Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
File: rFxTEhWE19himH8m_3vtWuE4FqE.mft (raw, json)
Hash identifier: IxPyfYzYSbbECKYg36c97D58nyTUX7UKY0zP3thanZE=
Subject key identifier: 02:54:AF:DF:59:89:02:8F:2C:C3:B7:EC:E4:D9:77:B7:FC:12:06:40
Authority key identifier: AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
Certificate issuer: /CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Certificate serial: 019F9580710B4F9376A594DCFD3AFB1CAFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
Manifest number: 038E
Signing time: Fri 24 Jul 2026 19:00:50 +0000
Manifest this update: Fri 24 Jul 2026 19:00:50 +0000
Manifest next update: Sat 25 Jul 2026 19:00:50 +0000
Files and hashes: 1: Ln3OJ6zDWx7Blw5HCll4po4CH-M.roa (hash: BZd7Kwg87H/bospWBtm/c29GcUHDV3xSrqHEL2bm8Hg=)
2: rFxTEhWE19himH8m_3vtWuE4FqE.crl (hash: OH3VLcO7Ak5CmkJXudVs8MM3UPPeaPQX4hfs1ybFIaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:71:0b:4f:93:76:a5:94:dc:fd:3a:fb:1c:af:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5c53121584d7d862987f26ff7bed5ae13816a1
Validity
Not Before: Jul 24 19:00:50 2026 GMT
Not After : Jul 25 19:00:50 2026 GMT
Subject: CN=0254afdf5989028f2cc3b7ece4d977b7fc120640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:12:f3:82:7c:07:a3:54:f7:d6:1d:98:3b:
ac:dd:c3:ad:ce:e0:2b:a0:1f:12:cc:f9:b8:2a:ac:
0c:67:17:a7:15:29:2d:5c:6d:5a:c4:b5:37:45:07:
07:91:f0:33:60:23:ff:e8:0a:89:5b:b6:10:70:b6:
c0:df:3e:7f:52:ac:ae:af:43:87:c5:47:48:1e:d4:
66:17:15:49:be:84:51:ea:ed:5e:c6:c0:7a:71:a8:
e4:85:31:7f:d9:3c:9f:a4:52:11:6d:d6:d1:3e:18:
45:86:4e:76:6f:c6:54:eb:b2:5e:55:48:ca:5b:e7:
95:61:0e:f9:6e:53:12:52:23:4b:20:d8:b1:da:22:
ea:96:8e:3f:51:82:2d:0a:d2:f9:ec:3b:91:18:82:
15:06:6d:d9:bf:c4:08:4f:5b:d8:8e:42:86:6a:52:
5e:c5:56:75:80:55:e2:39:93:66:e6:57:45:3d:fc:
77:4a:cd:48:93:53:7e:f6:e1:d0:fb:b9:57:57:91:
80:03:f3:da:3c:eb:1f:e6:13:b6:c5:2c:8d:d6:f5:
aa:26:70:6a:6b:00:90:06:58:7a:0f:d0:c1:88:6c:
87:a4:c0:bd:0f:9c:99:e3:33:38:a2:bb:35:70:87:
70:11:d2:18:ea:d3:92:c4:db:09:08:6f:73:f6:8e:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:54:AF:DF:59:89:02:8F:2C:C3:B7:EC:E4:D9:77:B7:FC:12:06:40
X509v3 Authority Key Identifier:
keyid:AC:5C:53:12:15:84:D7:D8:62:98:7F:26:FF:7B:ED:5A:E1:38:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFxTEhWE19himH8m_3vtWuE4FqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/107fdd-d2a5-450c-b031-25bf25018489/1/rFxTEhWE19himH8m_3vtWuE4FqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:82:e6:db:f8:1d:1f:2d:c8:8c:13:ae:d9:b6:5e:cc:74:10:
96:e5:a3:8e:ed:0b:e3:73:26:ab:ea:59:81:72:50:15:c8:4a:
c2:f8:ce:cc:1d:f8:d8:79:cf:ee:48:c5:a1:24:08:3f:63:fd:
28:30:f1:66:ef:8d:db:63:93:2e:83:be:cf:f8:65:5c:b8:fd:
a5:53:d0:c6:70:3e:da:10:c4:bc:13:5d:2c:4a:dd:95:6f:ee:
9a:4b:fb:93:13:df:7c:20:e9:4b:5d:7f:89:1b:97:2f:60:17:
8c:1d:22:57:da:aa:a4:64:0a:55:fe:9a:29:e5:d4:ed:67:f7:
d7:40:46:b1:3e:e8:27:fe:14:57:6f:4a:ab:7c:19:a9:70:73:
61:e9:31:d4:4c:64:ea:57:97:8d:69:2f:52:c0:14:4c:b5:4e:
c5:da:d2:75:19:38:a6:74:1f:86:38:2f:99:21:6f:14:d7:d8:
42:7f:b2:cb:e3:fc:20:1c:e8:e0:ce:e0:ed:16:66:12:1a:dd:
c0:cb:4e:91:aa:65:35:e0:41:bb:49:e6:f5:b1:9a:63:be:0d:
ae:d4:38:4e:33:ab:6f:e1:1d:8c:b9:ed:c3:cc:d9:e2:e2:bb:
21:7d:53:83:65:d2:8d:d1:09:18:4d:31:1e:42:64:3c:b8:25:
2f:fc:00:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:41 2026 by rpki-client