Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
File: FGysOKrBes72Z80OqgLg_JZ3_Pc.mft (raw, json)
Hash identifier: KbDVyxGr3D1p1BlpLmdmqNfArx5cv4LOIrar3s4VnIE=
Subject key identifier: A2:C3:27:92:9F:CD:38:ED:25:30:EB:1A:68:A0:3D:AF:A6:96:48:5F
Authority key identifier: 14:6C:AC:38:AA:C1:7A:CE:F6:67:CD:0E:AA:02:E0:FC:96:77:FC:F7
Certificate issuer: /CN=146cac38aac17acef667cd0eaa02e0fc9677fcf7
Certificate serial: 019FA4174AB0EF4D4B16569D592C8C36D51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
Manifest number: 8A
Signing time: Mon 27 Jul 2026 15:00:17 +0000
Manifest this update: Mon 27 Jul 2026 15:00:17 +0000
Manifest next update: Tue 28 Jul 2026 15:00:17 +0000
Files and hashes: 1: FGysOKrBes72Z80OqgLg_JZ3_Pc.crl (hash: 3r7K9bHpfiac/QD2AVgBiKVituwp1gDYreJseG14lwU=)
2: sMwIgLKNRpB1RpAtf3RJI_ymDmY.roa (hash: BKXDq8tUvCJz2+LeUi2VmO5hnXnUxOen+el/zYEKMWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:17:4a:b0:ef:4d:4b:16:56:9d:59:2c:8c:36:d5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146cac38aac17acef667cd0eaa02e0fc9677fcf7
Validity
Not Before: Jul 27 15:00:17 2026 GMT
Not After : Jul 28 15:00:17 2026 GMT
Subject: CN=a2c327929fcd38ed2530eb1a68a03dafa696485f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:95:20:7c:97:89:fa:9f:84:b9:b4:98:4f:
12:1d:23:0d:d4:b4:fc:c4:97:42:c8:ad:00:51:be:
d2:4a:05:98:1e:79:7c:60:52:67:88:35:cc:9b:dc:
1d:12:54:f1:88:31:b7:ed:43:3e:94:9b:20:5f:e3:
e3:36:11:17:bd:a6:5f:30:7a:5e:b4:e0:01:a3:ff:
c9:d3:f0:74:12:ae:eb:95:c8:66:30:d9:e8:f7:8b:
17:12:2e:17:85:9b:7a:1e:84:35:7c:34:90:0a:4f:
21:0f:ab:23:4f:e4:07:7f:f8:ce:ae:42:84:be:c7:
03:9d:2d:3f:0a:c0:e2:6e:16:a9:5f:45:8b:db:8e:
37:57:82:4f:b7:08:c6:3f:d7:86:26:39:ed:7e:24:
04:b9:9c:d3:6c:1c:07:2a:1c:17:c2:62:0e:fd:a3:
67:51:73:67:1c:90:59:e9:11:7f:a5:c4:88:9f:d1:
ab:15:98:b3:bb:21:b3:b4:6f:27:76:ac:d2:e4:e9:
f0:b1:f3:06:64:f2:28:5b:52:96:ce:52:f9:26:0c:
f5:8b:1d:87:8a:5d:93:72:04:b9:90:1a:4e:76:ef:
59:0f:b8:b0:e4:5c:45:6d:36:6b:84:e3:32:d2:82:
9e:19:28:52:0e:00:1f:51:e3:31:4b:e3:9a:c6:ca:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C3:27:92:9F:CD:38:ED:25:30:EB:1A:68:A0:3D:AF:A6:96:48:5F
X509v3 Authority Key Identifier:
keyid:14:6C:AC:38:AA:C1:7A:CE:F6:67:CD:0E:AA:02:E0:FC:96:77:FC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:90:ad:c9:22:5d:ff:fb:73:40:a0:ea:85:9a:51:2e:46:0a:
b4:02:08:cf:81:00:d3:be:78:f4:b6:16:48:0d:a5:b5:2f:4d:
20:6c:ba:8c:49:86:5d:bf:52:18:0e:d1:75:1a:92:e3:c6:0c:
d8:08:5d:c0:f3:02:bc:1a:d3:05:8f:e4:ef:06:a6:eb:2c:b9:
fe:4f:14:c4:d1:8b:7b:b5:12:78:78:af:d7:ad:0b:6f:2d:dd:
9d:76:78:8d:29:79:63:5d:e2:37:30:0e:44:59:4a:9f:91:02:
8b:97:44:f8:54:0d:4b:4a:e2:af:e4:de:45:ed:d0:e2:7c:3d:
40:e0:21:1c:db:4f:bf:2c:9e:f7:2d:e1:04:8f:a1:a6:c4:fe:
89:2f:58:7d:7f:49:c4:60:b8:79:3e:c2:88:eb:71:2a:c1:99:
5b:74:96:46:ed:e0:7d:cb:be:91:8e:5c:b2:5f:80:7d:3b:b8:
29:94:49:79:c1:ac:5d:ff:8e:8c:a1:9d:49:82:a6:a2:80:df:
fe:b7:d7:88:66:57:ba:b4:1d:8b:2d:da:e0:7e:b1:98:3b:b6:
09:b5:96:10:3e:38:e0:70:8a:9b:69:75:1e:dc:a4:56:aa:a6:
e3:cf:81:f8:b8:25:fb:ed:c4:91:c6:3c:f2:3c:3b:00:ba:42:
cf:a5:e9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:26:40 2026 by rpki-client