Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: d4dqx8EeHXxBWGYVqNXxRafWm9YKuwmBiPtyc63UYyA=
Subject key identifier: 59:8F:8E:66:87:84:98:D2:33:57:2D:43:66:9A:E5:80:1C:8C:69:75
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 01A0016F89A7C1FA866AEA9D5A6A0DE69C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 1428
Signing time: Fri 14 Aug 2026 18:01:21 +0000
Manifest this update: Fri 14 Aug 2026 18:01:21 +0000
Manifest next update: Sat 15 Aug 2026 18:01:21 +0000
Files and hashes: 1: M39X3O93meXiYEZMdDY1T4wsyVE.roa (hash: eG1u14rPe8MIz7sm8dVuxE9spwX9dFAUZNpT/Ys6fi4=)
2: f95OM8NcoOZXSRzDeGxPVA2Zw_o.roa (hash: 1YBKV57aXgzHn2Rt1P5Y2ZBSmwKVR2wirj1B4cjqRz4=)
3: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: VNDNH8M99dGTZd/Hj7A/Mt4ESeP05/EP3Hs0PgU5/Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:89:a7:c1:fa:86:6a:ea:9d:5a:6a:0d:e6:9c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Aug 14 18:01:21 2026 GMT
Not After : Aug 15 18:01:21 2026 GMT
Subject: CN=598f8e66878498d233572d43669ae5801c8c6975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:ba:36:91:67:6d:06:ef:f3:0e:8a:19:e2:
60:5a:93:82:f4:d4:47:0c:d6:bb:3d:b9:52:6d:f0:
d0:da:1e:a2:90:c2:34:cb:bc:5b:99:49:c3:ab:17:
69:09:b6:18:b9:a3:49:e5:b9:6d:67:40:45:80:f3:
f8:ea:fa:0f:f1:57:17:79:d1:5a:f2:04:39:27:0d:
68:83:86:bb:3d:d5:1f:f2:f6:a0:92:d1:41:69:b7:
78:b1:27:c8:09:ad:fe:fa:33:44:cf:a0:9b:e5:67:
f1:e5:0d:2a:0b:23:e9:eb:e8:6a:38:e4:c9:98:81:
c1:a4:1d:1a:e8:f8:5c:8a:cc:16:92:28:17:7d:18:
8f:a6:dc:e8:a9:19:05:22:25:a2:35:69:93:cf:44:
ea:1f:cc:11:96:4a:01:e3:b3:25:5f:bc:20:c4:f2:
f9:07:8e:23:35:57:ac:f1:19:1a:44:12:3d:35:86:
df:e3:54:bd:8d:2f:de:56:fe:5c:ef:cc:cb:a9:4c:
3b:15:08:cf:e8:c5:9d:9f:77:6c:9d:63:e9:fe:aa:
55:50:0c:c5:21:69:13:35:9b:9d:a9:58:3c:c8:4a:
d7:82:54:af:b0:b4:88:5b:07:f1:33:6d:f1:ae:7e:
c4:80:13:70:86:4b:be:89:d3:98:3f:cc:e2:a9:be:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8F:8E:66:87:84:98:D2:33:57:2D:43:66:9A:E5:80:1C:8C:69:75
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dc:86:42:75:7b:79:0e:15:fc:41:9e:8f:4e:f7:b7:e8:9d:
29:d0:47:d4:77:48:5f:4c:83:46:1a:9a:a8:a9:dc:8e:b1:93:
77:08:21:e0:80:f7:dd:23:35:a1:ee:ec:97:ae:8e:e3:9d:66:
43:bb:f5:44:a6:d7:5e:2a:ee:6d:80:8e:0c:02:44:44:8f:0d:
c0:7b:dc:83:e9:30:68:93:3e:85:73:78:28:d0:92:fb:b1:b4:
7f:e7:81:a1:f6:14:1c:10:90:7a:1c:b7:4e:08:3d:92:f1:4a:
b7:5c:9a:d3:40:8a:74:d6:26:47:d0:fd:7e:4d:4c:0d:d2:2e:
21:e1:ba:2b:7e:b2:87:6d:cf:2a:3e:a1:69:0f:d8:94:e8:8b:
25:fb:a2:95:0f:c2:7f:6d:50:54:ad:93:8c:ef:46:c1:04:c1:
9e:92:33:43:79:9d:21:5c:dd:03:84:8f:e3:67:5d:b6:82:11:
26:9a:f1:a9:25:b0:9a:c7:b3:a8:f1:0c:94:da:ed:35:73:7d:
e0:fd:ee:b0:8d:aa:21:f1:5b:98:17:e6:4f:d3:f0:5f:9b:3f:
4e:8b:45:a8:b1:b9:b2:86:18:f2:47:f8:d4:cf:bb:f8:e4:0a:
f4:43:e8:8d:77:08:82:67:11:fa:88:6b:45:ff:34:84:aa:4e:
43:cc:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:26:43 2026 by rpki-client