
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
File: FS1RhIHO0vhNARBPhx1k1EMB2zs.mft (raw, json)
Hash identifier: aWi9z9QZSe7o7xp2IMiLlDVp5ut/UNRZLHCQzYXo5ao=
Subject key identifier: 59:EC:71:9E:EE:F2:A1:DF:CC:7B:BF:CE:B1:C3:DD:02:66:00:AD:05
Authority key identifier: 15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
Certificate issuer: /CN=152d518481ced2f84d01104f871d64d44301db3b
Certificate serial: 019F84C44DB15A77195AB29F38C3E7B1420C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
Manifest number: 3E
Signing time: Tue 21 Jul 2026 13:01:25 +0000
Manifest this update: Tue 21 Jul 2026 13:01:25 +0000
Manifest next update: Wed 22 Jul 2026 13:01:25 +0000
Files and hashes: 1: FS1RhIHO0vhNARBPhx1k1EMB2zs.crl (hash: XuVVa8GxHyrlVmZ42zYV5mKYYo5NS6UZRtnFDiljW8k=)
2: hHugMF0upu8E3pAL79eNfTDXuAo.asa (hash: CHNfsWpYSm629Dc2eZEBbVMtWCU4937S/+vdVD0kO4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:4d:b1:5a:77:19:5a:b2:9f:38:c3:e7:b1:42:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152d518481ced2f84d01104f871d64d44301db3b
Validity
Not Before: Jul 21 13:01:25 2026 GMT
Not After : Jul 22 13:01:25 2026 GMT
Subject: CN=59ec719eeef2a1dfcc7bbfceb1c3dd026600ad05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:71:b7:45:18:4b:4e:11:a6:31:56:cd:9d:
7a:23:f9:10:1c:05:23:1f:0c:b5:f9:a8:79:50:2f:
b7:44:64:00:01:f3:13:e6:a2:8b:66:38:60:9a:8d:
d5:8a:5d:8b:f7:0f:33:00:08:9a:01:a2:94:aa:e9:
ee:ed:4a:26:2f:ce:45:96:56:66:df:4a:f5:bb:7d:
05:68:a2:7f:36:bd:d2:49:3f:a1:37:c9:9b:d2:8f:
42:09:b0:ba:db:5d:eb:4c:d5:42:41:b9:f1:76:a3:
cf:4a:8f:e4:79:23:85:7c:c8:02:03:4e:88:bc:71:
74:90:73:9e:e5:f2:39:f5:e8:34:23:1c:f6:43:6d:
24:b7:a2:07:ed:ab:fa:ce:95:ea:e7:92:c1:d1:c4:
7d:73:e9:a2:f8:83:17:52:99:0b:fa:7a:f5:d5:31:
30:d2:f5:41:65:05:21:51:a7:4f:70:ca:41:5e:88:
90:63:3d:65:25:af:23:83:af:2a:de:ac:03:c0:f0:
b8:3d:e4:d2:b0:7e:2f:19:db:e2:9d:87:2e:46:89:
ec:73:35:c5:95:57:ec:97:b0:7f:7e:97:36:e4:a7:
2d:be:ee:d7:35:7f:8b:d3:19:23:56:6c:90:4f:8b:
7c:8d:d6:ff:99:ce:99:53:c9:a2:ce:00:32:f8:66:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EC:71:9E:EE:F2:A1:DF:CC:7B:BF:CE:B1:C3:DD:02:66:00:AD:05
X509v3 Authority Key Identifier:
keyid:15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:11:8c:64:ce:19:89:73:6e:7e:2a:99:10:42:ad:59:2e:b2:
98:d2:d6:aa:ba:ba:25:35:30:b8:8c:f3:5e:84:6b:52:12:20:
bf:14:42:d0:2d:18:61:3e:f9:e7:0b:cc:ec:27:41:8b:59:dd:
d7:df:44:35:e2:ed:e8:ab:02:b3:bc:00:ee:ea:1a:0f:b3:b1:
4e:b9:29:dc:33:f0:9c:4a:51:2f:64:8d:d9:01:6a:8b:06:ec:
cf:d2:a5:63:f5:d2:fc:67:a3:a4:60:6f:74:bf:ee:61:f9:5d:
3b:ca:f4:59:7f:14:b4:c1:dd:1b:d0:aa:5b:e1:3a:ce:0d:07:
1b:eb:5d:62:bc:fe:64:45:26:77:9c:b4:10:07:e9:5b:73:4a:
6f:9d:e0:10:e7:a1:d3:00:9c:ec:16:bc:93:09:ee:83:71:37:
b4:84:48:12:d4:db:ea:30:48:1f:be:c1:1c:0c:cd:69:f1:e9:
07:da:ba:2b:d1:32:6f:49:fc:f1:0a:13:91:be:e1:12:65:67:
08:f4:22:f4:0d:9e:2c:d6:98:68:40:cb:52:bd:d9:9b:7b:15:
d8:08:9c:13:39:31:e8:d5:b0:d8:4e:b7:d5:a3:31:96:da:41:
b4:c6:fe:33:86:9e:fd:4a:c5:11:99:1e:00:ae:80:5a:f8:33:
6b:b7:18:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:29:11 2026 by rpki-client