Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: 65QMblWwk7t4/QkdcBWlbP/gOgQZyWGNvCQbBiTAuYs=
Subject key identifier: D9:C2:61:E7:25:86:A1:BE:CB:D2:4F:69:68:C5:77:B7:F2:CC:F1:82
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 019FA33B9853BC0614F13BA005CF76E622E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 1379
Signing time: Mon 27 Jul 2026 11:00:19 +0000
Manifest this update: Mon 27 Jul 2026 11:00:19 +0000
Manifest next update: Tue 28 Jul 2026 11:00:19 +0000
Files and hashes: 1: OGNMh9luEfhWYSfkuTxUdvEw3T0.roa (hash: W+Y0DYRWsQtmVscqd/FelKkUl50HuhEP05K5AvhVU6w=)
2: _wcSqPRV5JgTozaPPAply-Zy5SI.roa (hash: kaddq5Zo4l9c0eBW6a1M05v2cAL5RJlZmJFBmkNxnmk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: pjCymDFol8COALn9QS8ZXmtlM4c7J494bhMlxT3vvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3b:98:53:bc:06:14:f1:3b:a0:05:cf:76:e6:22:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Jul 27 11:00:19 2026 GMT
Not After : Jul 28 11:00:19 2026 GMT
Subject: CN=d9c261e72586a1becbd24f6968c577b7f2ccf182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:3a:29:9b:b2:cd:9e:8f:25:83:53:53:9e:
b1:36:66:5e:22:5a:62:d1:89:3d:53:83:b6:42:50:
94:85:f5:d1:a1:50:8c:e4:23:16:5c:1e:d7:4f:c0:
20:1e:72:31:89:09:36:01:6b:d5:e5:3d:6c:77:58:
b2:73:e3:27:6d:66:46:77:77:97:eb:dd:8a:93:00:
29:ff:6e:f7:33:a5:27:4f:d6:8f:be:ef:02:11:f7:
f1:be:85:57:4a:13:67:37:4b:0e:d3:1b:7b:74:72:
ed:58:db:bd:74:8c:7f:73:e5:a9:a0:83:77:2c:1f:
7e:2a:96:ed:fc:9a:19:40:b1:55:87:09:ac:47:eb:
2c:4d:a7:f0:71:19:e1:f6:a0:9f:14:d4:d3:98:a9:
77:fb:d2:06:c5:4c:9d:96:06:48:fa:8e:63:5e:c4:
03:a3:8c:db:b7:5c:08:c9:1f:bf:e9:bb:21:de:53:
30:b0:76:84:0e:8a:a9:a4:cb:3e:44:1c:46:61:b0:
8f:12:3c:09:6e:5d:b3:48:37:7b:57:87:48:bc:14:
12:cd:66:19:a3:02:02:83:4d:42:28:49:c9:17:42:
a5:f8:7c:5e:90:b5:58:8a:3d:36:65:f0:35:55:cb:
01:f8:c0:b9:43:74:d3:6f:70:1b:af:11:2b:96:8e:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C2:61:E7:25:86:A1:BE:CB:D2:4F:69:68:C5:77:B7:F2:CC:F1:82
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6b:2b:90:ea:46:e1:1f:b9:f7:e9:5e:a6:68:73:48:57:33:
9f:3b:46:9f:f1:a6:50:00:e2:81:65:04:23:4a:94:d7:6f:da:
c9:d3:b2:b3:ff:41:d4:22:29:f1:4a:62:ff:e0:4e:6b:d7:b0:
af:f7:d3:8f:e8:9e:32:f6:42:be:18:14:ae:37:20:ec:3a:5b:
2a:e9:9a:d9:96:e7:fb:06:12:4a:c2:3e:f8:ec:48:95:13:d2:
2a:1d:e7:03:a0:b6:f3:e1:b1:d3:36:06:37:b7:91:2e:6b:f5:
9b:ae:dc:75:fe:fb:60:35:53:8a:ec:fd:f6:36:bc:c2:15:4d:
23:74:af:f1:d1:bb:f6:7f:d1:0d:14:58:64:72:21:9e:8f:ca:
3d:32:e4:9a:b9:e8:4f:63:b1:e4:07:05:c2:b3:f1:94:28:dd:
51:e8:d1:b7:5d:9c:10:8d:68:e4:c4:f5:aa:bb:09:8e:40:9c:
63:a5:d8:9a:c3:57:74:7d:46:09:e8:c4:25:a1:d9:1d:67:4e:
5b:48:5b:7a:08:01:df:d4:dc:2a:10:03:c0:e9:53:c8:3a:00:
62:69:1a:3e:f6:11:2c:eb:d7:cf:da:e6:da:86:e5:87:81:3b:
d0:01:ca:5c:5b:d2:df:ca:36:ec:25:8d:28:e9:f4:ae:12:02:
fa:92:2d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:50:42 2026 by rpki-client