Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
File: fobc3nEdVFNTl0szlVEI2d9Atuk.mft (raw, json)
Hash identifier: spe7+oSWw6Xo5MKqvNH20mB2CFzFunqIKlP9rtCaTQQ=
Subject key identifier: 56:D3:A1:86:0C:D7:3C:05:1A:40:26:14:7B:5D:FD:31:DC:5E:81:AA
Authority key identifier: 7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
Certificate issuer: /CN=7e86dcde711d545353974b33955108d9df40b6e9
Certificate serial: 019EB6C5C55B43F332C920BAD23743615BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
Manifest number: 119D
Signing time: Thu 11 Jun 2026 13:01:14 +0000
Manifest this update: Thu 11 Jun 2026 13:01:14 +0000
Manifest next update: Fri 12 Jun 2026 13:01:14 +0000
Files and hashes: 1: _chBVEiIFGC5r20fIYTsPORg6rk.roa (hash: x/qbcI8zbCXOFAC/IalZJH/FotXUoS1HPt4P46/aRNU=)
2: fobc3nEdVFNTl0szlVEI2d9Atuk.crl (hash: ro7j7B4Gz0hQ2gC6yO+AW22Xz3T2sI2dJnaWMutpbBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:c5:5b:43:f3:32:c9:20:ba:d2:37:43:61:5b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e86dcde711d545353974b33955108d9df40b6e9
Validity
Not Before: Jun 11 13:01:14 2026 GMT
Not After : Jun 12 13:01:14 2026 GMT
Subject: CN=56d3a1860cd73c051a4026147b5dfd31dc5e81aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:9b:53:a3:b4:50:84:c7:8d:c0:e2:46:5e:
6d:3b:94:b1:c9:71:4d:2a:ab:3f:cf:39:8f:31:ce:
91:9f:b2:a9:3d:1b:96:fd:5a:2b:bf:d7:1f:1f:c6:
55:98:29:da:cd:c1:d0:a9:e1:5d:fb:9e:b0:49:a0:
a6:75:f6:6f:02:e7:dd:a6:97:5d:19:6a:b2:b7:39:
f3:36:0b:08:9c:1b:5c:53:a8:49:7a:b4:5a:87:cb:
7c:58:d9:1e:09:e9:2b:45:4e:72:a2:9e:60:bb:57:
b9:52:f8:65:3a:21:85:8e:65:45:4f:84:1d:ee:1c:
37:00:95:10:b3:63:28:3d:63:d6:26:30:c3:ce:7b:
07:59:d8:6c:3b:f4:a6:19:32:cf:87:8e:38:88:cc:
63:06:06:2d:d4:83:22:3a:f4:82:5f:00:62:c6:fb:
0d:61:09:48:d2:7f:3f:6a:5f:27:fc:ab:6e:20:9a:
dc:9d:10:76:29:a0:dc:c8:5f:d2:88:42:96:81:1b:
b3:94:dd:f3:6b:31:b1:77:be:0f:28:ea:4b:74:b9:
fa:88:7f:42:c3:c8:09:9b:af:02:11:67:d1:f9:87:
51:03:cb:e7:19:d2:61:f6:82:06:87:21:61:05:46:
20:39:85:a5:51:69:ec:a4:0a:70:f5:15:96:cf:3b:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D3:A1:86:0C:D7:3C:05:1A:40:26:14:7B:5D:FD:31:DC:5E:81:AA
X509v3 Authority Key Identifier:
keyid:7E:86:DC:DE:71:1D:54:53:53:97:4B:33:95:51:08:D9:DF:40:B6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fobc3nEdVFNTl0szlVEI2d9Atuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/63e413-35ca-49e0-8285-35f1a9088b42/1/fobc3nEdVFNTl0szlVEI2d9Atuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8c:69:31:f0:33:34:4c:5d:1e:cf:2b:a7:98:18:55:d4:1c:
81:16:39:7c:1a:47:94:6c:e8:4b:e5:28:7a:b0:90:d2:97:43:
f3:d1:42:ce:e2:d1:2b:a4:93:72:d4:79:e6:26:de:80:b2:50:
22:0b:45:36:3c:b5:32:45:d4:87:51:5a:7a:92:1d:f7:df:34:
01:9f:df:67:12:ae:47:bb:9b:7e:a1:af:69:1a:df:df:bf:4c:
56:c1:53:de:c0:9b:cf:53:5e:ca:f5:aa:eb:59:49:cf:38:65:
37:d1:f8:ee:87:c0:b4:b0:b5:1e:7f:f7:16:5e:4d:e5:47:6f:
fd:b2:2d:a0:ec:a1:7e:2f:12:0e:b6:f9:f5:0a:dc:5e:c7:4d:
35:9b:18:84:a0:67:d3:2e:13:e5:b6:69:07:5d:bf:0f:3d:1b:
5d:d1:4e:d8:81:59:a4:dc:96:fd:66:c1:32:86:11:54:b2:40:
0b:64:33:93:64:3c:16:92:80:38:01:e1:4b:d9:19:ee:3c:b9:
74:d7:7a:45:ad:ae:64:96:b0:75:2c:ef:e8:ed:35:7a:f1:49:
1d:92:9f:27:98:b1:67:f0:b4:6a:42:fa:85:d4:16:07:e4:b9:
5e:4c:59:aa:c8:87:a8:50:c7:b6:0f:f3:b7:10:7b:ef:61:39:
65:59:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:02 2026 by rpki-client