Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
File: flL6ttMgbrYKMduWxy2U_CQsCgg.mft (raw, json)
Hash identifier: SK1AfbotxRLC3fsJvTBuE0K2QAWRQmjwaRJ8XABUS1Y=
Subject key identifier: 55:8C:E2:BE:EC:40:9D:C1:6D:24:A5:92:4D:77:0D:83:A5:54:94:3C
Authority key identifier: 7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
Certificate issuer: /CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Certificate serial: 019FA0A88C806F8556C1CA6EC43B67AC10C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
Manifest number: 19CD
Signing time: Sun 26 Jul 2026 23:00:28 +0000
Manifest this update: Sun 26 Jul 2026 23:00:28 +0000
Manifest next update: Mon 27 Jul 2026 23:00:28 +0000
Files and hashes: 1: TjAvojkthatfZwmFZTWM208kjsE.roa (hash: p0LbMJl290HK/hvyznHFUSYXUEBgbUFMbzWPYg0JPn4=)
2: flL6ttMgbrYKMduWxy2U_CQsCgg.crl (hash: zIRM2QmHYbY2diUVZ6A6RTeDkncto3CzlWT+YWczMgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:8c:80:6f:85:56:c1:ca:6e:c4:3b:67:ac:10:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e52fab6d3206eb60a31db96c72d94fc242c0a08
Validity
Not Before: Jul 26 23:00:28 2026 GMT
Not After : Jul 27 23:00:28 2026 GMT
Subject: CN=558ce2beec409dc16d24a5924d770d83a554943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:43:17:99:9b:18:60:09:f7:fa:2d:af:4c:
df:1d:ff:4b:4b:e1:21:ff:d8:cc:7d:0e:90:37:5c:
44:22:cc:34:eb:f3:f0:f7:df:db:32:e1:84:a5:c9:
77:1f:46:29:92:14:22:6a:e6:7d:b9:0b:f1:d7:2f:
af:9d:0e:b2:c4:a1:cd:8e:72:c5:2e:45:4f:e3:3f:
a4:a0:e1:83:67:98:44:2a:33:10:86:41:77:b0:d7:
09:e8:07:db:ed:40:c7:a9:d9:bd:74:6d:80:02:52:
f1:f7:f9:ac:c6:58:a6:84:3b:df:1f:93:45:6c:0d:
15:f9:2b:cf:ab:65:4e:73:91:0e:11:73:c5:e9:c7:
1d:9a:df:3f:58:a5:38:34:8f:19:89:81:ce:e6:f3:
88:61:55:eb:23:4a:a2:bf:17:d5:88:21:b6:ae:e0:
6f:35:7b:8b:f8:7b:30:bf:4b:b6:c9:4c:46:d6:aa:
00:ae:b9:4e:ef:84:01:28:ac:6f:a4:14:3b:d5:2d:
e2:3e:dd:64:2c:24:dc:1c:9b:d8:10:0d:48:72:e5:
1d:8c:21:6f:c2:8d:dc:b9:0c:47:5f:37:59:d9:b1:
2f:00:90:1a:4c:32:c5:48:32:f8:bb:5a:0f:9f:d5:
32:92:40:52:2d:91:ea:40:1d:7b:be:3f:29:0e:d2:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8C:E2:BE:EC:40:9D:C1:6D:24:A5:92:4D:77:0D:83:A5:54:94:3C
X509v3 Authority Key Identifier:
keyid:7E:52:FA:B6:D3:20:6E:B6:0A:31:DB:96:C7:2D:94:FC:24:2C:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flL6ttMgbrYKMduWxy2U_CQsCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc47e5-4a21-4f4f-be22-a5c93a7b9fa5/1/flL6ttMgbrYKMduWxy2U_CQsCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:15:f5:c4:0c:f5:ea:c5:dc:3d:a8:75:8b:91:b5:bc:80:46:
ad:b9:ce:8e:b4:63:85:3a:52:53:0d:fe:6c:87:e0:a0:3c:a8:
51:5b:0d:b5:f0:4d:88:88:2d:a0:ca:bf:0d:41:f3:80:90:07:
e6:c6:7f:15:92:9f:3e:8c:65:44:36:05:bf:38:fc:21:4f:fa:
b6:cb:fb:6b:d6:51:f2:89:f8:91:1e:9d:63:e3:c6:a0:26:91:
ce:82:0f:99:19:1f:15:db:af:37:02:6d:42:7f:4f:05:a3:5d:
c9:61:99:42:ae:92:5e:0c:7b:1a:40:b7:59:74:0b:85:f0:50:
d0:ad:94:4b:93:06:c3:0e:c9:54:26:8e:7d:db:51:37:44:78:
f9:83:96:1f:1c:2f:d8:86:bc:8d:7e:8e:a0:94:80:54:bf:6f:
81:d9:95:bb:bb:c9:86:86:be:80:71:8a:07:5a:d8:bd:ca:5e:
9f:a8:47:7e:18:ad:6b:40:99:1c:57:9a:b6:28:3b:47:2a:ec:
28:3c:d1:3c:04:9d:64:97:31:58:24:35:0c:b6:d4:ae:fe:53:
44:ab:18:86:03:d0:77:ab:e3:cc:1c:7c:97:ec:64:e8:99:86:
1f:07:a8:9f:ab:c5:80:a4:1e:b6:d1:46:53:0f:c4:31:dd:90:
2b:f6:5b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:19:40 2026 by rpki-client