Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier: SHYBHS3r7PMtYV23rQbkDzQ+C5TYzOvf/rZQ4DaO3RY=
Subject key identifier: 21:38:23:9F:DB:E5:23:62:1E:6C:2B:FC:6A:16:81:0D:02:7D:B0:78
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer: /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial: 019F84FA3F8B9ED960015D08D07CEB740D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number: 19BD
Signing time: Tue 21 Jul 2026 14:00:20 +0000
Manifest this update: Tue 21 Jul 2026 14:00:20 +0000
Manifest next update: Wed 22 Jul 2026 14:00:20 +0000
Files and hashes: 1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: xK9yj+XXjuJTAvvIdC8VZTEhAILhZkEnO4+ll5O3Uh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:3f:8b:9e:d9:60:01:5d:08:d0:7c:eb:74:0d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Validity
Not Before: Jul 21 14:00:20 2026 GMT
Not After : Jul 22 14:00:20 2026 GMT
Subject: CN=2138239fdbe523621e6c2bfc6a16810d027db078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f5:f6:fb:bb:2e:20:07:c9:cc:51:f5:0f:44:
f9:dc:f7:9f:af:d1:b1:ac:3a:f6:28:8c:8e:98:38:
c1:b6:cc:d5:6c:cb:6e:6d:c0:f8:55:c1:8e:9b:8d:
2f:98:30:f3:04:3d:6f:b3:ec:e6:dd:93:f4:66:75:
7b:39:ca:ae:50:a2:7e:7f:6f:ac:99:cc:cc:6b:cd:
86:fc:fe:8b:27:91:95:f7:d4:91:2a:69:11:c5:fd:
fd:27:bc:2e:db:e3:e9:2d:90:1d:7e:51:34:8f:bd:
39:37:b6:ea:b0:5d:90:35:7c:4f:b5:63:b7:57:27:
ff:2f:3f:5c:a9:09:87:ed:28:4c:11:31:2f:43:b1:
c5:0f:92:46:fe:62:0c:e1:b6:45:54:e8:06:08:5a:
1b:f1:e1:b4:87:40:d6:d9:81:be:8a:43:c0:8a:f5:
fd:62:e8:ea:3d:89:9b:62:da:e2:ec:d1:b7:bc:01:
cd:9f:a3:77:f4:ac:3c:f4:17:ee:ee:3c:09:06:e2:
c6:6a:41:99:d6:df:c9:5e:ec:60:1d:5e:23:e4:0b:
73:61:d2:a9:33:bc:2e:6e:37:44:cd:70:94:ae:b2:
3e:ce:14:29:4d:04:fa:0e:0b:69:e8:0b:03:c7:89:
45:98:d4:47:0f:29:ce:30:75:fd:2b:1f:69:39:37:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:38:23:9F:DB:E5:23:62:1E:6C:2B:FC:6A:16:81:0D:02:7D:B0:78
X509v3 Authority Key Identifier:
keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0f:88:21:6a:20:38:c1:85:87:16:6e:09:ed:dd:fe:cd:0a:
95:bf:1a:16:17:7b:e2:92:18:e0:67:7f:69:b4:d7:10:4e:ac:
81:c8:18:cf:91:49:ed:c9:d6:b0:fa:d6:6e:fc:2e:8a:0a:af:
84:4d:64:5b:f3:60:d4:d3:9d:61:9b:38:25:21:09:ee:58:0f:
9f:73:cc:88:1b:e8:73:d6:5e:b3:14:07:c8:3d:04:22:78:b2:
d0:c4:97:c8:6e:de:56:72:35:c2:d9:ef:9c:05:b0:17:39:2d:
f3:f7:a0:7e:54:55:02:d3:1f:ad:ee:1f:1b:74:c5:19:54:b6:
ee:f6:43:57:bb:0b:8c:99:e5:18:cc:68:53:64:e4:ed:f6:1d:
fb:d4:62:74:d4:26:c4:32:d7:ef:66:cc:3a:fe:14:4e:af:03:
3c:e8:65:95:9a:13:54:f3:0a:68:6a:47:28:6f:da:29:db:09:
69:48:eb:7c:11:4d:2f:89:7a:91:0f:45:66:ab:5e:69:9d:a6:
bd:7c:51:66:28:48:f5:13:7d:4c:90:38:5a:93:2e:c5:0c:02:
42:74:8b:3c:13:b4:78:41:da:3f:d0:07:3d:54:d5:9c:26:f6:
c9:66:b5:69:f1:c5:2b:5b:fa:49:c7:0c:59:a2:c3:a4:68:8f:
0a:83:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:28:12 2026 by rpki-client