Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
File: fTssMztylVesC-AnQLIiltgCv4E.mft (raw, json)
Hash identifier: R7WstaRJf1bV5xOA2oRMx0wVmoo+a0zRZU37JmxETbo=
Subject key identifier: EE:C8:BC:36:D0:CA:30:31:4C:9F:13:7D:93:E7:8B:22:15:04:15:78
Authority key identifier: 7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
Certificate issuer: /CN=7d3b2c333b729557ac0be02740b22296d802bf81
Certificate serial: 01A03A82A6D0A93CE58F83D12ED97B8BF92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
Manifest number: 19F7
Signing time: Tue 25 Aug 2026 20:00:35 +0000
Manifest this update: Tue 25 Aug 2026 20:00:35 +0000
Manifest next update: Wed 26 Aug 2026 20:00:35 +0000
Files and hashes: 1: LJweqdiAuex5ffHJZ-p0UeT6XrY.asa (hash: qexPojaaUKUXJCAIdb2LuHOm0GKtKH2oA0dqsygCpWc=)
2: O7voTXfNHlJYLDFfFhD0IyP6RWQ.roa (hash: LffxuYhlhgmo9uurPfnZvk9c5Vb5QUT4U1yEBcpzUI0=)
3: fTssMztylVesC-AnQLIiltgCv4E.crl (hash: FVZYEmXMfxrP9tGpcJ6iRdbGushAwoU2pliCRK76zg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:82:a6:d0:a9:3c:e5:8f:83:d1:2e:d9:7b:8b:f9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3b2c333b729557ac0be02740b22296d802bf81
Validity
Not Before: Aug 25 20:00:35 2026 GMT
Not After : Aug 26 20:00:35 2026 GMT
Subject: CN=eec8bc36d0ca30314c9f137d93e78b2215041578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:bc:0c:d3:37:76:b0:4f:5c:79:25:43:12:
e5:d5:18:f4:bb:4e:2d:28:fd:75:78:bc:5a:d0:e2:
8b:78:cd:e0:9d:71:ac:06:cc:53:4e:be:62:b5:74:
ba:6b:1e:b0:77:89:8b:31:bd:76:1a:92:a5:41:66:
3e:70:32:88:cf:65:74:53:d9:63:34:eb:89:02:37:
b2:dc:b4:9e:bb:90:88:6d:08:df:81:4f:da:43:24:
14:b0:58:d4:d6:5b:af:46:6e:56:0e:56:62:bc:e4:
1f:72:7f:3e:28:b6:cc:df:cf:d3:a8:e5:06:5b:7b:
5b:65:53:51:ee:67:11:a0:c2:84:55:28:c5:9d:d6:
19:23:6d:31:8b:a6:3b:35:ed:51:d1:c3:ee:8f:08:
c4:29:35:a6:74:53:62:66:61:00:fe:96:1d:cf:45:
e4:04:04:2d:7a:f7:f0:4f:04:fd:73:96:cb:53:75:
dd:e7:82:c8:a0:69:88:9a:c6:4d:46:bb:2e:9d:dd:
d5:1d:7e:b9:b2:00:98:1b:04:ae:cc:e2:86:c8:65:
15:70:e1:f6:8e:8e:bd:3d:3d:29:02:c3:67:23:3c:
76:43:72:9f:8b:9c:d4:fa:97:fe:58:62:30:4e:8e:
84:27:d7:8c:53:4c:87:a1:56:1b:c3:80:ed:d3:ee:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C8:BC:36:D0:CA:30:31:4C:9F:13:7D:93:E7:8B:22:15:04:15:78
X509v3 Authority Key Identifier:
keyid:7D:3B:2C:33:3B:72:95:57:AC:0B:E0:27:40:B2:22:96:D8:02:BF:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTssMztylVesC-AnQLIiltgCv4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b1b64-2564-47a7-b1c1-52835db6512c/1/fTssMztylVesC-AnQLIiltgCv4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d5:00:5b:de:40:fb:b7:18:f7:9d:84:9a:7f:9f:62:26:75:
55:82:76:7f:41:cc:cd:c9:03:bb:02:87:3d:60:d1:58:91:d8:
e1:e9:27:5d:48:c5:d4:ac:4d:6f:78:51:69:18:a1:c4:37:44:
29:a3:ab:ff:97:4c:21:6e:5d:70:ba:fb:72:4c:e4:3f:73:a0:
48:39:23:a1:ce:af:b9:e4:2f:66:02:70:76:48:46:6f:cf:5c:
7e:3e:9b:97:67:c0:c2:95:94:4f:8b:df:1c:c8:bc:c0:ae:0d:
17:0a:eb:64:6c:5e:ca:a2:46:6c:18:93:72:97:81:80:78:0e:
cf:ce:61:a2:79:eb:d6:81:77:95:9c:40:16:74:29:65:10:61:
7e:91:9e:63:41:16:b1:75:8e:68:4f:66:52:64:74:44:c7:5c:
10:56:6e:23:da:b9:ec:ea:a5:dd:1c:13:a1:a5:2c:7d:aa:da:
08:b8:fe:4a:d4:03:05:f1:2a:89:8b:cd:95:3d:86:37:d4:3d:
a8:41:48:85:15:14:7d:f9:54:0e:cb:3c:3a:64:01:df:37:0b:
46:96:e6:2a:1f:5d:61:fd:c3:d4:b8:5a:48:68:a8:2d:a8:9e:
7f:93:8b:01:b1:f7:0a:8a:24:d7:f7:d0:cd:1a:6c:20:22:65:
88:e8:9c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 01:27:52 2026 by rpki-client