Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: mwRnPDrPRsdIYF6lWmyU/7VgNTTkqrcsHfDbY3X2l/Y=
Subject key identifier: 36:9B:02:F9:A2:FE:44:ED:77:35:F1:64:EB:0D:77:4F:C1:46:69:84
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 019F9E4CE1C450369C5FF30816FD65068E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 12A6
Signing time: Sun 26 Jul 2026 12:01:06 +0000
Manifest this update: Sun 26 Jul 2026 12:01:06 +0000
Manifest next update: Mon 27 Jul 2026 12:01:06 +0000
Files and hashes: 1: MSIj_pvmmWV611TPzznzhVyMajg.roa (hash: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: +//4bvC0Xj/IfRUN9iX2YgYBUnqOYfabL1EAWUC69BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:4c:e1:c4:50:36:9c:5f:f3:08:16:fd:65:06:8e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Jul 26 12:01:06 2026 GMT
Not After : Jul 27 12:01:06 2026 GMT
Subject: CN=369b02f9a2fe44ed7735f164eb0d774fc1466984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:ed:b2:41:44:27:1e:40:de:c8:8b:17:97:
cd:a6:f5:d5:77:2d:ab:27:0b:75:11:b0:cc:d6:f4:
36:6b:61:de:5b:96:23:f8:85:c6:ac:22:ab:51:eb:
13:dc:ea:53:09:64:68:28:ff:bd:b8:ea:48:ab:c1:
ea:f2:29:f5:93:d7:35:fd:af:97:d1:9f:80:b8:6c:
83:e2:62:a3:bc:cd:19:7b:67:53:d6:8c:f4:5f:bc:
fd:85:75:38:cc:d1:07:4d:71:97:10:de:94:05:7e:
d6:a9:96:24:36:15:7a:56:d4:6c:73:87:4a:c5:25:
2e:b6:2b:de:1d:37:91:35:d9:3b:d4:d4:a1:52:a7:
fa:a8:e7:e2:1c:2a:de:ca:75:2d:b6:73:ba:8b:02:
3c:9b:82:1c:dd:e1:5c:42:b9:43:8b:da:88:13:8e:
34:1b:68:99:fa:a6:10:0f:76:ef:8c:69:27:fd:4a:
27:91:b6:6c:cb:3f:89:f4:8d:7d:21:a3:be:39:62:
d4:5e:11:eb:a1:05:a0:95:36:dc:a5:85:46:41:17:
23:8e:f7:27:ec:81:9c:8f:e8:ad:01:42:b4:97:be:
39:20:37:18:e6:0e:30:6a:ab:cf:6f:1e:d9:60:20:
83:22:d8:94:6b:7c:d6:eb:07:a8:b4:0e:10:9f:10:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9B:02:F9:A2:FE:44:ED:77:35:F1:64:EB:0D:77:4F:C1:46:69:84
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:da:7a:d3:c1:dc:7c:ec:a9:46:62:04:b6:6c:bb:73:00:82:
4b:d6:fd:2b:f4:be:3c:ee:b3:19:e6:79:ad:0a:79:1e:59:20:
5c:26:eb:4b:0c:af:f9:3c:c6:1e:56:cd:15:98:20:54:74:f4:
a0:ce:27:7e:fa:14:b6:27:3a:b9:e9:9c:63:e4:5a:29:18:20:
f4:ba:0d:e6:03:76:51:37:db:c6:92:fb:c9:2e:99:aa:eb:00:
3c:3f:28:73:c4:ad:73:d8:e1:a3:03:2f:25:cc:9c:bb:a8:53:
d2:13:20:bf:6c:39:af:a9:24:68:0a:c3:c8:e2:1b:d1:1e:c1:
c1:4e:6a:6a:e4:44:48:6d:50:b8:06:5b:30:80:33:66:17:2d:
50:cb:99:5a:db:ad:78:b4:d4:5c:c5:00:cc:d1:36:fe:49:0d:
3c:74:cc:62:1d:e0:23:49:d4:f9:e0:e6:77:f4:35:b4:80:20:
ff:a8:ac:33:38:e6:69:06:64:17:2a:19:a7:b2:a4:d5:19:e4:
99:58:eb:12:76:f6:e9:e0:70:ce:0d:dd:67:28:b7:92:9f:93:
fc:22:e7:18:3e:f9:7b:b2:04:8a:c0:b6:59:c5:76:47:4f:16:
b7:7f:60:dd:1f:ed:3d:4b:b2:db:22:fb:c2:62:85:de:9d:d3:
54:6c:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:54:45 2026 by rpki-client