Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
File: FXR7x-Ei3DLmSJdOml-AZwccX2g.mft (raw, json)
Hash identifier: tQs+yIn1VuJyZSf8YTrr/CpYh8EySXo6xfsX5o1GcUE=
Subject key identifier: 43:04:D7:BE:C6:07:E0:5C:40:D4:95:14:1F:F9:91:BD:A5:79:9B:F0
Authority key identifier: 15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
Certificate issuer: /CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Certificate serial: 019FA2CED6E4119B51865877DF5F15A718A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:01:32 +0000
Manifest this update: Mon 27 Jul 2026 09:01:32 +0000
Manifest next update: Tue 28 Jul 2026 09:01:32 +0000
Files and hashes: 1: Cp9szG8ZiUmehxIxFtxHs6_E6Pk.roa (hash: kSkecPG1pI9smWNol14Zb1L2v9Bc+8lRVfBtFoCklw8=)
2: FXR7x-Ei3DLmSJdOml-AZwccX2g.crl (hash: 3Exk6/gGY8ZWr7sr/Hvhh3q3zdYtnz31YtzFyInuc1E=)
3: s-et04Mlyh1LCQjhxRW7-Pv1T8o.roa (hash: 9VlOeKx0Y9OpBSYbldEeODyN67iHY8/REhRntjkKlz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:d6:e4:11:9b:51:86:58:77:df:5f:15:a7:18:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15747bc7e122dc32e648974e9a5f8067071c5f68
Validity
Not Before: Jul 27 09:01:32 2026 GMT
Not After : Jul 28 09:01:32 2026 GMT
Subject: CN=4304d7bec607e05c40d495141ff991bda5799bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:98:67:cf:a7:64:5a:a3:47:d6:40:0d:a3:
67:10:1d:72:9b:87:0b:3c:89:43:bd:5b:c1:ec:d7:
0f:67:13:3c:11:27:6b:29:ee:e0:17:ce:12:53:47:
35:72:74:f6:49:e7:ea:e7:87:a9:63:28:69:81:2f:
b5:95:7a:9b:a4:83:b3:76:f1:00:a6:55:ee:37:99:
a9:fa:9f:92:b0:34:0b:fd:03:c8:0c:e6:cc:bd:3c:
07:72:33:e3:a7:ba:31:e7:2d:b3:85:69:9b:9a:e1:
dd:cb:a6:f0:b5:fb:8e:69:7c:aa:a7:1d:52:79:00:
05:2d:09:aa:09:bb:d1:64:70:cc:a7:e5:c6:f6:71:
39:6e:66:f3:4e:89:82:81:5c:13:96:e7:d0:e3:08:
b9:b9:31:fb:c9:69:6e:3b:4f:e9:9c:6d:ab:1e:8a:
d3:ad:1e:5c:d5:0f:a7:e1:6e:a3:81:06:7b:67:bf:
c4:df:2b:fc:23:59:dd:ee:d5:35:86:0a:77:30:c6:
b8:c6:0d:03:f5:e6:8a:88:60:28:39:1b:01:76:5a:
6b:94:ac:7a:4f:17:66:f4:91:18:eb:7d:70:23:b8:
cc:fd:bb:ae:c5:dd:c1:78:45:39:69:57:5c:3e:1a:
09:02:05:43:ee:bf:06:a3:76:55:b5:d0:81:85:07:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:04:D7:BE:C6:07:E0:5C:40:D4:95:14:1F:F9:91:BD:A5:79:9B:F0
X509v3 Authority Key Identifier:
keyid:15:74:7B:C7:E1:22:DC:32:E6:48:97:4E:9A:5F:80:67:07:1C:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXR7x-Ei3DLmSJdOml-AZwccX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/FXR7x-Ei3DLmSJdOml-AZwccX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7c:3b:e4:82:b3:68:92:45:31:7f:3c:61:7f:47:c3:9f:d7:
31:eb:f6:10:41:8e:02:76:95:12:43:c9:86:35:61:ac:29:71:
6a:e9:38:6f:b5:03:bb:ab:0c:dd:3c:a4:1e:58:15:2b:ec:da:
a4:a8:4e:7f:6c:3b:fd:c2:2e:61:4c:7e:13:2d:52:57:f2:eb:
9e:2f:58:23:ba:b0:8d:40:de:92:d0:4f:02:e6:82:1c:aa:18:
08:33:af:03:ae:b9:9b:a5:21:65:a1:a8:3c:e3:98:28:f0:e8:
7b:47:6e:43:6f:55:97:07:65:46:e8:74:4b:0f:3e:7d:18:a4:
4b:82:c6:88:16:92:dc:6f:19:d7:6b:73:c8:3f:6f:10:90:31:
5e:a3:af:4a:67:c0:e2:45:72:08:2a:8c:71:d3:2f:49:0a:ba:
df:76:bd:9f:97:3a:f1:24:39:0f:8d:73:e5:c0:6c:8b:b5:a9:
7a:9d:9f:e3:c6:ce:91:ff:13:1d:d2:d4:87:7a:67:60:f8:76:
b0:99:60:80:b0:59:b3:9b:46:d8:b1:a7:9e:a2:94:f4:f9:a0:
7b:4c:1a:16:19:79:5c:27:8a:4c:ad:eb:39:e5:f6:03:8e:f8:
c1:74:d5:a8:ed:23:a5:c7:8d:7f:81:13:83:8a:6b:47:aa:63:
24:65:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:40:21 2026 by rpki-client