:
8a:88:84:dc:8e:d2:b8:f1:66:3f:bf:e5:2a:aa:7a:e9:2d:c4:
1b:1b:2a:8b:4e:b7:7e:03:20:f8:47:45:86:2c:00:81:16:64:
df:30:ab:ae:d9:46:37:af:8a:ba:2c:ee:6b:0f:e2:ef:8c:f8:
dd:f6:6f:2b:5c:a2:e2:0f:c4:41:dd:8b:67:57:c1:a7:94:3a:
33:1d:7b:d1:ab:15:0e:11:bc:c0:3d:a1:07:b2:ed:c8:35:2c:
13:f6:5b:d1:cf:f6:76:8e:f3:b9:a5:88:72:c2:85:c9:82:d8:
b4:42:27:ef:41:77:1e:5f:0b:f7:be:e4:65:48:42:8d:ac:b2:
37:59:c5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:49 2026 by rpki-client