Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: HqMGZJU433V46QVqR9qfT5tlU+4kgKGv/OCpjkuPAnM=
Subject key identifier: E6:87:42:2D:30:ED:09:E3:6C:21:3E:57:91:22:2A:92:A0:4F:AD:BA
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 019F4B4292A9130021767D6A40AA0A28D4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 19A2
Signing time: Fri 10 Jul 2026 09:01:21 +0000
Manifest this update: Fri 10 Jul 2026 09:01:21 +0000
Manifest next update: Sat 11 Jul 2026 09:01:21 +0000
Files and hashes: 1: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: 5bNHlakGJaKd7Bd2g29wdP4ukt/HBX5oUCD4ifQaq9s=)
2: grQlShm9Yf4p9v0UY4WRgIC18Rg.roa (hash: 0KLMtmRL0pnGPXXoN5qSCFJywF+voZI8ebkJsYdl6wg=)
3: l1AVp_w4-LVuNkKZXyFJBaRiTqU.roa (hash: pv6l02vTFMwEiJ4PcQNABkmbJULiDmx5aoXWeKtSRA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:42:92:a9:13:00:21:76:7d:6a:40:aa:0a:28:d4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Jul 10 09:01:21 2026 GMT
Not After : Jul 11 09:01:21 2026 GMT
Subject: CN=e687422d30ed09e36c213e5791222a92a04fadba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:3b:ca:5b:d3:b4:41:b8:f1:79:de:ec:70:
f8:c0:ea:11:bf:75:b7:17:22:78:bb:21:32:f7:2c:
e5:36:b6:d4:97:f1:f0:53:7f:a7:55:ed:54:a5:bc:
44:10:46:23:32:68:10:ec:6d:c0:ac:05:4f:02:4a:
cb:65:63:67:87:0e:0d:b5:e4:58:dd:57:2f:d2:ff:
26:5f:ab:dc:c7:28:e0:31:9c:ef:9a:da:b1:c4:fc:
59:c3:f2:5d:e1:d3:3b:c1:33:b5:05:0e:6d:a0:cf:
8e:2c:d7:9e:2e:0b:df:b9:38:37:dc:9e:f1:a4:f0:
99:4e:bd:b9:c3:d6:e5:f2:6d:2c:77:69:0d:44:c0:
c0:2b:58:ef:89:6b:b5:57:8d:6c:93:04:a6:92:4c:
5a:20:a2:f2:30:f7:ee:7f:f2:63:b4:8d:70:c2:3f:
78:01:d1:45:a7:e0:4a:27:51:2e:23:4c:0a:27:cc:
76:85:02:97:fb:a6:51:93:4d:63:28:2b:bc:f3:94:
3f:68:23:5c:7a:be:10:0f:e0:22:08:e1:9e:7a:5f:
b7:6c:d5:25:b6:2c:21:06:a8:a9:2c:b6:fc:10:0c:
9f:37:31:fc:d6:5a:52:9a:20:d8:4c:59:f7:12:cb:
33:0c:21:cd:33:ac:cc:c4:e0:d1:6a:5f:2b:f6:15:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:87:42:2D:30:ED:09:E3:6C:21:3E:57:91:22:2A:92:A0:4F:AD:BA
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:aa:b3:4d:48:c1:ce:bd:07:05:df:72:34:34:cf:50:ed:48:
ae:57:14:44:b4:f2:d8:ec:4c:b9:f1:d4:01:98:57:cd:e2:e1:
c7:f1:ed:c9:b3:f6:35:44:d5:3c:af:e7:e2:2c:43:e8:af:54:
df:f7:be:9b:47:fc:2b:05:bf:f8:da:59:44:c0:41:7a:78:91:
40:74:a0:1b:8b:5e:e0:75:96:a1:93:59:22:9a:d0:c7:e5:32:
76:70:08:0b:90:cd:8f:84:15:33:5f:bb:40:40:e1:28:49:34:
3f:38:c3:f5:6c:2a:a9:d2:36:9a:b6:50:2e:48:16:43:85:09:
18:3a:1c:db:fa:ae:cd:f0:7e:64:df:3b:92:f9:fd:63:e0:8d:
82:4c:ac:8c:ba:b1:77:8f:cb:36:13:77:75:df:87:27:53:ac:
00:7c:2a:8b:3f:99:ba:f2:66:9d:1e:f7:be:d2:36:40:84:6e:
7a:fa:ce:15:c8:88:71:a9:c6:4d:94:f2:c4:8d:45:60:12:e9:
11:b9:83:d7:c7:a7:a4:b1:f4:e8:e2:79:c7:c5:5e:1d:11:fc:
79:9d:2c:cf:90:45:51:ed:1c:24:a6:bd:f3:e2:50:d2:e1:d9:
0a:af:22:36:4f:1b:0d:85:c4:98:c0:2a:26:9c:87:9a:15:aa:
ad:63:97:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:59:44 2026 by rpki-client