Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: teFiF6wSJvyUJjKv1n6nqtcqotCmJ162Fv60AHduV0M=
Subject key identifier: 8C:24:44:11:14:7E:E6:37:C2:D1:9A:E4:84:1A:61:6B:88:77:75:F4
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 019F84FABD9EDCF372BAF31E80F5AFCF8FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 166B
Signing time: Tue 21 Jul 2026 14:00:52 +0000
Manifest this update: Tue 21 Jul 2026 14:00:52 +0000
Manifest next update: Wed 22 Jul 2026 14:00:52 +0000
Files and hashes: 1: M81Qxbtts07Ib9z19i7shUVMtA8.roa (hash: 5AYY2qI7GMcPmUPABkZnqwFbbIzTbjv6m+OqVwWCrM8=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: rxSpULGmTjFhFwd17CQYFwTjnhu8/BredslKsY4FzwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:bd:9e:dc:f3:72:ba:f3:1e:80:f5:af:cf:8f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Jul 21 14:00:52 2026 GMT
Not After : Jul 22 14:00:52 2026 GMT
Subject: CN=8c244411147ee637c2d19ae4841a616b887775f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:60:85:90:d2:11:49:8a:ea:06:80:3f:28:
0c:c9:71:d6:19:bf:f1:de:b3:42:84:05:ed:6c:d0:
cb:10:4e:97:11:1b:c4:50:a6:c9:dd:94:f8:42:75:
64:ff:b4:81:47:80:8e:74:49:31:48:da:82:97:42:
f2:b6:6d:65:04:95:71:d4:71:01:d8:12:49:a2:52:
11:8a:1b:ed:f7:cd:a5:d8:7b:b7:22:14:68:58:94:
24:9f:13:17:e4:db:08:00:b9:b0:74:10:ef:be:b6:
16:c7:de:7c:fd:c7:ab:a2:8d:46:74:d3:87:15:55:
2b:b6:e8:76:16:e6:f0:fd:de:61:56:70:4d:b7:6f:
e1:6d:d4:b7:e6:ad:65:ce:68:e6:a0:33:1c:76:d8:
a3:a3:3f:80:74:0b:17:f5:6b:ce:a0:8d:25:1c:d3:
e8:28:07:e8:2d:43:38:91:07:70:2d:e0:65:82:02:
60:59:c4:63:f2:11:db:5d:8b:e0:58:5f:0d:23:f6:
b6:66:35:1a:1b:9b:f1:10:ed:c9:98:2c:08:66:21:
93:2e:84:36:52:76:5a:41:c7:81:ad:09:b5:0c:6c:
85:d9:25:79:f0:52:cb:84:db:81:54:e9:fc:ae:c2:
c3:ee:15:9b:f7:92:bb:9c:4c:c1:a6:40:33:e2:4b:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:24:44:11:14:7E:E6:37:C2:D1:9A:E4:84:1A:61:6B:88:77:75:F4
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c3:21:ff:c9:78:91:e6:46:74:8c:7f:9b:7e:75:56:ea:b3:
b4:59:03:8d:77:e3:de:95:c3:4a:a9:8c:cb:31:69:0e:ee:c9:
d7:ca:cb:f4:27:70:7f:6b:ec:0b:0f:b1:65:c5:f1:67:d4:2e:
94:00:7c:14:ef:ae:63:26:c6:61:9b:d6:53:ad:8b:be:9b:9f:
1d:41:4f:5f:9a:42:f8:17:c6:63:5e:0f:ae:d3:bd:49:4b:f5:
2b:c4:78:08:27:cf:20:87:02:bf:1f:5f:69:a3:4e:af:f3:6d:
96:94:7c:9e:19:30:93:88:e0:7b:0d:5a:ab:bc:ab:fd:37:d6:
7c:ea:de:ac:b0:b1:98:a5:99:7d:1f:25:6a:cc:28:c4:ec:c1:
c1:47:f7:d5:ec:d3:27:ee:3b:f4:b8:89:f8:30:85:cb:a7:cf:
fc:4c:67:8d:6b:d9:30:14:24:4c:00:50:1b:b2:76:9d:7d:e2:
d5:c1:27:ae:34:98:e6:c9:86:58:a0:5f:1a:d7:41:1b:be:0e:
8e:29:c6:d7:b1:22:cd:4e:57:4c:58:63:34:ac:e2:5d:f4:1b:
70:41:3a:42:ba:a2:53:d5:76:8e:96:60:10:c7:44:87:f7:c7:
d1:25:e1:48:0f:4f:1e:1b:97:83:b2:98:e5:36:04:96:59:68:
19:e4:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:46:46 2026 by rpki-client