Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json)
Hash identifier: FqK8jZztDvixq045rDkNfJEN4NLQRpc8xdqqCGK/Ggs=
Subject key identifier: 5E:04:0E:E1:DD:C2:E6:07:BB:45:04:39:08:39:86:EE:60:5F:32:AE
Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Certificate serial: 019FF9B58A0CCF7579B601B082146AF40F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
Manifest number: 1218
Signing time: Thu 13 Aug 2026 06:00:51 +0000
Manifest this update: Thu 13 Aug 2026 06:00:51 +0000
Manifest next update: Fri 14 Aug 2026 06:00:51 +0000
Files and hashes: 1: Gtwjc7NNuv58O6hnKDqBYDJmyRQ.roa (hash: LK5oiJ5hBo2z5XWsMY/8RHb1LgIogizoQEzKylCXOUQ=)
2: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: AISD9/23tyboVomslCf5gn3j3IHNCPV5sY1jxODSzz4=)
3: m7KtJlTD0XYb0qkoWg7yU7ZDPU8.asa (hash: 3rV2iQRzXo45L9Capru2ivV9n6Svuwy7ha4SJJSVcRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b5:8a:0c:cf:75:79:b6:01:b0:82:14:6a:f4:0f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76
Validity
Not Before: Aug 13 06:00:51 2026 GMT
Not After : Aug 14 06:00:51 2026 GMT
Subject: CN=5e040ee1ddc2e607bb450439083986ee605f32ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:a2:0c:ff:a6:b0:88:a1:79:13:0e:f4:f0:
42:ff:cc:b7:2c:e0:29:61:26:40:2b:24:eb:d0:dc:
c6:ab:73:1e:d7:14:1b:4e:cd:f5:9d:e5:15:71:8e:
50:dd:e1:aa:5c:5b:d3:63:51:26:92:9d:90:8f:c8:
57:75:47:e1:92:82:d5:33:d9:37:9e:26:73:a4:88:
ef:0e:1a:98:1b:28:b1:ee:ff:60:5a:ac:09:ca:3c:
a3:6d:b8:a9:3f:82:93:cc:22:92:5a:24:e1:8c:df:
5f:a6:8a:9f:8d:57:68:63:56:e4:58:3e:58:78:51:
65:05:55:7b:4b:b5:1b:ec:23:64:50:16:17:76:e9:
06:4a:18:61:48:a3:db:3f:10:d0:07:0d:5d:83:47:
06:b5:61:a6:fa:2a:78:0f:77:55:4c:77:b5:7e:d0:
b1:2b:25:76:64:d4:6d:69:7c:8f:a9:d7:51:18:27:
e8:b9:0b:c1:38:3d:ac:7a:42:a5:45:3c:44:b3:c4:
7a:2c:19:1e:37:1b:cf:93:7e:22:f8:72:b4:e5:a3:
f9:4b:cf:aa:3c:16:99:50:01:b1:d6:88:e3:e2:ce:
89:82:be:9b:26:85:0d:a6:4b:b0:53:7e:7c:ef:f9:
2c:04:04:4e:9b:c2:9b:a2:8d:f5:9c:40:53:21:18:
a4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:04:0E:E1:DD:C2:E6:07:BB:45:04:39:08:39:86:EE:60:5F:32:AE
X509v3 Authority Key Identifier:
keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d3:b4:8c:d6:94:65:40:23:c3:3d:22:a0:d9:a9:01:38:9f:
c3:49:65:ee:93:bc:58:27:1d:77:c2:c6:bf:33:7c:91:68:b2:
42:60:a4:89:0a:99:f0:46:d8:67:98:6b:45:09:0f:9f:8f:f7:
75:26:24:ae:b8:f6:e2:ea:4b:81:02:76:ff:cd:37:e3:9a:4c:
a7:d5:e3:a3:07:be:81:37:78:cc:3b:20:18:9e:70:61:30:b1:
af:b1:dd:20:5e:77:76:53:97:1e:d3:24:bb:6a:ae:b1:af:89:
49:ec:0a:0e:2c:8b:8e:f7:e3:d3:a9:e6:c0:1a:1f:5d:14:07:
d4:96:d3:28:15:51:01:b7:9b:41:d7:0e:94:6e:0a:15:e3:25:
72:71:6b:c8:79:81:cf:01:75:58:75:81:63:63:ff:cd:48:40:
87:be:a1:bf:35:66:b2:73:fb:05:3e:8d:12:f4:9b:34:1e:0a:
99:5b:f8:ce:80:50:06:1c:97:f8:80:e2:7f:ee:d1:76:4e:0d:
24:32:45:d6:66:21:8e:b6:29:cb:5a:fb:a4:84:6c:da:7c:48:
78:4d:4c:ca:84:a0:d5:01:b7:c1:eb:cb:6e:a1:0d:6a:cf:fa:
65:09:a2:ba:81:95:bc:cf:98:35:c7:43:54:ba:c1:25:4b:64:
e0:77:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:39 2026 by rpki-client