Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File: FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier: q2H4180EDztzeDAww0CRJXPZUTLb2cL06fH/0x3ogZg=
Subject key identifier: C1:17:C1:19:FA:1E:76:43:F0:B4:03:0D:7D:5D:69:28:19:95:76:38
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 019F26FECEAB1BF45040CA396E71AD41C2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number: 193D
Signing time: Fri 03 Jul 2026 08:01:00 +0000
Manifest this update: Fri 03 Jul 2026 08:01:00 +0000
Manifest next update: Sat 04 Jul 2026 08:01:00 +0000
Files and hashes: 1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: aSN4wzW5qwp1iRbq9cADjd5r7W6csYC9ULHnfyVIfAw=)
2: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (hash: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298=)
3: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (hash: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:fe:ce:ab:1b:f4:50:40:ca:39:6e:71:ad:41:c2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Jul 3 08:01:00 2026 GMT
Not After : Jul 4 08:01:00 2026 GMT
Subject: CN=c117c119fa1e7643f0b4030d7d5d692819957638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:21:14:2f:44:c0:ce:06:81:dc:f2:09:eb:
15:92:44:c1:1d:e4:35:a6:c7:61:eb:52:6c:59:3f:
1a:88:29:af:ff:fb:c7:cd:8d:e2:e8:ba:a8:e1:01:
f9:9c:7d:74:44:5d:a8:9e:e0:11:8e:29:72:6e:6e:
ae:c0:7c:c6:23:1d:a6:ab:62:3e:30:7a:44:36:7e:
33:0c:d8:c2:bc:72:a5:16:1b:bc:a9:7f:1d:69:b1:
2a:7a:c1:0b:4f:3a:7d:c9:97:db:fd:36:d0:10:da:
e7:55:51:a7:de:74:56:51:68:85:69:82:d8:69:46:
f5:59:05:f3:74:e5:92:c6:27:2d:cb:c6:cd:36:19:
32:0b:08:5a:19:05:38:92:96:86:5d:ba:65:23:dc:
fb:f6:29:e3:ef:ee:ea:f0:ad:dc:7f:6d:7f:44:e0:
74:46:2a:82:4b:c9:38:28:09:d2:f1:f5:df:16:d4:
02:fd:4e:39:8f:c9:af:26:18:e3:b2:a7:8f:11:64:
0e:d1:e9:51:23:c8:e3:68:ba:94:3a:41:2a:1a:85:
0f:02:13:7f:fb:6b:c1:2e:8a:88:2f:51:82:31:d1:
94:e1:de:b6:9e:a0:5d:f8:02:3a:4c:d3:28:0d:06:
0b:51:85:3c:c3:ca:4a:91:e9:d4:0a:9c:67:be:94:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:17:C1:19:FA:1E:76:43:F0:B4:03:0D:7D:5D:69:28:19:95:76:38
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:74:c8:da:ec:b6:40:11:82:64:b3:e5:64:1d:da:de:81:7d:
df:45:aa:37:e7:0a:7b:5b:3e:e9:2b:02:82:67:76:a8:c9:41:
b3:6a:0e:4d:fc:4e:1d:7b:16:3e:1b:de:37:85:91:e6:80:23:
d4:a5:88:e1:90:e1:4f:d5:65:b1:60:09:9c:17:54:f1:c6:4f:
8c:96:25:5a:9e:5c:41:ae:dd:a5:55:f3:50:17:46:6e:6f:f9:
e8:52:ea:c8:60:f3:03:5d:cd:7e:af:cf:f0:81:6c:b7:aa:99:
b4:8e:e1:b7:ce:a6:be:97:2a:b4:68:26:4f:cb:5e:3c:71:ec:
14:4e:3e:94:f8:73:6b:7a:a1:ef:2f:3d:a9:e1:1f:dd:ee:42:
8f:df:3e:88:e5:1f:a5:c7:3a:c3:48:5e:95:29:98:69:5f:21:
82:b7:91:bf:cc:f8:29:46:f6:a2:9c:1f:1d:c0:f3:6e:64:60:
88:3f:52:45:60:69:6f:32:17:05:00:12:74:32:23:8a:4e:bf:
22:65:03:e2:41:5d:58:45:5d:23:03:89:d3:10:ae:1f:26:ff:
11:fc:54:ad:de:7f:4b:1f:cc:b2:15:42:72:ef:52:3c:da:31:
41:1d:97:ed:84:40:d4:f2:ee:70:c2:0a:c1:8f:42:15:1a:71:
44:d5:ac:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:37:23 2026 by rpki-client