Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: tF58Q/acK1r0OFug2Yc2REiLeHO3N8PX7QuQqdWSUZg=
Subject key identifier: 50:87:DF:1F:5D:75:BB:BF:3E:B7:ED:09:A6:BB:49:E5:68:91:38:66
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 019F52C533C1B0512681028613B229F4D4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 0322
Signing time: Sat 11 Jul 2026 20:01:23 +0000
Manifest this update: Sat 11 Jul 2026 20:01:23 +0000
Manifest next update: Sun 12 Jul 2026 20:01:23 +0000
Files and hashes: 1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: KqEZWsf9vT8HCPOnkfnCWswDG46Bfg5tvTro8SDINeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:52:c5:33:c1:b0:51:26:81:02:86:13:b2:29:f4:d4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Jul 11 20:01:23 2026 GMT
Not After : Jul 12 20:01:23 2026 GMT
Subject: CN=5087df1f5d75bbbf3eb7ed09a6bb49e568913866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:bc:9a:85:d1:29:50:d1:9d:82:73:b8:ca:
e4:87:c5:25:bf:0e:3e:3c:4d:a4:65:fd:2c:5c:38:
43:5b:33:1c:a7:54:3d:11:99:4e:c4:61:f3:c1:30:
e7:f7:16:d2:de:09:c9:df:48:4e:5e:42:40:f4:a1:
24:64:c8:5b:e6:be:d8:61:fb:c3:03:91:7f:ba:da:
1c:a4:31:c6:88:67:af:0b:e3:b7:ca:28:82:00:3e:
f0:68:d4:e5:87:bd:aa:39:fd:e7:9e:8a:1a:51:b0:
b5:30:d2:14:d3:87:00:84:90:41:a6:9e:3e:e6:71:
4f:b6:51:99:78:11:2f:49:79:81:8f:3f:f6:20:96:
35:1f:1c:ea:3d:41:aa:58:f9:22:c6:b9:a1:a5:3a:
42:dd:53:eb:b6:6d:97:ed:28:94:02:8b:a5:3b:9d:
25:7f:dd:1c:fe:3d:e3:0b:1b:69:03:01:b3:b1:93:
5a:b1:dd:37:a4:7d:42:6f:8a:63:12:2a:c3:14:e5:
ec:12:a4:31:e1:d1:46:fa:d9:dc:6b:2b:be:a6:8d:
da:24:fc:11:b6:80:6f:74:02:0a:25:11:e3:01:46:
1e:2a:31:af:91:1e:a2:39:71:2e:d6:38:01:9c:b0:
9e:ef:72:e2:a2:6a:3e:1c:e4:b9:85:20:72:9a:c0:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:DF:1F:5D:75:BB:BF:3E:B7:ED:09:A6:BB:49:E5:68:91:38:66
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e2:72:ae:f0:c0:03:30:b7:40:59:88:c4:67:a0:b9:f9:ca:
61:0b:6f:59:c9:a2:d3:9c:0d:18:a2:87:02:1e:c1:02:88:4e:
a5:5a:52:51:b5:e8:a6:63:a7:37:46:7f:ac:78:e0:92:6e:09:
bd:a5:ab:c6:2c:8b:8f:3f:2a:a9:e4:f6:ef:b1:39:2d:df:d1:
ff:0c:30:b5:56:4e:f9:52:fd:43:e6:c7:d7:c8:1f:ae:fc:02:
e2:49:c5:7b:8a:f2:dc:e4:b0:08:a8:3a:13:6a:6a:9d:e1:8f:
d0:84:5e:2a:70:1f:38:bf:e1:7a:a2:2b:0a:9d:57:63:5a:76:
ed:58:34:80:63:5b:96:df:58:f3:9f:58:73:05:13:92:32:e2:
f0:39:85:2c:4e:6c:b2:33:57:ba:5d:12:a5:c8:95:a1:3e:3c:
87:16:4b:f2:38:00:8e:88:aa:c1:bf:12:1f:c3:4c:80:9b:ef:
c0:6e:2c:f9:db:80:b7:c4:fc:08:86:85:e6:e8:2c:09:c6:dc:
99:2c:05:1f:eb:a8:39:66:be:a6:9d:2c:b0:ef:0a:13:87:ef:
8e:5b:aa:fd:30:02:6c:c6:63:ca:53:26:fe:49:25:e3:d6:91:
d1:a4:d5:38:fe:05:b3:55:6f:c4:eb:8f:a1:a9:d8:d2:97:7b:
85:cd:30:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9SxTPBsFEmgQKGE7Ip9NTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDJlMjBhYmQyMjAzYjA1NzY4NmIxY2FkNmNjMTI1MzQ0
NGI4YjIwHhcNMjYwNzExMjAwMTIzWhcNMjYwNzEyMjAwMTIzWjAzMTEwLwYDVQQD
Eyg1MDg3ZGYxZjVkNzViYmJmM2ViN2VkMDlhNmJiNDllNTY4OTEzODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvui8moXRKVDRnYJzuMrkh8Ulvw4+
PE2kZf0sXDhDWzMcp1Q9EZlOxGHzwTDn9xbS3gnJ30hOXkJA9KEkZMhb5r7YYfvD
A5F/utocpDHGiGevC+O3yiiCAD7waNTlh72qOf3nnooaUbC1MNIU04cAhJBBpp4+
5nFPtlGZeBEvSXmBjz/2IJY1HxzqPUGqWPkixrmhpTpC3VPrtm2X7SiUAoulO50l
f90c/j3jCxtpAwGzsZNasd03pH1Cb4pjEirDFOXsEqQx4dFG+tncayu+po3aJPwR
toBvdAIKJRHjAUYeKjGvkR6iOXEu1jgBnLCe73Liomo+HOS5hSBymsDnOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCH3x9ddbu/PrftCaa7SeVokThmMB8GA1UdIwQY
MBaAFH4C4gq9IgOwV2hrHK1swSU0RLiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lOThhNzktMjQ5YS00MDQ4LTk1ODEt
ZjMwNzA5ZDljMzc5LzEvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lOThhNzktMjQ5YS00MDQ4LTk1ODEtZjMwNzA5ZDljMzc5
LzEvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOJyrvDA
AzC3QFmIxGegufnKYQtvWcmi05wNGKKHAh7BAohOpVpSUbXopmOnN0Z/rHjgkm4J
vaWrxiyLjz8qqeT277E5Ld/R/wwwtVZO+VL9Q+bH18gfrvwC4knFe4ry3OSwCKg6
E2pqneGP0IReKnAfOL/heqIrCp1XY1p27Vg0gGNblt9Y859YcwUTkjLi8DmFLE5s
sjNXul0SpciVoT48hxZL8jgAjoiqwb8SH8NMgJvvwG4s+duAt8T8CIaF5ugsCcbc
mSwFH+uoOWa+pp0ssO8KE4fvjluq/TACbMZjylMm/kkl49aR0aTVOP4Fs1VvxOuP
oanY0pd7hc0w+Q==
-----END CERTIFICATE-----
Generated at Sat Jul 11 23:24:11 2026 by rpki-client