Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
File: fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft (raw, json)
Hash identifier: wFjzUYd/K1ZtDkD8XFGuyfXtJqTy8JAzJ+rnfAoZQ2U=
Subject key identifier: 3A:2A:FE:28:5B:3A:53:C2:D4:CF:FB:64:E0:98:68:76:A3:09:4C:DD
Authority key identifier: 7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
Certificate issuer: /CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Certificate serial: 01A004393DAC62232470C9BBE651853BCC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
Manifest number: 02E9
Signing time: Sat 15 Aug 2026 07:00:55 +0000
Manifest this update: Sat 15 Aug 2026 07:00:55 +0000
Manifest next update: Sun 16 Aug 2026 07:00:55 +0000
Files and hashes: 1: 1-DzzhuQacybavI0JEFJ_Pxy7kt4.roa (hash: uRHVp/iNbMxJaaaPObGWSNEIFbTXLqpiK+JCvtnSoQ4=)
2: fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl (hash: P+BSPiKeFNBq4d2vf7FgkMXM1W9KkTpFIDQAu2Xk48Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:39:3d:ac:62:23:24:70:c9:bb:e6:51:85:3b:cc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Validity
Not Before: Aug 15 07:00:55 2026 GMT
Not After : Aug 16 07:00:55 2026 GMT
Subject: CN=3a2afe285b3a53c2d4cffb64e0986876a3094cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:d4:d5:dc:86:8b:02:16:61:33:5a:d2:11:
a1:f9:1a:2a:35:3e:cc:75:fe:35:60:ac:c7:87:be:
36:2e:c1:19:1f:ee:f0:45:71:b3:81:e7:02:88:05:
63:bd:74:19:fe:69:12:49:78:e1:69:57:8c:e8:d1:
a8:96:33:88:85:05:d7:17:82:15:69:01:38:8b:a1:
15:76:dd:f3:b1:25:dd:f8:4a:20:69:d8:3b:81:d2:
32:1a:28:42:ee:8b:16:96:94:25:d5:27:3a:13:09:
42:a2:2a:05:3b:ad:da:15:4f:fc:9e:e4:5b:b5:d3:
38:2a:8d:3e:f9:e3:46:90:7e:b5:5a:8f:c9:0c:1d:
1d:33:f6:50:64:89:84:11:2d:3d:56:5a:be:9b:50:
87:56:c5:6d:54:4c:f0:ed:1d:eb:62:32:7e:41:08:
cc:04:21:61:f8:38:cf:52:29:1a:0b:37:f9:74:24:
3c:c2:a7:a0:45:2e:85:5d:12:fc:0c:55:6f:75:a3:
91:e5:ca:e0:53:f2:08:86:40:bf:ab:ed:2f:da:ec:
de:8b:72:0d:be:07:43:27:4f:a0:16:87:76:7e:04:
50:85:55:d6:0d:a6:30:36:48:31:44:ce:f0:6c:5e:
74:2b:08:f1:09:15:27:83:87:a4:c3:e4:93:45:56:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2A:FE:28:5B:3A:53:C2:D4:CF:FB:64:E0:98:68:76:A3:09:4C:DD
X509v3 Authority Key Identifier:
keyid:7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:72:6b:47:34:7f:ca:ad:e5:e5:23:23:58:f4:04:bb:61:ad:
22:aa:4d:96:b4:4b:f6:e0:f3:c9:36:80:80:26:c2:71:ef:53:
40:49:55:87:35:3e:c1:a5:21:31:29:7c:98:84:9c:77:7f:41:
d0:99:b0:eb:9f:06:ef:0b:04:ea:39:10:7c:2b:40:b2:3b:69:
24:5d:3f:4a:8b:17:2a:30:26:3e:fd:b7:8a:46:a0:a7:b0:17:
26:91:60:21:8a:58:c4:e9:4d:69:f8:c6:a2:82:3a:dc:38:13:
32:4c:c7:be:b7:6d:da:04:17:61:6c:c2:71:63:b7:9b:e7:d3:
fc:60:47:37:a4:fa:83:3c:89:89:84:54:56:1f:5d:ba:7b:93:
2d:b3:6e:2a:ef:ef:25:ef:d6:da:d8:4a:95:bd:84:00:c5:cb:
08:40:f9:be:b5:82:84:5f:93:df:80:89:13:7a:65:d7:76:b9:
a0:73:dc:8c:d9:8f:96:0a:4c:a4:2f:3d:69:0e:65:61:ce:36:
61:03:59:78:ee:94:0a:e7:ac:ce:df:00:db:83:02:70:87:62:
09:7f:6b:56:72:51:11:a6:76:9b:9a:9c:d4:f0:cd:0a:9a:c1:
5c:7c:b0:97:7e:3b:08:27:16:4f:e9:89:13:94:62:d8:34:63:
7d:71:f1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:30:20 2026 by rpki-client