Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
File: FoYA36ydPRp15mMNaXEC8vITLEg.mft (raw, json)
Hash identifier: Ox4ld0Fjuzqak43Enkbr1H1ETpAevcb6gtr6+6r7l3w=
Subject key identifier: 33:C0:49:53:28:74:19:1C:04:30:67:90:97:19:B2:56:A6:22:F6:DD
Authority key identifier: 16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
Certificate issuer: /CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Certificate serial: 019FA1F22632E72323E44FAC9F4C58C9B87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
Manifest number: 19E7
Signing time: Mon 27 Jul 2026 05:00:28 +0000
Manifest this update: Mon 27 Jul 2026 05:00:28 +0000
Manifest next update: Tue 28 Jul 2026 05:00:28 +0000
Files and hashes: 1: DszWoqmG0YIHoueHjWKPKymZuic.roa (hash: a/AiCmPeqXPt0J3j9Logjd5trMJCl8VjFbnLjo6iufM=)
2: E4NAfEwW3jbfNnqs4s6wX2om-oU.roa (hash: fdTtA83SV7tJMvW5toFMANKX74HjpiK+6fBeEianyoA=)
3: FoYA36ydPRp15mMNaXEC8vITLEg.crl (hash: Qfv3cx91LVopFyC3+5098eeYw4riRRMCr39Qywa7u9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:26:32:e7:23:23:e4:4f:ac:9f:4c:58:c9:b8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=168600dfac9d3d1a75e6630d697102f2f2132c48
Validity
Not Before: Jul 27 05:00:28 2026 GMT
Not After : Jul 28 05:00:28 2026 GMT
Subject: CN=33c049532874191c043067909719b256a622f6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:d8:7f:c5:40:e9:85:03:80:36:e8:91:0e:
70:69:93:de:00:6e:58:16:7f:9c:0c:48:ab:ea:95:
36:10:ea:c0:c5:57:9c:5f:08:56:fa:57:ee:a8:fc:
8c:07:59:cd:54:b7:e0:93:55:fa:ba:3e:cf:1e:1d:
06:6c:e8:e3:7d:29:f9:e9:a6:54:44:59:b8:a9:d0:
79:7a:88:b5:90:e6:29:1b:f4:d7:46:22:c7:88:42:
7d:44:2e:b3:62:f0:5c:e1:58:9e:b3:36:54:40:6f:
9e:01:5a:c1:f3:4a:b4:e1:00:0e:e6:f6:2c:a9:2a:
00:d8:9d:77:18:bc:dd:b3:18:26:c8:29:80:43:74:
49:65:f8:52:2f:3a:16:78:48:93:c5:ee:ca:f7:d1:
54:bd:52:c7:38:c8:8b:83:84:80:0e:eb:c7:b4:fa:
55:5a:78:5b:8f:af:0d:a8:b1:39:fb:5e:1e:95:b9:
ee:db:a8:9a:4a:68:e2:9f:df:42:06:93:a4:e8:21:
58:8f:26:e4:db:09:2e:46:c5:fb:a7:12:13:29:f0:
94:15:11:a7:b4:e6:bc:b2:b3:0b:34:a7:1a:f7:b6:
c9:5e:71:63:f1:96:32:ba:20:21:ed:cb:a2:50:51:
b3:aa:eb:8a:1f:44:2e:27:7d:cf:21:85:2a:fa:2e:
88:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C0:49:53:28:74:19:1C:04:30:67:90:97:19:B2:56:A6:22:F6:DD
X509v3 Authority Key Identifier:
keyid:16:86:00:DF:AC:9D:3D:1A:75:E6:63:0D:69:71:02:F2:F2:13:2C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoYA36ydPRp15mMNaXEC8vITLEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/af35c3-7f81-4829-8dba-18dbe6504bb4/1/FoYA36ydPRp15mMNaXEC8vITLEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:14:70:b4:a3:8b:c4:c3:2b:e5:c2:a1:b1:6d:99:3d:c9:b1:
68:66:18:08:82:97:a3:26:2b:03:ff:b0:25:94:00:8a:21:80:
52:68:bf:20:de:09:a2:19:df:69:f4:54:cd:46:85:e7:44:ef:
9c:c0:98:69:3c:08:8b:40:47:c0:88:21:5e:65:ee:54:a5:89:
c6:42:1b:ae:8f:83:8d:73:2b:d4:24:b1:f6:a5:af:97:cf:0e:
04:dc:f6:d5:a9:6d:4d:8d:29:c1:ae:61:09:12:ae:bc:17:62:
7f:d1:5f:c5:34:50:0e:f3:61:a8:fe:96:34:b6:94:83:b2:0d:
f6:8a:c0:56:70:5c:98:f8:a6:7c:9f:b9:6f:74:78:83:17:ad:
3d:42:e2:2c:53:cc:02:13:35:48:06:0f:0c:cc:cc:e3:44:9a:
89:26:1a:d7:68:b0:a9:ff:62:b1:02:af:23:b6:eb:14:a5:ea:
e5:5c:21:e8:b0:47:02:11:e1:ff:4f:05:28:ab:b6:1a:a2:8f:
e4:b8:3f:88:0b:8e:a0:21:3c:01:f5:c8:08:b5:67:a6:ee:5c:
8e:22:2e:34:0a:99:86:5e:01:86:51:67:b1:f6:78:ba:45:ba:
ba:4f:47:cc:e9:7f:f1:5a:0d:e8:67:e3:6e:8c:40:cc:4f:76:
ba:c2:ad:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:48:06 2026 by rpki-client