Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File: fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier: uiNvmAoRfMvdPnpf6Ru81PtpPMLcu6l7GaYsJVL1ICk=
Subject key identifier: 85:68:21:C1:A1:2B:58:49:91:CA:42:74:90:20:A8:20:27:B2:B7:BB
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial: 019EB9FD2829B3A00848856AE05A7A678710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number: 1967
Signing time: Fri 12 Jun 2026 04:00:36 +0000
Manifest this update: Fri 12 Jun 2026 04:00:36 +0000
Manifest next update: Sat 13 Jun 2026 04:00:36 +0000
Files and hashes: 1: ATx_EPHk5Vz1v-SpkJd7Yp6y99I.roa (hash: wd0rlsu9n+czEzHQALtAg7xmPAM6xOroSrrnXWF3Lfo=)
2: JO3t4wzj5pMO8pakWAwlzqvqqRM.asa (hash: RPS36XqFSQhGe2AwlqqHc/6mflgEGlaBrX53Fqp34Rw=)
3: U94b541NpMgAwKP9ouuvvL3DKeY.asa (hash: 3/0upql9LNQyluPXuFCuGStTRhsE9wxGljd6ckKQ/wo=)
4: fX3tPrrAy5l65982bntPZMbTKXM.asa (hash: elpKOW5KwuHELtxjMPO/HnU5rqNl0Ef4AHZpAwWCRy8=)
5: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: LMo8PjbrawaXSeT8uS/g60SNHI7deA5n2YmvW82HL4Q=)
6: ly50p6bn7OtoWGksmAe1FXQRbrM.roa (hash: WvJTgADr+6l6uiBzvWmW2KhgcRN1ZPaB7zKRd38ejzU=)
7: p1pAyUX-fSx4X5xlNyO_Vq2ry7w.roa (hash: 4qf1lMGx7tWHDVof2zNBnir3ltwLgCwXuL9BwrRJPhU=)
8: uiCDkRFrRbQXEYOboMj925yrGQ0.roa (hash: gojhd9ZvaD3lpAzgnUVGx9Pc+ubn7hLvE/bd+7GeQHs=)
9: wr5OBu9Kg5fiAynMByNWWanKodQ.roa (hash: xpQiib4Ztk+0sSwtkw/MfpFjKcsKXQPv65ui0X+24sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:28:29:b3:a0:08:48:85:6a:e0:5a:7a:67:87:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Validity
Not Before: Jun 12 04:00:36 2026 GMT
Not After : Jun 13 04:00:36 2026 GMT
Subject: CN=856821c1a12b584991ca42749020a82027b2b7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:5a:d5:14:87:b6:65:0d:f8:50:13:82:72:
86:a2:b2:39:5c:55:7d:e8:59:d9:13:a5:17:54:af:
e5:e3:73:ea:fa:d9:c5:53:9d:02:e3:fe:1f:6b:7b:
65:85:5f:3b:3f:56:0e:69:3a:d5:27:99:14:01:7c:
45:20:3b:73:16:b8:7c:fe:25:bc:5b:92:a4:55:d3:
d6:53:2b:61:e5:b2:b6:7e:7b:05:d0:80:37:16:49:
53:58:0c:30:5d:b6:63:2a:53:69:e6:3f:83:55:35:
b7:c9:3e:6e:96:ae:cc:8b:52:7b:60:16:b6:34:5d:
a2:41:53:74:f7:b7:76:3b:0e:42:6f:aa:8d:17:41:
e5:83:3d:86:27:cb:7c:6d:57:c2:1f:17:a7:73:ac:
bf:48:8f:ec:06:b7:a0:df:84:35:1d:61:07:2f:db:
f6:3b:4c:a6:8b:3e:7b:1b:f1:dc:f2:3b:0b:8e:0a:
2e:ae:85:62:68:a2:ad:f7:d6:dd:bf:60:65:ac:79:
db:f5:4c:1b:32:19:5e:de:1a:a8:6d:0f:7f:62:08:
ec:93:2c:28:5c:eb:fe:de:6f:18:30:1d:61:3b:cb:
26:7b:54:16:f5:ed:a7:7e:a3:f4:05:8e:8a:37:93:
52:da:78:44:5d:da:55:db:73:7f:4c:ad:8e:e9:aa:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:21:C1:A1:2B:58:49:91:CA:42:74:90:20:A8:20:27:B2:B7:BB
X509v3 Authority Key Identifier:
keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:54:ca:23:85:6f:e5:bf:4f:cc:4b:77:87:e3:b7:68:96:85:
76:d1:c5:4f:55:ca:5c:64:0a:cb:58:2b:c3:cf:32:c0:db:21:
9d:8b:5f:9a:5c:fe:0f:95:e1:19:5c:10:ba:61:4c:29:67:9d:
6a:08:f3:a9:6b:59:46:e9:b3:c5:53:0c:a7:33:28:d3:32:de:
f5:72:49:f8:38:72:af:ba:b0:d1:68:aa:dc:78:7c:99:17:31:
46:2d:d7:1c:04:de:27:0f:c9:bf:c2:4d:9d:82:0f:06:6b:68:
2e:99:4d:f2:f3:7f:a2:30:97:5d:ad:0d:4a:ed:1f:73:d0:73:
ea:e0:45:a6:c3:41:3c:6c:0b:05:ff:89:99:f5:98:a3:bd:1a:
9d:90:39:a2:22:b8:52:e7:df:1c:4a:11:d4:58:67:b6:7e:c2:
eb:a4:f7:fa:d2:e2:ce:2a:de:6e:75:54:c0:1e:4a:f9:17:06:
73:78:ba:69:5a:78:50:86:f0:5a:ab:7d:6f:ef:eb:a8:0b:f9:
44:6d:ca:41:02:ba:b2:4e:52:63:2c:ae:7d:d5:11:75:c5:63:
55:ec:87:22:b0:a2:cb:ab:cb:88:b8:97:98:a3:98:57:ce:a9:
93:dd:c7:2b:c3:6e:7e:73:9b:14:04:9c:8c:88:1b:83:e0:9e:
66:af:d0:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:30:16 2026 by rpki-client