Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: F186zXtY8lAGIIxq5k1hPCVpnNg8rJLSugrzhezy3qI=
Subject key identifier: E7:FF:B8:CF:3A:58:CB:26:9B:77:EB:7E:5D:2E:46:5B:5E:E4:02:A4
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 019F84FB2C4A1BCEF352632E9F7D63324CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 033C
Signing time: Tue 21 Jul 2026 14:01:21 +0000
Manifest this update: Tue 21 Jul 2026 14:01:21 +0000
Manifest next update: Wed 22 Jul 2026 14:01:21 +0000
Files and hashes: 1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: kjQhzQd5CjFEsEW9JnxcOFAofc/x73W1SwrJqwSfGBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fb:2c:4a:1b:ce:f3:52:63:2e:9f:7d:63:32:4c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Jul 21 14:01:21 2026 GMT
Not After : Jul 22 14:01:21 2026 GMT
Subject: CN=e7ffb8cf3a58cb269b77eb7e5d2e465b5ee402a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:5e:bd:e9:05:40:70:5a:60:30:58:17:dd:
58:af:57:01:2b:da:27:a7:23:61:b1:03:32:cb:a2:
94:27:4e:a6:65:c2:a2:48:59:5e:00:52:c1:a6:bc:
48:ed:78:1d:ac:ab:2e:ef:de:6b:47:b8:66:70:27:
ff:d0:98:7d:7b:a4:ff:7a:63:0a:48:e6:36:52:cc:
21:ca:71:0a:0a:2b:2f:1a:95:10:31:59:54:b1:80:
bf:fc:64:08:22:64:65:c1:71:c7:9e:86:55:b5:3f:
a6:3b:c9:4e:a4:c6:e6:39:b4:2d:fa:51:3a:7b:dd:
b4:22:40:16:aa:bc:72:de:7c:7e:15:fe:ab:85:36:
6e:68:ff:91:e2:45:e9:69:62:59:20:2e:55:cc:43:
16:90:26:83:cb:7a:07:e3:9e:41:af:0e:62:f6:52:
9d:29:59:4d:8e:38:3e:c7:6a:98:b3:75:61:6b:5a:
c1:e7:ef:de:c2:c5:47:0d:4d:d2:48:cf:46:60:5e:
b3:a9:c5:2f:f0:38:a2:5e:3f:b0:1e:d1:4f:42:66:
26:bc:24:86:87:f4:15:18:b0:3b:7f:41:bf:62:86:
5a:ca:26:94:d7:67:0a:6a:d0:0c:7f:c9:76:20:14:
fc:df:e5:7e:06:4c:2a:7c:64:f2:92:6d:ca:ef:8b:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FF:B8:CF:3A:58:CB:26:9B:77:EB:7E:5D:2E:46:5B:5E:E4:02:A4
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3e:33:25:ce:86:76:7e:57:3c:29:b0:de:ec:2e:b1:d1:66:
74:4f:29:e2:2f:f5:3e:58:dd:1d:1b:67:4d:29:f2:fe:86:e4:
15:92:cc:b2:90:05:0b:26:cb:54:51:3e:99:3d:21:06:96:50:
e1:16:50:17:d2:e6:65:8c:84:ea:44:81:32:fb:f2:ab:84:1b:
2f:c9:90:cc:09:34:70:6b:79:b2:79:0c:a4:dd:89:b6:43:c2:
8f:5d:34:96:19:4d:6a:1c:63:b5:8e:01:70:1e:6f:fe:d0:af:
93:5f:69:73:a8:60:ae:03:c2:a8:b4:10:d4:11:1f:04:74:5b:
5e:6b:a6:29:0f:16:99:98:ae:0b:0c:c7:e2:80:f1:ce:bc:b4:
94:c4:73:52:12:ba:65:aa:76:08:e0:79:1d:ff:d9:90:df:88:
67:24:c8:51:27:30:9d:55:4b:35:8d:63:50:a9:dc:84:ce:06:
10:09:1d:54:1f:bd:8c:f8:e2:11:1f:53:3d:94:e1:aa:d8:e1:
f7:8b:43:8c:dc:a3:8e:11:08:75:b9:7c:5a:e2:75:11:71:1a:
16:e3:c0:73:05:3a:83:27:6a:69:79:21:7f:0e:61:59:78:f5:
a7:09:a3:c6:d8:0d:55:49:bd:0b:f9:d6:25:e7:6c:56:e4:bf:
7b:58:17:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+E+yxKG87zUmMun31jMkytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDJlMjBhYmQyMjAzYjA1NzY4NmIxY2FkNmNjMTI1MzQ0
NGI4YjIwHhcNMjYwNzIxMTQwMTIxWhcNMjYwNzIyMTQwMTIxWjAzMTEwLwYDVQQD
EyhlN2ZmYjhjZjNhNThjYjI2OWI3N2ViN2U1ZDJlNDY1YjVlZTQwMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4VevekFQHBaYDBYF91Yr1cBK9on
pyNhsQMyy6KUJ06mZcKiSFleAFLBprxI7XgdrKsu795rR7hmcCf/0Jh9e6T/emMK
SOY2UswhynEKCisvGpUQMVlUsYC//GQIImRlwXHHnoZVtT+mO8lOpMbmObQt+lE6
e920IkAWqrxy3nx+Ff6rhTZuaP+R4kXpaWJZIC5VzEMWkCaDy3oH455Brw5i9lKd
KVlNjjg+x2qYs3Vha1rB5+/ewsVHDU3SSM9GYF6zqcUv8DiiXj+wHtFPQmYmvCSG
h/QVGLA7f0G/YoZayiaU12cKatAMf8l2IBT83+V+BkwqfGTykm3K74s+twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf/uM86WMsmm3frfl0uRlte5AKkMB8GA1UdIwQY
MBaAFH4C4gq9IgOwV2hrHK1swSU0RLiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lOThhNzktMjQ5YS00MDQ4LTk1ODEt
ZjMwNzA5ZDljMzc5LzEvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lOThhNzktMjQ5YS00MDQ4LTk1ODEtZjMwNzA5ZDljMzc5
LzEvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEj4zJc6G
dn5XPCmw3uwusdFmdE8p4i/1PljdHRtnTSny/obkFZLMspAFCybLVFE+mT0hBpZQ
4RZQF9LmZYyE6kSBMvvyq4QbL8mQzAk0cGt5snkMpN2JtkPCj100lhlNahxjtY4B
cB5v/tCvk19pc6hgrgPCqLQQ1BEfBHRbXmumKQ8WmZiuCwzH4oDxzry0lMRzUhK6
Zap2COB5Hf/ZkN+IZyTIUScwnVVLNY1jUKnchM4GEAkdVB+9jPjiER9TPZThqtjh
94tDjNyjjhEIdbl8WuJ1EXEaFuPAcwU6gydqaXkhfw5hWXj1pwmjxtgNVUm9C/nW
JedsVuS/e1gXmw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:51:07 2026 by rpki-client