
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File: fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier: 20qDJTwic6cw2OKtZwZiBC5bs6CG8RpdWHFm0Rj5Az0=
Subject key identifier: 54:46:A1:57:C0:7D:75:39:9E:45:E1:20:F6:87:DF:19:9C:CC:75:25
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer: /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial: 019FA1F2873301A5184BED758F2DCA2ADB38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number: 0560
Signing time: Mon 27 Jul 2026 05:00:53 +0000
Manifest this update: Mon 27 Jul 2026 05:00:53 +0000
Manifest next update: Tue 28 Jul 2026 05:00:53 +0000
Files and hashes: 1: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (hash: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8=)
2: a7dc7sTXBG9g6baqXZ5n-zFcW2U.roa (hash: NAb+NkDlWJd04gSzwtykl0+s9KlRgbw76dF4Fu82HXg=)
3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: 0vVjRgxNts36H+rHUFOAke9TXyNxf8j95m5XgELeVfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:87:33:01:a5:18:4b:ed:75:8f:2d:ca:2a:db:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Validity
Not Before: Jul 27 05:00:53 2026 GMT
Not After : Jul 28 05:00:53 2026 GMT
Subject: CN=5446a157c07d75399e45e120f687df199ccc7525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:60:bf:10:fc:27:2a:18:31:43:a4:0b:21:
36:ee:ea:d1:3a:f4:79:33:18:e7:7e:ac:75:41:5f:
b3:d2:da:22:8d:9c:cc:0b:00:8e:72:31:96:b4:cb:
af:0f:54:37:c8:cd:46:f9:77:56:45:08:ce:29:97:
6c:88:86:71:b0:12:4c:6f:df:ab:34:16:55:16:6e:
23:c0:f9:6a:e5:6c:13:8c:0f:21:57:ff:72:8e:73:
ac:4e:13:7a:08:43:26:cf:bd:36:2c:e4:6d:53:66:
d8:f6:1d:60:a7:f7:be:41:21:b5:6b:90:32:1f:a4:
70:52:ba:ac:a7:85:93:ad:35:70:c4:78:c3:27:e8:
07:5a:0f:0f:a1:b1:cc:94:a7:58:c4:98:a8:a2:74:
c0:a5:37:53:1c:e3:79:5d:6f:02:cb:5b:28:a1:5c:
3d:82:6e:41:b0:24:86:77:a0:9a:83:eb:a7:c1:32:
50:4f:be:08:7c:cc:68:4c:10:0e:8f:54:7d:65:9b:
fb:d5:68:33:a0:98:8c:59:46:f4:e3:58:cb:bf:76:
ed:49:31:c9:80:d4:f4:c8:f9:cf:22:b5:59:a1:5c:
77:dc:2a:be:1c:6f:50:bc:48:b6:58:10:a1:10:a8:
06:86:47:fe:e0:78:f3:26:8e:f6:26:f1:df:76:bf:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:46:A1:57:C0:7D:75:39:9E:45:E1:20:F6:87:DF:19:9C:CC:75:25
X509v3 Authority Key Identifier:
keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a0:64:8e:9d:07:97:0c:98:7d:d7:08:e3:3f:60:e6:26:a6:
3c:7a:93:5b:d0:f6:14:58:e7:79:d3:bd:9d:c1:df:ed:75:a7:
ab:aa:4d:ae:28:3a:67:74:7d:33:3d:6a:20:83:da:5d:7f:15:
e8:d3:d0:62:2d:cd:eb:2b:e7:e5:49:60:f1:25:60:35:15:0b:
02:2e:6e:cc:0b:72:21:44:bf:fa:bd:bb:79:80:ae:60:07:0f:
f8:ce:01:2a:be:0f:59:1b:dd:ad:4e:bd:7d:dd:34:fe:95:ff:
f8:5d:9a:54:54:94:62:5b:c2:e7:4b:5b:64:9a:0d:61:84:7e:
9c:e1:81:fd:46:3d:52:4c:b6:73:57:df:d6:fd:48:92:fd:d9:
ca:a2:6d:0c:28:74:e8:52:61:70:aa:9e:ea:57:39:b7:4c:da:
c8:cd:dd:74:7c:55:05:e2:d9:64:d0:bd:e6:8c:cc:11:a2:e2:
a2:39:ed:29:c4:69:0f:01:8f:39:50:49:55:0f:ee:4a:96:cd:
6e:6c:b1:3f:78:48:72:35:de:db:19:76:1b:cd:63:1e:5d:12:
a0:44:ad:20:59:49:5d:77:21:73:a5:f2:0e:f1:f1:a1:c7:55:
58:6b:50:e7:c2:f7:ef:c2:ca:4b:05:3a:04:9e:d2:ba:24:a0:
6e:55:15:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:53 2026 by rpki-client