Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: 8u0FLf07MQH/kbN9Jjwh4H8tyHdz1JlsaZhJT9vj//w=
Subject key identifier: 0D:A4:14:7C:32:61:05:C6:68:B3:0F:D9:3D:26:4E:D1:F0:05:D4:4C
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 019FA296DFF6439651D4F5D8DC7C26CEA709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 08:00:24 +0000
Manifest this update: Mon 27 Jul 2026 08:00:24 +0000
Manifest next update: Tue 28 Jul 2026 08:00:24 +0000
Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: KphRYm2yds3xMO46S/3kN9EjM8Uw/EOhub8ZdfOQ8mg=)
2: ZWBJxYdw0yqefP_6w5hTElTjn_w.roa (hash: ka3/3w04e1WBZfQiP+cb8ld/BzE1PNW9ESTV22owMjY=)
3: nQOGLsDTu8U8pFDRgHktBs12LXo.asa (hash: fwzFvF5IHbE+z4rN1nerwJCzmr6g02nn5C2pFL2CM0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:df:f6:43:96:51:d4:f5:d8:dc:7c:26:ce:a7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Jul 27 08:00:24 2026 GMT
Not After : Jul 28 08:00:24 2026 GMT
Subject: CN=0da4147c326105c668b30fd93d264ed1f005d44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:b7:ff:57:1c:89:52:79:44:da:8e:f0:4a:
58:b1:09:2e:cd:bd:f3:2d:29:36:a8:af:17:cd:c6:
3a:86:0d:0a:c4:bf:1f:dd:0d:d7:7b:05:d7:ee:fb:
76:91:ac:c6:70:62:70:c8:0c:dc:a3:53:2a:15:b1:
4b:5c:2d:00:cf:c0:02:df:9d:d7:3c:96:c1:37:ab:
99:70:3b:16:79:ab:f9:ad:58:c6:40:af:be:fd:d5:
f5:3c:1b:63:0b:21:8b:e0:f0:14:47:93:a1:a5:9d:
f2:ca:9d:11:bb:66:8f:c2:e3:29:91:10:70:4b:4d:
c5:0c:f8:01:ce:4d:11:4a:dd:c3:ae:30:c8:2a:fc:
aa:80:79:b4:23:a3:80:f9:35:49:42:cf:c5:ee:61:
dd:be:6c:b4:45:3e:4a:7a:91:e0:37:c3:27:e7:14:
a7:38:a6:e9:ee:26:96:de:07:c8:ba:60:d4:ac:e2:
e6:82:c9:4f:04:45:0a:9e:c5:1e:3d:4e:30:cb:1c:
87:28:60:f9:9a:93:e6:9a:1e:d7:c9:17:c2:4b:6a:
86:6d:8d:85:93:f6:cb:44:9e:75:ac:9b:4e:6e:8d:
d8:a4:3a:e4:44:9f:9f:a8:78:3e:24:38:d5:d0:c9:
b1:93:c0:b0:75:7b:25:03:9f:68:e8:af:0e:00:47:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A4:14:7C:32:61:05:C6:68:B3:0F:D9:3D:26:4E:D1:F0:05:D4:4C
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:df:db:07:55:34:3d:ff:7c:a7:04:28:5d:76:56:7e:23:31:
b0:85:78:05:0e:2a:92:c7:8f:6e:f8:4d:07:98:11:a9:ca:d3:
ae:87:56:f0:d8:ac:c0:d3:ca:52:20:a1:8d:7d:75:08:d1:ed:
63:b7:b5:60:63:5a:77:93:12:80:d3:a4:77:bd:0a:45:7b:d7:
ad:6b:dc:da:62:09:54:1f:ec:28:8a:dd:e2:ae:bf:b2:a2:8a:
c9:be:21:d1:e1:50:95:c6:63:7e:5f:85:8f:4b:39:9d:da:e4:
7b:21:50:f0:20:dc:da:a9:fa:40:ef:e8:62:fa:9f:88:30:c1:
1b:11:13:72:5d:06:c0:5e:f3:dc:a6:78:ba:2b:52:54:f7:cb:
0b:5c:bf:59:25:d9:72:70:91:04:a6:2f:ba:23:5f:ed:6b:96:
a5:b3:05:89:42:73:90:d1:41:6f:18:9e:6d:50:e7:c4:4d:fb:
cc:15:61:b8:41:23:b7:55:8b:6f:0b:be:a5:3f:f5:fd:c1:c7:
3a:b4:df:c4:ae:ba:89:c5:39:0f:30:e6:e6:4f:36:b3:62:4f:
c6:88:11:ab:c5:07:ae:86:18:33:08:0c:c6:f4:fb:2b:1c:e2:
d4:ad:42:76:e5:b6:29:85:2c:8e:78:76:69:f3:72:6e:7d:59:
38:70:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:49:11 2026 by rpki-client