Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
File: fEzLocBe-GYMTYmHl0qtA4vCtDA.mft (raw, json)
Hash identifier: lf44Yrys9esnwoxNZlMTwnQLCGfr34oOrUXyBbkX+nM=
Subject key identifier: F5:38:31:45:25:F4:33:7F:57:42:15:19:D6:FA:9B:3B:23:BE:4A:9E
Authority key identifier: 7C:4C:CB:A1:C0:5E:F8:66:0C:4D:89:87:97:4A:AD:03:8B:C2:B4:30
Certificate issuer: /CN=7c4ccba1c05ef8660c4d8987974aad038bc2b430
Certificate serial: 019F53A1BF180CD8303CBB3C47896BCCF3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
Manifest number: 20
Signing time: Sun 12 Jul 2026 00:02:16 +0000
Manifest this update: Sun 12 Jul 2026 00:02:16 +0000
Manifest next update: Mon 13 Jul 2026 00:02:16 +0000
Files and hashes: 1: fEzLocBe-GYMTYmHl0qtA4vCtDA.crl (hash: EmTSg5+N5b9N2eZZZL50ZaA340CnbWCPa7y+tAVOeAc=)
2: sXywAJPQehkX1g8ECCZJdITzLYQ.roa (hash: hR+8uJ6ekanBnzUMm4s8hR/ynV+UmDevvGRnAGbC8cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:53:a1:bf:18:0c:d8:30:3c:bb:3c:47:89:6b:cc:f3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ccba1c05ef8660c4d8987974aad038bc2b430
Validity
Not Before: Jul 12 00:02:16 2026 GMT
Not After : Jul 13 00:02:16 2026 GMT
Subject: CN=f538314525f4337f57421519d6fa9b3b23be4a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:c5:0a:80:4c:75:ab:9f:b4:0d:ab:e5:fa:
b8:df:60:b3:a0:86:a3:c6:c5:92:66:3a:14:5d:95:
df:75:c5:d2:e7:45:f9:c0:b9:f1:9e:57:3c:be:56:
8c:22:f6:a8:89:1d:b6:56:2d:0c:3b:33:23:ba:b8:
87:b4:4d:3e:f1:0e:ce:0a:23:99:0c:d1:6a:0e:6b:
1a:a9:fc:08:51:3c:3f:64:20:95:25:1e:09:28:34:
37:ed:88:82:f2:01:73:d7:ac:b4:d2:bb:37:9c:e5:
d2:86:67:09:06:f9:c6:63:dc:ab:6a:03:d6:6a:0f:
fe:cf:b2:d6:42:4d:19:8e:f3:4f:49:88:72:f4:c0:
b3:35:c7:87:5e:a4:d8:c8:6b:57:80:4c:4d:2a:ff:
47:39:13:99:6e:f7:0f:d0:63:61:a7:ba:30:4a:7a:
da:c2:58:1c:42:9e:b8:89:8c:20:45:d2:ad:6f:59:
ae:b4:84:0b:66:53:fd:81:3e:9e:68:a8:c7:db:5b:
d4:bc:6b:df:27:e3:b4:ed:6e:3d:1a:c2:f3:21:4d:
0e:d4:7b:94:1a:af:60:97:cb:0e:9d:5d:a6:d9:e3:
84:10:05:4d:14:85:5c:5a:b6:0e:95:8b:b9:f5:71:
ab:b5:ac:43:0f:82:93:89:a0:08:89:ec:fb:9e:40:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:38:31:45:25:F4:33:7F:57:42:15:19:D6:FA:9B:3B:23:BE:4A:9E
X509v3 Authority Key Identifier:
keyid:7C:4C:CB:A1:C0:5E:F8:66:0C:4D:89:87:97:4A:AD:03:8B:C2:B4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEzLocBe-GYMTYmHl0qtA4vCtDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/fEzLocBe-GYMTYmHl0qtA4vCtDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:42:d1:8e:16:79:d6:d9:0f:3d:26:42:16:08:2b:e5:b0:99:
22:f9:87:e4:ab:72:c7:41:cb:ad:0a:e8:6a:d7:d2:a0:34:6b:
24:07:99:e4:a9:85:58:15:01:0a:93:cd:38:bb:a5:53:6a:7e:
aa:0a:15:50:33:e3:18:83:e7:61:3c:cd:1c:94:63:9c:88:03:
0d:4e:20:1e:5e:16:1b:a7:64:75:85:12:2c:e9:7b:e7:f3:fe:
ef:f9:ee:4b:cf:50:a4:5a:d4:25:72:c1:13:71:fa:f9:6b:50:
71:36:1b:38:95:c7:8a:85:f6:b2:4c:91:94:75:81:0c:81:ca:
b8:d7:a5:c6:35:58:95:85:39:cd:d9:57:3a:f9:5b:16:df:37:
ae:27:55:65:e3:40:7c:96:f9:2c:5f:b5:b2:53:76:3c:9c:ec:
1f:ac:be:91:b1:cb:b7:8e:43:46:be:e8:e6:6e:6d:ad:14:9c:
b0:f7:e3:c7:52:76:61:8c:3b:2a:27:df:4e:91:23:4c:29:fa:
f8:84:97:70:6c:9a:7a:b2:b8:28:f3:1c:76:27:26:6b:d5:ba:
32:78:3e:31:84:01:d0:dc:0c:b9:3f:e6:fa:8e:fc:74:65:f7:
da:7d:c1:14:5a:3c:44:bb:02:03:d8:c7:d3:f4:93:bb:c8:d6:
68:8a:3d:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9Tob8YDNgwPLs8R4lrzPPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGNjYmExYzA1ZWY4NjYwYzRkODk4Nzk3NGFhZDAzOGJj
MmI0MzAwHhcNMjYwNzEyMDAwMjE2WhcNMjYwNzEzMDAwMjE2WjAzMTEwLwYDVQQD
EyhmNTM4MzE0NTI1ZjQzMzdmNTc0MjE1MTlkNmZhOWIzYjIzYmU0YTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeHFCoBMdauftA2r5fq432CzoIaj
xsWSZjoUXZXfdcXS50X5wLnxnlc8vlaMIvaoiR22Vi0MOzMjuriHtE0+8Q7OCiOZ
DNFqDmsaqfwIUTw/ZCCVJR4JKDQ37YiC8gFz16y00rs3nOXShmcJBvnGY9yragPW
ag/+z7LWQk0ZjvNPSYhy9MCzNceHXqTYyGtXgExNKv9HOROZbvcP0GNhp7owSnra
wlgcQp64iYwgRdKtb1mutIQLZlP9gT6eaKjH21vUvGvfJ+O07W49GsLzIU0O1HuU
Gq9gl8sOnV2m2eOEEAVNFIVcWrYOlYu59XGrtaxDD4KTiaAIiez7nkCnDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPU4MUUl9DN/V0IVGdb6mzsjvkqeMB8GA1UdIwQY
MBaAFHxMy6HAXvhmDE2Jh5dKrQOLwrQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkV6TG9jQmUtR1lNVFltSGwwcXRBNHZDdERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80OTg4MWUtYjBhOS00ZDVmLWIwNzIt
YTUzNzcyYjAxY2IyLzEvZkV6TG9jQmUtR1lNVFltSGwwcXRBNHZDdERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80OTg4MWUtYjBhOS00ZDVmLWIwNzItYTUzNzcyYjAxY2Iy
LzEvZkV6TG9jQmUtR1lNVFltSGwwcXRBNHZDdERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkLRjhZ5
1tkPPSZCFggr5bCZIvmH5Ktyx0HLrQroatfSoDRrJAeZ5KmFWBUBCpPNOLulU2p+
qgoVUDPjGIPnYTzNHJRjnIgDDU4gHl4WG6dkdYUSLOl75/P+7/nuS89QpFrUJXLB
E3H6+WtQcTYbOJXHioX2skyRlHWBDIHKuNelxjVYlYU5zdlXOvlbFt83ridVZeNA
fJb5LF+1slN2PJzsH6y+kbHLt45DRr7o5m5trRScsPfjx1J2YYw7KiffTpEjTCn6
+ISXcGyaerK4KPMcdicma9W6Mng+MYQB0NwMuT/m+o78dGX32n3BFFo8RLsCA9jH
0/STu8jWaIo9DA==
-----END CERTIFICATE-----
Generated at Sun Jul 12 02:25:13 2026 by rpki-client