Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
File: FgRPZYu8kicHhfe7ByrJNolfSTM.mft (raw, json)
Hash identifier: y069vWJahd3kbJ4g9iNpNQFAqaZwT2VbqdvRRkRdHd0=
Subject key identifier: B2:3A:5F:29:CF:DB:54:2E:6A:34:44:72:B9:74:4A:A6:52:92:E5:E8
Authority key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
Certificate issuer: /CN=16044f658bbc92270785f7bb072ac936895f4933
Certificate serial: 019F81FAF7E69D05B484730C20A5421458EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
Manifest number: 0253
Signing time: Tue 21 Jul 2026 00:02:15 +0000
Manifest this update: Tue 21 Jul 2026 00:02:15 +0000
Manifest next update: Wed 22 Jul 2026 00:02:15 +0000
Files and hashes: 1: FgRPZYu8kicHhfe7ByrJNolfSTM.crl (hash: 9xLpeGfiPLu4nTcpJ7yDRnxaQ1hRYeD+JA8Kjs3FS5Y=)
2: WatKg_0MoVqhZNrvrktjemd-kkU.roa (hash: HB6mZ1x55io1eH3g2s4HymshoqNX8HC4t8plzzNViRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:fa:f7:e6:9d:05:b4:84:73:0c:20:a5:42:14:58:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16044f658bbc92270785f7bb072ac936895f4933
Validity
Not Before: Jul 21 00:02:15 2026 GMT
Not After : Jul 22 00:02:15 2026 GMT
Subject: CN=b23a5f29cfdb542e6a344472b9744aa65292e5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3a:a1:74:a8:30:ac:fd:8a:74:d6:4c:53:5f:
be:a4:91:84:11:78:bc:d2:9d:ba:65:af:f7:12:b7:
94:2e:34:32:1d:56:74:54:34:e1:73:3b:b6:a0:ae:
04:39:07:69:35:46:92:bc:11:fe:ab:cd:a5:0c:fe:
5e:de:14:22:2a:08:75:c0:09:33:fd:18:39:7f:dc:
1e:41:21:44:cf:53:b2:df:9a:d6:c5:2a:47:83:5d:
af:b5:dd:77:1f:37:17:21:95:8f:7d:e2:d3:67:20:
f9:ed:d6:63:b2:c1:c0:a1:c9:91:c5:ed:5e:bc:78:
3a:e4:d4:3c:2d:86:41:d2:ca:8b:70:57:a0:41:c4:
46:6f:47:20:35:be:4b:d0:ce:f0:be:e3:4a:19:fe:
6d:c1:4f:d3:05:4e:47:80:0d:fb:f0:7e:0a:f4:71:
1a:27:2e:7b:84:ee:d2:3d:52:69:6c:42:46:42:23:
61:63:de:2d:9f:80:f1:5d:c1:d2:2e:3b:bc:00:a6:
89:d3:53:67:a3:19:fc:5b:a6:1b:19:73:d4:59:b4:
95:23:48:4e:12:4e:13:02:76:bf:1f:4a:d6:37:9e:
76:8c:9b:39:43:fa:1b:71:70:ed:a7:a4:c7:5a:9e:
36:7b:99:6d:8f:42:87:c5:d7:a1:45:49:8b:b6:e4:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3A:5F:29:CF:DB:54:2E:6A:34:44:72:B9:74:4A:A6:52:92:E5:E8
X509v3 Authority Key Identifier:
keyid:16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:5f:e1:f5:91:b2:e7:82:6b:7f:cb:a1:41:cb:3c:a4:f9:be:
f4:24:cc:37:93:2c:2f:b1:8d:cd:7f:47:ea:bb:83:bb:16:79:
ff:87:57:40:dc:0a:18:88:69:61:24:58:29:2e:c4:ea:72:c0:
fe:e5:7b:65:c1:55:d2:e0:24:a4:f9:51:56:2f:a9:bd:12:07:
ae:51:68:ad:9b:ce:dd:8f:a5:84:d3:a5:07:06:0c:57:95:57:
ec:b5:ec:f2:58:b8:b3:74:25:63:f6:aa:94:b9:8d:52:19:0c:
7b:ea:1b:ce:2a:c8:bf:9a:e8:b9:8a:2b:51:a4:70:a9:81:65:
d5:1d:f8:88:ac:88:7b:9d:86:a7:8c:97:66:a7:8f:77:80:3e:
d2:3d:58:eb:36:11:4b:99:46:1c:ad:f8:f4:c2:eb:cd:49:60:
48:10:f4:1e:88:d2:38:72:a5:61:1b:62:25:b2:15:80:4e:b1:
0a:4a:3e:c8:9b:b7:0e:03:b2:91:bd:5b:aa:8e:2a:0e:02:0c:
47:be:72:19:60:e1:15:4f:da:56:32:63:f5:fc:8d:c7:5f:73:
80:13:a3:08:be:f4:f3:8d:1c:ee:98:e2:a3:f3:32:2a:a0:1e:
f2:fe:4d:0e:48:c5:0d:ec:24:69:04:c2:fc:b8:58:80:33:b2:
bf:57:61:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:07:12 2026 by rpki-client