Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: DojRPDb2iSFd+pUQXFaFDKfQ1ok4kweCXmD+tKTvIXA=
Subject key identifier: C4:12:EC:C7:AF:F8:E8:BE:03:EA:9B:15:94:EC:9A:2A:B7:74:FA:E7
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 019F194361BAEE591A909CEECA3F15FE221B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 1985
Signing time: Tue 30 Jun 2026 16:01:14 +0000
Manifest this update: Tue 30 Jun 2026 16:01:14 +0000
Manifest next update: Wed 01 Jul 2026 16:01:14 +0000
Files and hashes: 1: Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa (hash: 6wCn2sStp7lMoBisyxoOVg7CQrVyP+8JEmZ6TdkNK6k=)
2: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: yOHdOjZJYX80K6clWUyvz+RJX09zyaOEhiLjQ7yF+r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:61:ba:ee:59:1a:90:9c:ee:ca:3f:15:fe:22:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Jun 30 16:01:14 2026 GMT
Not After : Jul 1 16:01:14 2026 GMT
Subject: CN=c412ecc7aff8e8be03ea9b1594ec9a2ab774fae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:a0:68:d1:f3:93:d4:4e:e9:d7:84:9c:94:
ee:e9:18:ab:3c:d1:42:69:9d:06:ac:a1:91:06:65:
27:77:c1:e4:c0:86:f5:bd:5f:04:13:f3:25:39:8a:
47:bb:f3:96:49:64:29:9f:59:70:a8:9c:38:2c:ad:
e7:6f:fd:75:d0:f0:cf:32:b5:30:0d:6d:cf:5a:72:
3b:f9:48:84:99:e3:83:0a:ce:f0:8d:7c:a3:de:c0:
76:e6:6e:06:fa:66:ce:70:4f:94:c2:47:6f:56:d1:
7d:79:ea:ff:02:e1:4a:f0:e7:d9:35:98:8e:20:66:
5f:91:84:b5:63:b0:43:c5:df:1f:20:bd:6f:98:3f:
7d:67:3a:e4:52:e8:00:63:ab:75:2b:2d:87:e7:a5:
d1:9a:b5:c2:89:06:6b:9f:7e:09:a7:a1:42:4d:42:
54:ac:2b:ce:0d:7d:b7:65:4a:d3:c5:a1:9e:41:94:
f3:58:3f:b4:11:c1:24:9e:0a:97:0d:09:96:f8:0a:
f8:fc:e4:9d:c5:4e:73:97:2c:6b:26:61:4c:78:37:
13:c9:2f:e3:53:bf:d3:36:cb:43:b7:66:73:cb:f8:
6a:e7:b1:0b:21:a9:a6:7e:af:31:ff:d4:3b:18:2b:
af:5f:42:cc:f2:35:9b:27:0e:89:97:b1:34:51:ca:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:12:EC:C7:AF:F8:E8:BE:03:EA:9B:15:94:EC:9A:2A:B7:74:FA:E7
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:48:9e:f2:29:f1:a9:cd:b8:2f:e9:41:1f:ee:d0:ea:89:1b:
33:50:7a:72:fb:79:72:9a:cd:7e:da:ae:e8:ac:9b:d7:d7:17:
28:90:b7:34:9c:ab:62:89:9e:e5:b4:2c:ac:6f:30:39:af:95:
e8:83:80:a6:43:9e:66:27:5c:fb:9b:07:0c:fd:cf:79:90:34:
16:55:e5:2a:a6:23:7d:48:c0:bb:6f:0c:49:52:83:ff:16:f9:
11:c7:d7:f8:16:b7:52:ff:44:89:27:a5:95:89:64:bb:d0:f4:
92:33:98:ed:4e:e4:04:f1:4e:d7:6c:a0:53:aa:ac:95:3d:3d:
1e:86:0d:63:f9:cd:d7:bc:66:52:96:20:5e:98:19:d6:00:ef:
29:6a:bc:8f:8c:22:12:47:aa:b6:10:87:ca:3a:b0:f0:81:59:
35:d9:1c:34:5c:0b:71:e9:ff:7a:93:8c:c0:d7:bf:5b:93:fe:
85:44:af:de:73:5b:8d:68:c5:bd:83:53:13:0a:a0:08:c3:86:
0b:ff:18:a4:07:9a:71:bc:2a:12:4d:ea:fa:8c:31:c5:05:bb:
36:b7:4f:a7:03:11:1c:ed:17:38:4b:5f:72:09:07:3a:12:6b:
cb:c1:64:5e:60:9b:15:0f:a4:c6:ef:d5:02:fe:ec:15:40:1b:
0a:61:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:09 2026 by rpki-client