Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
File: fCOA12SpYR3-L7wM4MxASW7B6D4.mft (raw, json)
Hash identifier: qgqufptt+xeScyOw3BEmUjWwG30h+SAzcoVWXqXZqPI=
Subject key identifier: F0:EE:1F:E5:19:FD:78:C7:E2:A2:2B:1B:52:F6:64:31:1B:49:D5:BC
Authority key identifier: 7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
Certificate issuer: /CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Certificate serial: 019FA2CDDC7AACC5060BEE373CBAB08DC2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
Manifest number: 0F05
Signing time: Mon 27 Jul 2026 09:00:28 +0000
Manifest this update: Mon 27 Jul 2026 09:00:28 +0000
Manifest next update: Tue 28 Jul 2026 09:00:28 +0000
Files and hashes: 1: 3jOuXM8eQYteMz68O8y6FmrYuok.roa (hash: XgWoFOWhqf9IgpOkBkTS/Yey4Nx7f+umb85DdCZeNq0=)
2: 80FOtkhZ1x_dBcZjy612b9CXC0M.roa (hash: fQ0bs++yImhWtbOnTiiPYzDzdQ9QlQeHfRm1DwdpO0w=)
3: fCOA12SpYR3-L7wM4MxASW7B6D4.crl (hash: /pQKphVS0XxfrF7QdPShCT7RdiHHNYTYdyC6aXbd5VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:dc:7a:ac:c5:06:0b:ee:37:3c:ba:b0:8d:c2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2380d764a9611dfe2fbc0ce0cc40496ec1e83e
Validity
Not Before: Jul 27 09:00:28 2026 GMT
Not After : Jul 28 09:00:28 2026 GMT
Subject: CN=f0ee1fe519fd78c7e2a22b1b52f664311b49d5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:e8:ba:5a:cc:7b:1d:aa:83:ea:dc:78:8e:
96:98:49:dc:82:53:21:97:1a:ee:d2:e9:e7:f9:b3:
27:5e:ba:6f:96:ef:2c:57:dd:00:73:64:1a:11:74:
58:91:38:3c:04:22:92:02:d7:9d:04:46:76:b7:93:
e7:02:02:a7:54:d7:67:94:b5:d9:8e:50:60:2f:f0:
23:f0:f9:e2:e9:74:c0:ab:d8:a7:75:6b:00:a5:ae:
9f:55:2a:12:5d:1a:b4:45:b4:cb:24:5e:74:82:33:
8d:f8:1d:0a:38:97:d8:1b:59:c0:12:be:4f:9c:5e:
be:e8:12:20:b0:a5:d4:91:da:12:9f:0b:c0:98:27:
a4:e0:f7:0a:81:52:b3:90:bc:50:7f:4c:6b:1f:a3:
b6:c0:ce:50:c6:8b:f8:a9:0b:89:c7:b0:2d:da:5e:
97:4f:53:58:86:7b:ae:f5:8c:8a:90:9c:1b:ef:ee:
62:f6:23:be:dc:a7:d6:b6:ed:96:92:ea:81:fe:f6:
0b:dc:23:35:83:f3:69:71:f8:1e:d0:cf:ab:c7:ea:
1a:c6:39:9e:ff:93:75:f0:74:88:cc:de:10:93:54:
10:90:2b:72:f8:9d:14:28:06:ac:80:ae:5c:f8:d4:
cc:9b:a1:41:36:c9:5d:13:e8:a8:4e:85:65:db:09:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EE:1F:E5:19:FD:78:C7:E2:A2:2B:1B:52:F6:64:31:1B:49:D5:BC
X509v3 Authority Key Identifier:
keyid:7C:23:80:D7:64:A9:61:1D:FE:2F:BC:0C:E0:CC:40:49:6E:C1:E8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCOA12SpYR3-L7wM4MxASW7B6D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/85fa84-5d99-4aa8-8753-5d8ca63681ad/1/fCOA12SpYR3-L7wM4MxASW7B6D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:82:ed:9f:14:38:e8:ad:0c:20:93:88:4b:49:58:47:e2:65:
b9:1d:9e:37:4a:4a:13:77:d4:83:f2:54:ee:af:af:51:84:34:
11:c3:45:a6:4e:28:4a:20:9c:ce:b0:72:c7:c2:e6:02:4d:e8:
33:10:0b:74:c4:7e:7c:cd:52:61:c8:2e:84:eb:a7:f1:01:39:
c3:e4:38:17:c9:72:c5:bb:59:57:64:19:66:48:16:b3:37:23:
fd:ad:36:16:7d:aa:a6:46:28:22:b0:4f:71:fd:b7:80:da:af:
5f:b4:58:6f:fc:7e:41:15:54:d3:f7:1a:1b:79:7f:b1:45:c0:
63:6d:7a:6c:de:90:9b:07:0a:03:a9:5f:17:18:f3:06:e9:2c:
28:10:fd:a8:9c:07:13:6d:e9:ed:7f:4b:9a:3d:1f:bf:6d:f5:
e6:ab:ed:a3:d8:e3:c4:06:bc:ad:52:00:52:40:3b:86:e4:0f:
07:1c:70:27:75:07:d3:75:ef:fa:73:79:69:95:ec:d2:19:cc:
6e:27:12:ef:8e:4d:52:8b:06:b9:78:2f:60:02:03:90:d4:83:
65:1e:80:8b:a0:10:a9:af:e7:13:79:8d:64:14:c4:a5:1a:15:
b8:c3:b7:ba:02:04:3e:41:2a:2e:dd:73:cb:42:df:94:69:a5:
55:75:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:36:37 2026 by rpki-client