Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier: WXGuxgDBh6omQaZ1cUEgFI738hz2AOhC4pFZjuuASa4=
Subject key identifier: 0C:FF:60:A9:5A:6C:B0:F0:43:F9:94:D8:1A:27:24:EF:1F:4B:44:7D
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 019FFA91D871C51FE0D181965E794D53D350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number: 1691
Signing time: Thu 13 Aug 2026 10:01:29 +0000
Manifest this update: Thu 13 Aug 2026 10:01:29 +0000
Manifest next update: Fri 14 Aug 2026 10:01:29 +0000
Files and hashes: 1: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: kaCekpi83a9x8I7k6hWlfX8jVuPR2jnze1cn7hGgLko=)
2: KPei4pGh6l2ch2CO4YkeyV22yvw.roa (hash: k1IWbcYO0kXCRKUgrnwnc4nPu4ClnarK73JxRUTod6I=)
3: kaDMDof3JnegZ76WynjnrQpCAYo.roa (hash: FDrbnAWfbNlBDk06C3Ts0xLMWNBRoitqJnesKeSlD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:91:d8:71:c5:1f:e0:d1:81:96:5e:79:4d:53:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Aug 13 10:01:29 2026 GMT
Not After : Aug 14 10:01:29 2026 GMT
Subject: CN=0cff60a95a6cb0f043f994d81a2724ef1f4b447d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:32:21:5b:78:0c:12:7b:c1:2e:dc:a3:1e:
a2:00:a3:24:23:bf:67:2c:72:1e:de:0a:53:4a:11:
91:f4:d7:ac:5e:75:11:15:d0:28:27:e0:43:1a:06:
1f:9b:1e:aa:12:e8:31:db:ba:2f:15:03:5b:c2:3e:
40:a8:58:b1:40:86:c3:af:b7:0d:c7:49:57:f8:65:
74:86:6d:d2:e5:e2:f5:40:da:5d:db:22:4a:95:a9:
ad:03:b3:7e:6e:37:fd:58:8e:df:f9:8f:e4:fa:de:
84:2a:52:5a:5c:2f:61:9e:08:2d:bb:29:3a:ad:ee:
23:af:bc:68:8a:d7:95:a8:50:85:62:fc:16:21:97:
4c:ab:55:1d:2b:ee:5d:74:d6:ae:f8:23:f3:2e:b6:
58:85:f7:2c:07:cd:9a:bf:a1:6c:97:7a:8f:50:1e:
52:d0:3d:16:6b:e2:82:5e:72:bc:14:c5:72:59:2a:
da:ee:86:8d:27:7e:7c:ac:de:72:25:69:cf:90:fe:
e6:b9:9a:48:9e:8e:31:9a:31:26:55:f2:6b:e6:c8:
a5:66:3b:21:19:b6:96:5d:ef:0e:06:d4:d9:c9:71:
1c:6f:2b:88:97:33:73:17:e1:3e:a2:bd:f2:d0:1c:
b8:18:80:b1:aa:aa:c1:46:08:c2:36:d5:67:f4:b7:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FF:60:A9:5A:6C:B0:F0:43:F9:94:D8:1A:27:24:EF:1F:4B:44:7D
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:12:2e:0a:03:24:f3:80:93:2b:4f:e2:2d:ce:bc:c8:cc:58:
66:ac:a0:55:2b:dd:7a:eb:90:9f:7d:58:46:8c:ac:7a:43:e3:
51:c4:79:2b:27:f3:86:32:81:07:95:48:0f:10:a4:db:ea:f3:
13:f8:1a:3b:4d:e8:01:74:be:0f:7b:1c:40:a0:cd:80:ea:61:
83:80:d7:d3:62:12:3f:a2:31:f2:a1:2c:fe:d3:42:c9:b0:79:
8f:6a:f5:32:5d:14:80:35:4d:6c:e3:33:95:41:44:56:57:a5:
61:d9:3b:66:5d:37:e7:c6:fe:94:5e:c7:5d:71:bd:f9:a0:91:
26:b7:da:98:ae:d9:f2:79:c6:80:a2:34:f6:53:70:bb:1e:ea:
16:56:f0:e4:f6:f9:49:97:0c:94:36:98:11:b0:bf:c5:fe:fb:
3e:44:9d:52:82:fe:9d:49:75:c1:95:f1:51:05:00:80:93:54:
d4:b4:07:84:61:4a:78:ea:41:10:96:39:e8:6c:4b:4c:73:d4:
96:4f:56:68:86:76:08:53:e7:fd:dc:eb:6e:67:d0:e3:3c:06:
d0:0f:a2:d4:89:3a:41:5f:82:75:bd:07:3a:76:a1:92:04:4a:
18:56:10:64:dd:77:74:9b:89:54:bf:e3:e4:7a:fe:94:35:24:
81:5c:32:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 11:54:59 2026 by rpki-client