
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier: O4eW2R9DkVLvLlHQz9aPLNq856dwzwvSUI0gtHWIzRo=
Subject key identifier: A8:F6:33:BE:99:A2:81:43:07:F3:B6:DD:7C:99:2F:37:E9:A1:2E:98
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial: 019FD20347D44DAC1036151F76724D4AFA9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number: 094C
Signing time: Wed 05 Aug 2026 13:00:58 +0000
Manifest this update: Wed 05 Aug 2026 13:00:58 +0000
Manifest next update: Thu 06 Aug 2026 13:00:58 +0000
Files and hashes: 1: HlFzm-zahAFjRHtl1bHeIsDoPDc.roa (hash: osKIkxfPFsY8+sDd/0d/lLUvdIHTe/QQACWaNNkv5qM=)
2: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: U9+f/nGp7SqtRfTvaTdX6D9nPfhkOQnkVmQsIyLuUqo=)
3: wFhxeOIRYZRjHE_NR_YMO7VFyJ4.roa (hash: Fmj1myi/dimk9BjIvdN9tLy/wytpW18VOOMvrJoUFtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:03:47:d4:4d:ac:10:36:15:1f:76:72:4d:4a:fa:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Validity
Not Before: Aug 5 13:00:58 2026 GMT
Not After : Aug 6 13:00:58 2026 GMT
Subject: CN=a8f633be99a2814307f3b6dd7c992f37e9a12e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:2e:81:9d:40:a1:52:23:32:8c:dc:d6:90:
97:d4:aa:d8:41:d3:05:70:a5:47:07:95:fe:0f:db:
89:7d:64:9c:f7:68:d6:d1:75:26:f2:d5:fe:ca:8a:
96:f1:92:ab:3b:52:25:5c:68:72:1b:d7:d2:c6:16:
96:15:96:af:bf:fb:c4:d5:90:44:8f:d4:1f:78:17:
fd:9d:29:7c:a2:4c:9f:e4:b4:14:79:dc:a8:05:61:
d2:f7:24:9e:2f:2b:70:2e:d1:23:35:d9:d2:1a:be:
43:34:b7:c9:0e:51:89:4b:94:90:f5:78:f8:09:e3:
be:1c:c2:b1:c8:8d:bb:1a:bb:19:b2:ba:84:08:37:
09:50:bd:3e:46:74:52:6e:93:5c:33:9f:51:a6:05:
9c:ab:35:ce:47:75:3c:a7:27:f2:64:14:ea:da:b4:
f7:e7:1e:02:cb:e0:4e:38:72:fa:d0:57:4f:53:bc:
42:33:e2:a6:11:0e:8d:5e:86:27:4c:00:fe:a3:80:
31:9e:69:d5:b2:14:af:99:44:2c:cf:c8:2b:a6:db:
e5:60:52:fa:25:82:f6:86:30:a0:cb:87:d6:9b:3b:
b3:2d:7d:76:b2:f0:99:32:72:9b:0d:68:1e:99:29:
52:6a:b0:bf:ef:eb:92:de:23:f7:3b:6e:17:b2:08:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F6:33:BE:99:A2:81:43:07:F3:B6:DD:7C:99:2F:37:E9:A1:2E:98
X509v3 Authority Key Identifier:
keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:71:82:f2:f8:69:23:67:f1:27:c4:ff:9b:89:ab:f6:ed:ab:
89:9f:63:96:9d:c6:b7:47:ac:cc:56:fb:80:20:77:7f:d5:94:
d1:dc:e5:c7:4d:f0:18:88:41:cc:6f:f2:ce:50:db:23:eb:a8:
89:9a:09:95:4c:68:03:90:ba:b6:51:89:66:63:b2:68:0a:be:
f4:07:a5:72:4c:42:11:87:99:5e:10:25:53:d5:16:86:b6:13:
66:fb:a1:d2:b2:9e:ec:17:d5:cf:64:e0:43:ce:e8:6a:8f:84:
a5:56:3c:e9:db:d3:57:c8:47:4d:65:e1:26:47:4c:76:49:6a:
3a:88:51:70:1b:90:35:14:da:00:41:cf:98:f6:f7:90:f8:a5:
ed:29:28:e9:ac:db:b2:d0:4a:18:de:eb:fc:d2:d3:28:6f:ae:
9a:26:44:5c:de:0b:fe:97:ea:c0:eb:5c:ec:9e:8c:29:8f:7a:
87:df:cb:69:d6:dd:f0:74:21:37:6a:dd:06:0a:29:21:8a:ba:
5c:04:ec:18:5a:3d:1e:e5:d5:27:d1:7d:bb:d2:ef:67:28:73:
97:da:6c:7e:be:f3:74:92:72:6b:ab:f0:0e:bb:e7:85:5d:87:
32:27:61:e6:ce:79:59:9a:67:08:6b:b9:f1:dc:62:d9:5b:c3:
24:15:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 20:10:29 2026 by rpki-client