Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
File: Fo8OK6LQk0M6S2EpVye5m7FF93s.mft (raw, json)
Hash identifier: 6Ndq7qUpE2VYxrK/QWucCYriEvS8Ldvd+VWyLn02Sa8=
Subject key identifier: 6A:55:BC:DE:E6:88:45:2E:BC:61:66:94:4F:53:D1:DE:7A:C7:C0:44
Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
Certificate issuer: /CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Certificate serial: 019FA3055CB3416423F717DA6AE1EEE18BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
Manifest number: 0950
Signing time: Mon 27 Jul 2026 10:01:05 +0000
Manifest this update: Mon 27 Jul 2026 10:01:05 +0000
Manifest next update: Tue 28 Jul 2026 10:01:05 +0000
Files and hashes: 1: C9A49XShrpT2L1lbu5v6tyyqxGE.roa (hash: Z6iZSfPjsI83CHUl8Gu4u2Ux8v9NUtJP/iskQ5nB/10=)
2: Fo8OK6LQk0M6S2EpVye5m7FF93s.crl (hash: oKc15lF7PsgoHOk9XqKEyH0lrgB2MWBme5frFJpfUZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:5c:b3:41:64:23:f7:17:da:6a:e1:ee:e1:8b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b
Validity
Not Before: Jul 27 10:01:05 2026 GMT
Not After : Jul 28 10:01:05 2026 GMT
Subject: CN=6a55bcdee688452ebc6166944f53d1de7ac7c044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:66:d5:25:36:99:db:e3:17:96:c8:91:a4:
0a:21:24:21:84:a5:d4:11:60:87:93:da:95:14:8a:
12:20:89:01:b7:e7:2f:94:ad:bf:b5:38:7d:94:e0:
69:c3:a6:c1:01:47:8c:0b:26:e6:c2:e8:1f:c2:fd:
c4:25:cb:b0:5d:96:9d:12:7c:65:19:c1:b3:20:fc:
04:64:89:fd:8f:5f:04:92:a5:12:6a:f3:bf:e6:a8:
00:92:d6:6b:37:c7:65:c0:35:ce:04:ed:bf:78:81:
cc:7d:24:57:d5:e5:90:28:30:cb:07:16:ff:0c:c4:
30:79:81:b2:5e:8d:f9:16:82:4d:6d:42:bd:e9:0f:
2d:55:78:fc:3b:e2:9c:a2:e4:2f:f5:72:5b:e5:82:
2a:d9:87:2c:50:75:bf:4e:2e:74:a5:5c:dc:89:ef:
b9:47:5e:ab:f3:38:c8:8c:fc:e3:09:73:1c:bb:b2:
e5:f4:94:cc:3e:f3:df:26:98:a1:7b:3f:38:88:e6:
10:f3:a8:5f:87:06:2c:7d:2c:35:bd:e0:bb:4c:9c:
19:35:b7:1c:61:a6:ff:3d:3e:c1:5c:2d:9d:8e:f8:
f2:99:60:99:93:17:25:88:6f:c6:85:f3:b2:32:92:
bd:58:cf:31:27:58:dd:93:93:68:fb:21:cc:b9:af:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:55:BC:DE:E6:88:45:2E:BC:61:66:94:4F:53:D1:DE:7A:C7:C0:44
X509v3 Authority Key Identifier:
keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5b:e9:65:13:48:bc:d7:c8:86:38:78:cd:9f:f8:7b:71:3b:
f9:3c:ff:78:0f:49:7a:8c:c9:7f:f4:13:9d:1f:ac:d8:57:64:
64:50:f5:98:02:4d:c7:79:a7:49:dd:90:a2:40:af:09:88:67:
b1:34:0a:dc:4e:26:db:cd:2f:28:55:d0:5f:74:60:6b:51:4d:
b6:e7:ce:6f:01:8c:38:9f:75:09:73:90:3c:6c:41:10:c7:c6:
a2:61:da:df:45:00:9b:c5:33:6b:3d:01:4e:97:20:a2:b1:55:
66:13:44:82:72:3a:14:f7:a3:2e:b5:76:27:6b:45:29:cf:36:
bc:60:51:ef:d2:cd:55:03:64:a8:ce:08:0e:95:38:c5:9e:d8:
74:38:85:82:bb:4b:10:a0:04:c7:b2:28:e7:f1:e7:7d:9a:25:
fd:61:00:e0:e9:39:bc:55:22:4d:61:41:3e:a4:4b:b3:89:54:
54:47:3c:15:c5:11:77:5a:40:d8:27:cd:0e:47:52:da:6c:65:
d9:cc:45:86:c3:43:6f:a3:df:6b:58:2e:66:c2:4e:39:a3:56:
52:23:15:2a:6c:52:a7:2b:9c:92:6e:e9:c4:04:a3:74:6f:30:
68:91:30:a5:09:19:1b:11:a0:91:d7:75:42:59:c0:7a:80:f0:
a8:3d:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:59:09 2026 by rpki-client