Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: FiIrbnbnqUC6XxweDvrVjJNine3t2w9k4GaaTuFCh+g=
Subject key identifier: EB:01:4D:CA:8A:69:F2:72:8E:F1:A6:EE:81:26:C3:DD:F5:3C:8E:66
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019FA3E12590125ADE34E71EF0CC7C06B4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0F7F
Signing time: Mon 27 Jul 2026 14:01:09 +0000
Manifest this update: Mon 27 Jul 2026 14:01:09 +0000
Manifest next update: Tue 28 Jul 2026 14:01:09 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: gnoEILTuzkQY2TZDdremhcQdANm74Ve4nvJiO8vaSAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e1:25:90:12:5a:de:34:e7:1e:f0:cc:7c:06:b4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Jul 27 14:01:09 2026 GMT
Not After : Jul 28 14:01:09 2026 GMT
Subject: CN=eb014dca8a69f2728ef1a6ee8126c3ddf53c8e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:5b:d6:54:1c:a7:39:67:08:2d:84:67:a1:
f3:90:4f:f4:3d:e5:f8:b5:30:36:1e:d3:5d:df:cd:
48:55:b4:ce:42:c9:7c:7f:54:f6:f4:22:56:98:1e:
8d:e6:cf:11:f1:29:e3:44:74:ac:26:0c:7f:7c:fd:
3d:a2:b2:5a:72:9f:fa:4b:a4:b0:4f:18:20:a3:72:
a0:d7:11:dc:86:b0:36:a3:24:9d:1a:a4:9c:76:1c:
f9:f1:d2:7b:16:10:c6:df:57:f5:bd:ff:ec:ef:f3:
1f:e6:ed:96:57:00:34:7e:20:7d:ae:d5:c2:ff:69:
21:f1:62:16:28:b8:d9:66:55:98:c8:56:e0:af:d6:
13:42:e3:76:93:3d:a5:3d:f9:0d:ea:8a:a0:9e:ab:
d6:ca:f5:09:63:1a:34:44:9c:36:c6:38:c1:ee:0c:
d4:cb:02:43:8b:0a:b8:50:63:30:9d:7f:20:77:35:
0b:e2:5f:18:87:2f:f0:27:99:85:fc:56:17:ea:f0:
be:35:9e:a8:19:00:84:79:f0:48:7e:44:eb:33:ad:
6e:84:c1:ce:f0:ca:db:e7:11:48:9f:2e:bf:a4:f5:
01:2d:74:dc:a1:a4:9d:db:8a:2c:63:16:51:77:60:
f7:d6:cc:c9:bc:b2:0f:99:a9:57:b9:5e:fb:98:ff:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:01:4D:CA:8A:69:F2:72:8E:F1:A6:EE:81:26:C3:DD:F5:3C:8E:66
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:00:c4:18:95:1f:e8:c7:d5:f3:1f:0b:a8:fa:3b:7a:09:e3:
89:db:e6:e3:25:a7:60:da:44:7b:a0:3c:bf:79:e6:d3:ae:6e:
af:1c:8c:ad:4b:67:d2:59:9f:0c:a9:e4:6e:2f:14:c0:a0:5e:
7c:1e:fd:b9:cb:50:e3:66:c5:c6:5a:bd:a5:95:21:de:24:96:
bc:77:a0:79:66:49:7c:5a:96:ae:95:b2:10:71:13:ac:24:66:
d8:32:87:08:fd:50:10:09:01:d3:04:cb:c1:a8:3a:1d:99:ea:
47:1e:ed:29:fd:2a:7f:1f:d1:01:36:3c:84:db:6b:ad:a3:5c:
15:01:a8:3f:3e:34:17:7f:a9:a9:03:e4:74:e4:60:07:00:23:
b7:26:b4:44:d3:04:5f:b8:21:2b:ec:60:51:54:15:f3:c9:f4:
30:f5:f0:5f:81:70:43:38:3c:75:b7:dd:1c:44:fa:bf:4f:a8:
14:ed:1a:0c:58:a2:08:34:a3:c5:34:71:bf:01:09:4c:b9:00:
64:35:30:f6:4e:07:da:0b:f2:13:df:0b:82:6a:a9:34:c8:cd:
19:f7:9c:e4:d4:98:c9:8c:60:3c:2a:f7:b4:4d:e1:ae:b0:da:
8f:96:dc:c7:b5:76:fa:0a:73:29:78:9e:09:df:9e:0a:de:43:
73:2d:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:28:53 2026 by rpki-client