Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
File: FfXEJ7UOueKq98WswbIoljOrU1M.mft (raw, json)
Hash identifier: 7kBMlkPLIQhFfSPTlmOmp6UI/zWRR9YrJnnEn+CM2aY=
Subject key identifier: BD:58:04:CD:C7:07:2B:8C:A5:C2:38:A6:D1:B7:D4:0C:81:5C:31:62
Authority key identifier: 15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53
Certificate issuer: /CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
Certificate serial: 019FA3053D46409E9550D481961E56CECAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
Manifest number: 02BD
Signing time: Mon 27 Jul 2026 10:00:57 +0000
Manifest this update: Mon 27 Jul 2026 10:00:57 +0000
Manifest next update: Tue 28 Jul 2026 10:00:57 +0000
Files and hashes: 1: FfXEJ7UOueKq98WswbIoljOrU1M.crl (hash: W1BPwYjya7m7ciCVVsyNWRvIlm71hLEXZJArYN9f8TA=)
2: QB6IjG25mOKNaxsVjuB38lmC2hs.roa (hash: R3eK+TP7VbOaPSIht9zdm6FFs2zJ4wqUGZxjbXUn4oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:3d:46:40:9e:95:50:d4:81:96:1e:56:ce:ca:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
Validity
Not Before: Jul 27 10:00:57 2026 GMT
Not After : Jul 28 10:00:57 2026 GMT
Subject: CN=bd5804cdc7072b8ca5c238a6d1b7d40c815c3162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:e0:35:aa:9f:2e:40:16:26:3e:38:a2:2a:
87:78:bc:ba:e4:6b:84:63:bc:ba:8f:ad:e6:38:8b:
68:7d:98:94:41:4a:87:a9:e9:3e:c2:9e:3a:7b:77:
3a:7c:ed:6e:4d:6f:11:81:10:10:16:3b:d5:88:e5:
ea:0b:d3:72:ee:90:de:43:09:f3:25:a7:98:25:f2:
f6:fd:57:c1:b8:b4:b6:72:21:ea:ca:3f:ee:18:58:
61:53:83:c8:0b:a6:97:5a:19:ba:a9:fb:41:9b:56:
2f:78:d4:c2:20:20:e3:c8:e9:7d:d3:88:37:50:9c:
01:5c:90:c7:8d:f9:26:92:36:73:8c:4c:1e:ad:da:
9d:bb:c2:b4:9c:52:78:a1:0e:da:6c:7c:14:7e:98:
08:da:d9:6f:fa:51:3f:d4:41:e5:aa:ef:55:6a:16:
63:9e:d8:88:93:07:3b:d3:b9:ec:20:56:f6:b0:bf:
69:62:75:51:3e:54:33:7d:08:be:30:1e:70:a2:67:
be:14:aa:1c:bd:7e:8b:48:35:2a:2a:36:24:ac:13:
cf:8c:f4:79:0d:86:a5:56:26:96:43:60:7d:d8:51:
6b:79:e6:e6:0c:66:e2:91:7d:e5:b6:04:a2:30:65:
79:f8:e0:49:54:97:8f:7d:97:55:6c:6d:ba:fb:e9:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:58:04:CD:C7:07:2B:8C:A5:C2:38:A6:D1:B7:D4:0C:81:5C:31:62
X509v3 Authority Key Identifier:
keyid:15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:98:d2:1e:b2:98:d8:84:a3:c1:3b:95:3a:6c:79:fe:3d:0f:
5d:4c:31:ba:6b:36:2c:e5:c5:e7:b4:b4:8e:03:a2:43:aa:82:
af:45:ff:f0:3f:5d:de:63:01:e6:82:bd:43:11:49:10:43:7d:
1a:4f:58:2d:ee:4e:4c:fc:19:a5:96:30:54:ad:51:6c:b3:52:
6e:54:a2:53:34:c0:e0:fe:9e:a7:87:0f:59:20:d9:72:42:b3:
00:a1:9e:07:c7:39:1a:cb:22:ab:9d:6d:18:83:d1:3a:83:b1:
be:39:ff:4e:dd:db:78:25:49:4a:97:fb:8c:a3:7a:69:66:69:
24:ba:e8:67:7b:d4:8c:ac:94:9b:63:a8:41:0f:f3:9c:b6:fe:
67:8d:4a:08:97:6c:30:43:c3:62:c7:52:4f:a1:78:d7:0c:05:
d5:2b:62:76:45:35:f1:ec:13:3e:18:ee:2f:5a:1e:d3:b3:70:
26:7c:8a:ff:94:5f:54:45:77:d2:c3:66:9d:01:3c:16:ae:82:
20:b0:e2:1c:86:7e:6a:a1:fb:e3:c6:55:89:85:d8:5f:8f:ba:
c6:ab:cc:05:54:66:b5:21:b4:79:19:da:b7:f7:bf:82:89:28:
a3:f9:7c:7b:41:77:6e:64:85:0b:b7:9e:77:93:65:e0:0f:ae:
ea:e1:8e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:09:02 2026 by rpki-client