Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
File: FGysOKrBes72Z80OqgLg_JZ3_Pc.mft (raw, json)
Hash identifier: fh9JnpUY2aKfVJCDbEd0fjnR2VMoNVb/tuMRwMeuTww=
Subject key identifier: 8D:03:8C:80:12:57:44:C2:54:7D:8D:14:8A:DA:7C:B4:C1:6A:19:6D
Authority key identifier: 14:6C:AC:38:AA:C1:7A:CE:F6:67:CD:0E:AA:02:E0:FC:96:77:FC:F7
Certificate issuer: /CN=146cac38aac17acef667cd0eaa02e0fc9677fcf7
Certificate serial: 019FA2290FB01793BE6EC6557D3B2E4028BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
Manifest number: 89
Signing time: Mon 27 Jul 2026 06:00:27 +0000
Manifest this update: Mon 27 Jul 2026 06:00:27 +0000
Manifest next update: Tue 28 Jul 2026 06:00:27 +0000
Files and hashes: 1: FGysOKrBes72Z80OqgLg_JZ3_Pc.crl (hash: 7HhWGQMralG3mmaTJdhhyWQvVSd6WQCJaM3c7U8CUhA=)
2: sMwIgLKNRpB1RpAtf3RJI_ymDmY.roa (hash: BKXDq8tUvCJz2+LeUi2VmO5hnXnUxOen+el/zYEKMWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:0f:b0:17:93:be:6e:c6:55:7d:3b:2e:40:28:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=146cac38aac17acef667cd0eaa02e0fc9677fcf7
Validity
Not Before: Jul 27 06:00:27 2026 GMT
Not After : Jul 28 06:00:27 2026 GMT
Subject: CN=8d038c80125744c2547d8d148ada7cb4c16a196d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:bb:c2:ab:13:45:bd:ab:ef:56:14:43:bd:
e5:a1:d5:6f:d2:8e:3a:59:fd:3e:08:a9:8c:28:c6:
ce:47:51:7d:80:59:91:e1:5d:8d:08:b2:86:49:20:
b1:9e:f9:24:55:9b:3c:39:e7:4f:77:46:3c:a1:50:
e6:be:3a:6c:fb:28:d2:c4:17:f2:7b:20:6b:6c:82:
ed:8a:91:e5:a7:f6:94:01:e4:29:32:72:28:60:34:
04:4a:8a:8b:e3:eb:44:46:3a:03:74:15:2f:e6:c1:
09:31:83:f5:85:4d:c7:04:34:57:9f:58:2e:9f:4a:
7c:6b:f5:43:2f:5d:a0:92:7b:be:1b:64:e4:e9:13:
79:29:58:c9:1b:18:c7:92:ae:7d:3c:09:ea:84:fa:
09:f7:44:41:30:41:58:d8:50:3f:d2:5d:f2:e2:95:
89:78:72:b0:3a:39:54:10:ea:f4:63:fc:0c:f0:e5:
e3:ee:0c:97:ba:b2:7f:05:6b:24:a8:d5:dc:36:7c:
0a:05:cd:bf:dd:bf:a0:a7:72:b1:7f:6f:1e:c3:8f:
9e:63:5b:fa:b1:3a:01:ab:29:d6:94:e7:41:a9:19:
b6:3c:30:59:6e:b5:d8:43:4b:43:1c:56:64:67:e9:
58:05:78:2b:ff:b9:be:7f:ce:2c:04:2e:a9:5c:11:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:03:8C:80:12:57:44:C2:54:7D:8D:14:8A:DA:7C:B4:C1:6A:19:6D
X509v3 Authority Key Identifier:
keyid:14:6C:AC:38:AA:C1:7A:CE:F6:67:CD:0E:AA:02:E0:FC:96:77:FC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:16:09:54:e1:8c:6e:33:a0:10:60:e0:1a:d5:f9:be:be:15:
58:40:cb:b1:63:76:b1:45:34:89:40:c2:47:4a:98:d0:21:2c:
9f:60:bc:71:b9:9e:99:4d:18:c3:bf:d0:d2:f9:d8:9f:80:71:
69:86:3a:77:08:4d:e7:59:17:0b:b8:4e:43:15:2d:20:ad:f6:
ee:07:eb:33:c2:bc:dc:b2:e1:0f:62:a4:a3:ec:9e:c3:88:84:
ec:76:b1:33:81:2d:26:10:e6:3a:80:60:3b:16:b2:0a:ca:5c:
a4:36:34:2f:f1:ad:4a:91:14:df:12:68:76:a1:c3:57:29:60:
60:53:a1:29:48:17:f7:95:37:8b:7f:a4:9b:c6:30:91:3c:53:
2a:8c:f6:06:29:bd:f7:dc:07:11:a0:62:67:30:41:b5:a0:65:
23:a9:33:f3:70:4f:4a:d5:e6:d8:e3:1c:7b:de:c3:a1:db:3d:
fc:01:af:30:29:20:2d:2b:90:c3:f1:9e:17:fa:6a:1d:3d:69:
a0:30:ed:66:85:9a:07:21:f1:95:89:8b:31:13:88:e2:8a:c7:
de:21:9a:f7:29:b4:6a:cb:12:2b:f8:ff:ce:0e:16:c0:50:72:
02:8b:a1:6a:3a:83:e9:f1:a9:69:01:e8:79:0b:73:cb:4f:b6:
c9:06:f3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:12:31 2026 by rpki-client