Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json)
Hash identifier: MD0FUTfADZqaxaeIpPYFBp6sA4WDYzk8wJ1/HkSm2+8=
Subject key identifier: 53:FA:97:D4:7C:34:87:CE:DC:87:AC:71:7F:DC:41:C8:46:8C:4E:97
Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Certificate serial: 019F8230CA3F18304DF78837C4B6A0986800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
Manifest number: 19A5
Signing time: Tue 21 Jul 2026 01:01:03 +0000
Manifest this update: Tue 21 Jul 2026 01:01:03 +0000
Manifest next update: Wed 22 Jul 2026 01:01:03 +0000
Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: AY/7VVs9JIrVde1A/svJuSY+C9ETPvM9+fYVnBNK1xo=)
2: PaB6Iu-OaufEYMBZiWD0zvYNa9Y.roa (hash: TjF06m/Mp/7aJVVxV+8vfqSIb8qTmO7jQ4Gg8K+F0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:30:ca:3f:18:30:4d:f7:88:37:c4:b6:a0:98:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7
Validity
Not Before: Jul 21 01:01:03 2026 GMT
Not After : Jul 22 01:01:03 2026 GMT
Subject: CN=53fa97d47c3487cedc87ac717fdc41c8468c4e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:3d:25:95:77:69:5e:ae:df:eb:aa:c7:54:
67:a6:22:04:10:f8:56:8b:71:31:4c:18:6c:c6:bf:
03:84:71:af:bb:b6:eb:5f:9e:46:23:ed:b0:5b:94:
80:a8:a3:ed:4c:1f:70:62:34:c8:de:4f:e9:56:34:
02:20:16:a0:47:3f:50:14:c8:6c:c2:f2:19:5a:82:
ea:32:a2:ba:41:93:02:23:99:4d:14:27:7a:c0:90:
16:8a:c6:3b:f3:52:df:53:cc:af:29:12:42:e0:98:
85:08:f3:53:db:28:cc:d0:44:f2:f5:df:0c:27:70:
e9:bd:3e:c9:80:58:de:cb:04:93:e7:0d:18:47:8f:
3f:5f:a1:f4:09:83:a3:63:28:e2:d4:ee:5c:86:b9:
d4:c1:e9:86:62:24:7f:fd:c7:ee:37:15:b7:e6:1f:
25:5e:e8:55:2c:49:db:40:2f:bb:6e:2a:42:e9:6a:
62:9d:4f:c9:00:cd:91:53:82:6b:db:c5:e2:9b:73:
cd:98:4c:40:2a:15:f8:70:ef:25:59:b1:1b:4c:0a:
90:e5:52:9c:45:89:78:32:d1:5c:21:88:9b:9c:ff:
46:a3:da:96:62:d8:2e:ce:8d:8f:28:e8:be:f9:e6:
ce:34:c4:bf:23:f2:48:60:03:20:68:67:e6:3f:ce:
90:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FA:97:D4:7C:34:87:CE:DC:87:AC:71:7F:DC:41:C8:46:8C:4E:97
X509v3 Authority Key Identifier:
keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1c:f1:b4:b3:da:12:23:53:cc:78:42:53:22:ec:a8:17:8d:
4f:52:80:15:3c:ff:7d:9c:37:5d:ac:0b:d5:ce:ea:65:bf:a7:
68:fc:ae:82:15:ea:06:a0:9e:fe:41:fb:80:10:ee:f9:3b:fc:
53:47:e3:77:03:08:88:50:c9:c5:fe:6a:31:f8:ca:db:83:6e:
43:c6:88:11:39:aa:97:df:db:38:fb:33:01:b7:1b:8c:70:0f:
74:3d:a8:6c:3d:86:47:7b:8d:b9:0f:ad:51:3b:9f:c1:b5:71:
18:6a:46:ef:13:23:80:2c:a3:85:5d:5e:46:c3:37:3b:4d:c4:
20:b5:43:a8:97:f3:fb:9c:13:33:a0:7c:72:e7:ca:69:15:27:
26:de:ac:09:73:47:ae:ef:d4:0a:62:47:0e:95:48:a6:69:88:
30:e4:22:3b:41:70:77:1b:56:b0:1b:ee:6b:f6:03:7b:f1:e7:
f2:44:aa:f9:fc:8b:4e:91:d2:ca:16:66:59:db:b9:a4:6c:ee:
a1:ce:0f:23:44:ea:79:38:c0:c0:be:f3:fe:db:78:1d:8d:26:
dc:b3:ae:f3:cd:9b:e0:da:78:75:e9:13:81:be:0f:04:d5:1c:
74:bc:00:c1:b7:03:1c:3b:45:59:40:18:38:0e:db:bd:be:9d:
f8:79:30:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:57:57 2026 by rpki-client