Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: 94MFV4MCi59O0k1ETEVJ4Xb9nQnnX9cKEHJqKosT3hw=
Subject key identifier: 00:9F:DE:2A:CA:E2:7B:E9:85:34:73:06:01:0D:D4:A5:94:A0:00:79
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 019E30E08A343320C940CC677624EDD98E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 0629
Signing time: Sat 16 May 2026 13:01:22 +0000
Manifest this update: Sat 16 May 2026 13:01:22 +0000
Manifest next update: Sun 17 May 2026 13:01:22 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: egTxB9HVkuA9V1X16KBuQx0ASQpvVOPEOCk2MDVGut4=)
2: v5j62T31CGbyesihQ2ZxZfpouT0.roa (hash: /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:8a:34:33:20:c9:40:cc:67:76:24:ed:d9:8e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: May 16 13:01:22 2026 GMT
Not After : May 17 13:01:22 2026 GMT
Subject: CN=009fde2acae27be985347306010dd4a594a00079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:49:1e:37:2d:a5:bb:ca:ae:8e:31:c6:a5:26:
f0:5c:9b:16:97:61:f2:75:4b:f7:f8:7b:7b:fd:66:
fe:6f:a0:9d:06:f1:89:92:e0:ed:f6:ff:f9:c1:30:
89:87:1c:59:6d:15:d9:06:33:66:3c:f2:f6:83:17:
a3:f8:cf:02:01:16:2a:d6:1a:11:27:4b:07:4a:c8:
ce:ef:f1:99:d6:2b:8a:1e:32:82:57:f1:a7:7d:5e:
19:f5:81:7b:f0:04:f5:d0:0c:c0:58:f0:39:0f:37:
ac:15:3e:8f:39:79:59:c2:ef:3c:2e:5a:b7:da:02:
50:fb:39:3d:f8:36:76:73:3b:fb:2e:7d:20:2c:6d:
6e:dc:c6:28:0e:75:28:03:63:f1:e3:b7:05:f9:20:
47:f4:9e:88:bb:66:92:02:ba:97:f8:1c:39:eb:90:
52:1c:27:f3:4a:c8:26:d6:31:fd:05:86:15:ee:bb:
17:9a:a1:ed:1f:7c:8a:61:26:11:59:58:e6:e3:81:
84:d8:eb:36:8b:d4:40:87:34:b8:76:e4:4c:89:8f:
6f:8f:ff:76:65:08:6b:d5:1d:92:03:3b:0c:2c:64:
8f:3b:41:dd:df:d5:b0:b3:fd:d6:7f:42:65:88:9f:
f8:21:61:29:b6:9d:db:5c:7f:35:16:1b:44:d9:5e:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9F:DE:2A:CA:E2:7B:E9:85:34:73:06:01:0D:D4:A5:94:A0:00:79
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9e:1d:b7:c4:27:29:5f:c5:e1:60:0f:79:6a:4e:21:46:0a:
47:57:28:bd:bd:2e:93:1e:46:1e:66:66:02:73:5a:76:99:6c:
2d:9b:8f:a8:5f:12:46:98:b3:60:cf:1c:fa:41:b5:1a:1b:27:
35:6a:42:dd:28:ae:60:0b:f1:41:16:e1:7b:79:0d:59:3d:ee:
2a:e0:c8:92:90:88:12:56:eb:bd:32:8b:2f:f9:58:92:2c:41:
88:9c:c7:b1:ac:5f:2b:40:11:8c:6c:44:a5:a5:fe:0a:76:ca:
9a:31:28:59:c3:d8:7f:6d:6a:01:5b:45:3f:8c:77:8b:56:0e:
02:21:9f:dd:26:cb:40:af:88:85:77:c0:f0:22:8d:23:ed:cb:
e3:90:b3:39:d4:a9:ac:dc:34:dd:0c:f8:0f:40:e6:50:9e:1d:
de:f8:0d:64:fe:d9:32:2d:78:1c:8f:e7:52:62:e6:17:ca:d6:
cd:62:5b:0b:17:ae:18:ac:29:d3:34:b0:79:4a:6f:45:e0:89:
77:be:a3:7e:4e:a8:a7:d8:99:af:e3:66:2e:4f:61:18:02:ae:
99:cf:d0:1d:3d:57:92:db:84:b1:30:0a:e0:53:5d:6f:65:f0:
d2:3b:f0:28:5e:04:40:7e:af:48:61:45:b6:a6:ab:fe:26:49:
7e:b9:07:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4Io0MyDJQMxndiTt2Y5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMDdkYmRjNzFmMTJiZGE3YmI3ZmE4MGNhZGMyZWQ5YTJm
ZWVmZWIwHhcNMjYwNTE2MTMwMTIyWhcNMjYwNTE3MTMwMTIyWjAzMTEwLwYDVQQD
EygwMDlmZGUyYWNhZTI3YmU5ODUzNDczMDYwMTBkZDRhNTk0YTAwMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kkeNy2lu8qujjHGpSbwXJsWl2Hy
dUv3+Ht7/Wb+b6CdBvGJkuDt9v/5wTCJhxxZbRXZBjNmPPL2gxej+M8CARYq1hoR
J0sHSsjO7/GZ1iuKHjKCV/GnfV4Z9YF78AT10AzAWPA5DzesFT6POXlZwu88Llq3
2gJQ+zk9+DZ2czv7Ln0gLG1u3MYoDnUoA2Px47cF+SBH9J6Iu2aSArqX+Bw565BS
HCfzSsgm1jH9BYYV7rsXmqHtH3yKYSYRWVjm44GE2Os2i9RAhzS4duRMiY9vj/92
ZQhr1R2SAzsMLGSPO0Hd39Wws/3Wf0JliJ/4IWEptp3bXH81FhtE2V5TswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACf3irK4nvphTRzBgEN1KWUoAB5MB8GA1UdIwQY
MBaAFHwH29xx8Svae7f6gMrcLtmi/u/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUt
ODk1YjBkM2M0YjQ1LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUtODk1YjBkM2M0YjQ1
LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK54dt8Qn
KV/F4WAPeWpOIUYKR1covb0ukx5GHmZmAnNadplsLZuPqF8SRpizYM8c+kG1Ghsn
NWpC3SiuYAvxQRbhe3kNWT3uKuDIkpCIElbrvTKLL/lYkixBiJzHsaxfK0ARjGxE
paX+CnbKmjEoWcPYf21qAVtFP4x3i1YOAiGf3SbLQK+IhXfA8CKNI+3L45CzOdSp
rNw03Qz4D0DmUJ4d3vgNZP7ZMi14HI/nUmLmF8rWzWJbCxeuGKwp0zSweUpvReCJ
d76jfk6op9iZr+NmLk9hGAKumc/QHT1XktuEsTAK4FNdb2Xw0jvwKF4EQH6vSGFF
tqar/iZJfrkHwA==
-----END CERTIFICATE-----
Generated at Sat May 16 21:13:36 2026 by rpki-client