Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier: Wc19Rlp8IC3IsgB6ZzbAOm7+cSPwJWzb8k8+z8OkPjM=
Subject key identifier: 3B:4A:31:F8:D1:50:5D:E7:84:ED:6F:69:07:B8:A2:A3:D9:0E:E4:5D
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer: /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial: 019F84FAC0BA257CDA4BA0665B3568CB62A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number: 1840
Signing time: Tue 21 Jul 2026 14:00:53 +0000
Manifest this update: Tue 21 Jul 2026 14:00:53 +0000
Manifest next update: Wed 22 Jul 2026 14:00:53 +0000
Files and hashes: 1: KgDvJO7R9xt8L6g89R0awXRGW1s.roa (hash: ETsSBhdqQ9MlEMxi8CjWGna2tcafJ0md9vP0I27TipY=)
2: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: 7Cq4KbY3hH9If2Ozix7LxdTWVH9m8sKhcgQ30CRx8ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:c0:ba:25:7c:da:4b:a0:66:5b:35:68:cb:62:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Validity
Not Before: Jul 21 14:00:53 2026 GMT
Not After : Jul 22 14:00:53 2026 GMT
Subject: CN=3b4a31f8d1505de784ed6f6907b8a2a3d90ee45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:89:96:ed:6a:fb:59:1b:38:54:31:1b:40:
d2:06:a7:f7:31:68:55:b9:7a:1b:43:e4:8d:20:9f:
ff:09:88:f4:bc:33:48:a6:e9:1a:83:45:b6:4e:01:
ba:5c:cf:61:16:49:8f:c2:98:71:9b:5f:a5:da:d3:
dd:d0:fa:7d:e4:c4:14:fa:db:5d:c6:ec:7a:5f:5e:
18:03:a4:14:ed:fa:13:98:d8:a6:ee:2a:be:be:2b:
4a:f8:20:56:8b:fb:9d:e4:bd:26:db:be:dd:61:5f:
49:87:2c:b4:e9:19:d5:78:e8:b9:ad:7f:02:28:eb:
6f:b0:c6:c2:fd:e2:39:ef:a4:b2:4d:c8:eb:08:c5:
5d:44:c3:eb:32:4e:e9:58:ec:1d:26:c9:13:44:8c:
cc:0e:9b:22:38:3f:d8:53:7c:7d:7c:0b:1d:d6:d8:
23:ba:17:35:8f:94:7a:6a:c9:eb:97:9a:f7:79:07:
c6:fa:4e:44:9a:64:b2:7c:f2:92:73:ee:1d:b1:cd:
96:77:02:a2:b0:84:04:86:e1:6b:c4:f3:a9:97:46:
63:4a:74:2e:9a:6f:a7:34:66:1d:1d:bc:be:0d:ea:
cf:91:86:3d:78:59:00:9b:d8:63:d0:be:3b:db:0b:
10:d2:29:dc:21:64:8d:a8:60:c8:54:01:8c:38:91:
0e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4A:31:F8:D1:50:5D:E7:84:ED:6F:69:07:B8:A2:A3:D9:0E:E4:5D
X509v3 Authority Key Identifier:
keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f1:ff:21:f3:00:05:8a:ea:f7:02:9b:3b:42:3b:39:1d:c2:
a1:0d:23:7d:94:b0:35:14:34:de:14:e7:d1:e1:eb:04:cd:b5:
d8:f5:f1:ae:b7:bd:f2:ad:d3:de:dd:dd:41:65:3a:b9:7f:b8:
78:73:dc:f5:ae:94:68:5d:ba:44:c1:8a:16:8f:6f:29:c7:26:
bc:f4:8a:8d:05:56:38:e7:de:3c:07:3c:d8:1d:22:d0:52:4e:
69:12:18:88:54:11:65:70:7e:55:7a:75:6e:99:96:e0:c5:80:
ff:f9:49:b5:55:2c:53:3e:1a:f2:70:ab:ef:8a:b0:8f:25:5f:
d7:8e:c7:07:3b:3f:f2:f0:23:ba:9d:72:ab:d0:91:d6:05:5f:
6c:78:7f:72:ff:b4:8f:4a:a0:87:07:6b:fa:2d:cb:0f:57:3e:
c9:42:5a:b2:f5:f8:7a:98:8c:c7:c7:bb:df:21:49:6a:a2:ec:
fb:f0:24:20:80:e7:1a:d6:8a:17:26:ca:65:df:64:c5:29:63:
8e:1f:4f:2a:e8:9d:01:95:21:c9:0a:a3:6f:b9:85:ed:97:2b:
76:09:f7:68:10:80:97:b5:d1:ef:38:a0:c1:6d:b7:cf:a4:23:
00:e6:28:42:1c:cb:ba:51:28:89:61:2a:23:15:8f:66:d6:0e:
c3:6a:67:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:07:32 2026 by rpki-client