Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File: fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier: S671yobeMgmtKNjFs7Ra1eVK64dmCBw0hVCaUum/ZsE=
Subject key identifier: 2E:F2:A3:07:99:0F:F5:63:6A:AA:7B:A8:E2:7E:77:9F:F5:76:19:53
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 019FA1BB713159F2BB23FE4C78CAA391E3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number: 19DF
Signing time: Mon 27 Jul 2026 04:00:43 +0000
Manifest this update: Mon 27 Jul 2026 04:00:43 +0000
Manifest next update: Tue 28 Jul 2026 04:00:43 +0000
Files and hashes: 1: ATx_EPHk5Vz1v-SpkJd7Yp6y99I.roa (hash: wd0rlsu9n+czEzHQALtAg7xmPAM6xOroSrrnXWF3Lfo=)
2: JO3t4wzj5pMO8pakWAwlzqvqqRM.asa (hash: RPS36XqFSQhGe2AwlqqHc/6mflgEGlaBrX53Fqp34Rw=)
3: U94b541NpMgAwKP9ouuvvL3DKeY.asa (hash: 3/0upql9LNQyluPXuFCuGStTRhsE9wxGljd6ckKQ/wo=)
4: fX3tPrrAy5l65982bntPZMbTKXM.asa (hash: elpKOW5KwuHELtxjMPO/HnU5rqNl0Ef4AHZpAwWCRy8=)
5: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: hpUgJ8vRK4hBHzHcZZovfq5i9qRIoo/pM6WCuTeZWdc=)
6: ly50p6bn7OtoWGksmAe1FXQRbrM.roa (hash: WvJTgADr+6l6uiBzvWmW2KhgcRN1ZPaB7zKRd38ejzU=)
7: p1pAyUX-fSx4X5xlNyO_Vq2ry7w.roa (hash: 4qf1lMGx7tWHDVof2zNBnir3ltwLgCwXuL9BwrRJPhU=)
8: uiCDkRFrRbQXEYOboMj925yrGQ0.roa (hash: gojhd9ZvaD3lpAzgnUVGx9Pc+ubn7hLvE/bd+7GeQHs=)
9: wr5OBu9Kg5fiAynMByNWWanKodQ.roa (hash: xpQiib4Ztk+0sSwtkw/MfpFjKcsKXQPv65ui0X+24sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:71:31:59:f2:bb:23:fe:4c:78:ca:a3:91:e3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Jul 27 04:00:43 2026 GMT
Not After : Jul 28 04:00:43 2026 GMT
Subject: CN=2ef2a307990ff5636aaa7ba8e27e779ff5761953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:51:08:58:7c:48:b6:81:c1:90:24:39:cf:
eb:6d:af:c6:a1:0a:b1:51:6b:14:08:4f:bc:6a:76:
81:2e:92:e7:0a:03:3b:cd:0d:4f:69:32:f5:3f:78:
d0:ab:51:83:eb:e8:23:5d:a4:d0:2a:fb:64:ef:a8:
98:7e:66:28:2c:3f:13:fe:29:96:ea:7a:83:52:45:
ea:0c:86:14:36:ec:98:e9:90:15:48:3a:f2:aa:7e:
cb:28:3e:e1:4f:d2:7c:4a:0e:af:5b:96:5b:f9:90:
6a:03:b5:78:32:48:b1:81:67:10:27:83:50:4b:33:
29:d2:ef:5b:b2:94:06:3f:f7:ca:60:00:fc:1e:a5:
6f:98:ca:87:4e:65:f7:5e:8f:7b:2b:04:a0:1c:d3:
92:53:0c:2c:10:01:b2:f0:5d:84:8d:d0:b8:29:b3:
fc:96:91:01:95:38:93:c3:be:8c:f6:0d:0c:c3:a5:
4d:9b:85:83:72:a7:7b:b2:73:02:18:49:73:41:f5:
01:a7:c5:6f:e6:07:d2:d2:7d:3e:35:c8:62:f2:0e:
eb:b9:7f:07:40:0a:b8:f3:7a:d2:8b:60:93:b4:1f:
6b:fb:e2:92:8c:0b:cb:e9:6d:cd:0e:ad:3c:13:af:
71:a4:06:79:04:2c:78:c7:fe:5e:75:f3:62:d5:38:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F2:A3:07:99:0F:F5:63:6A:AA:7B:A8:E2:7E:77:9F:F5:76:19:53
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dd:b4:a2:6a:1e:58:4b:77:ba:7b:f7:02:4b:d5:e9:79:07:
44:ce:b3:73:5a:b2:4f:30:8b:30:a6:24:1d:30:b6:1b:ef:bd:
5e:ba:17:9c:89:75:a5:1c:6c:72:55:5b:bc:7b:23:e2:e5:e9:
c1:41:37:f0:82:72:56:af:d6:2e:96:36:c7:d2:32:54:61:a9:
72:f6:a3:1e:ec:38:9f:69:71:11:aa:3f:95:0f:a7:f5:55:70:
8c:46:bd:29:e5:02:eb:e9:7d:8d:ee:12:6f:c7:c5:0e:dd:c9:
2a:78:e4:73:cd:43:03:78:9b:4f:c9:ca:ee:20:c0:b1:c2:53:
49:1d:a7:71:4f:db:26:85:93:93:2d:14:dd:da:d7:2c:8c:23:
eb:84:1a:30:9c:b3:9a:6a:2d:a5:27:56:6f:a5:b9:42:04:a7:
de:6c:b3:5b:57:9b:9d:18:00:e7:0d:a8:ab:76:fa:73:17:6e:
e0:c3:ec:aa:73:1b:b0:bc:a1:8f:dc:9a:21:3c:57:09:a4:e3:
d1:23:d5:a9:76:26:2b:1a:03:f9:94:0e:cc:1a:b6:26:f6:25:
2f:86:18:cf:21:f1:36:ee:80:f5:17:0c:31:f0:08:79:ed:ad:
31:23:dc:9f:e1:44:71:b9:17:ad:59:66:7a:00:2a:55:f7:00:
ff:39:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:36:07 2026 by rpki-client