Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier: hCnKNvyFOaKxXDRZijsLm5e/492UsqCs33nusRYs/N8=
Subject key identifier: FB:50:42:42:2B:7C:8E:F9:BD:EC:6B:42:27:B1:6B:2E:1D:C2:BE:01
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial: 019FA3E1071DB3838719A256576356739050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number: 1962
Signing time: Mon 27 Jul 2026 14:01:01 +0000
Manifest this update: Mon 27 Jul 2026 14:01:01 +0000
Manifest next update: Tue 28 Jul 2026 14:01:01 +0000
Files and hashes: 1: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: OmeCAeblxa6UB5LYtduEMh7bhXOgYL3YuX5OUyz8M44=)
2: uuyf9SL1IzQsxC4GwsHv2Aqvi6I.roa (hash: bWBF8Lzkc1fXhVOcL+v1lM3xBjFclLxIjyc/HWhj0fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e1:07:1d:b3:83:87:19:a2:56:57:63:56:73:90:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Validity
Not Before: Jul 27 14:01:01 2026 GMT
Not After : Jul 28 14:01:01 2026 GMT
Subject: CN=fb5042422b7c8ef9bdec6b4227b16b2e1dc2be01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:47:65:d6:42:14:47:ad:b4:ad:9c:fe:67:
71:c4:f9:17:30:55:00:ab:a6:88:21:3c:6a:60:4d:
e3:0b:ea:58:97:70:56:9b:fe:49:6f:bf:8c:8e:9a:
85:97:3b:ca:74:93:1a:2e:94:84:c4:9c:24:e5:7b:
8d:fd:0b:0b:e8:20:d7:b8:8a:ea:82:65:7c:76:52:
93:66:46:3a:06:9a:be:7b:2c:17:54:b3:3b:e5:ad:
1e:41:39:fe:29:df:0a:ba:d3:a4:27:d2:5f:5b:64:
10:a2:62:d5:9f:6f:b0:ad:36:32:15:b8:1d:b2:5b:
df:28:99:a8:a2:84:ce:45:ea:51:04:eb:34:7f:1d:
0b:81:9a:89:58:90:73:b1:64:36:df:a1:4e:a2:9a:
ec:3d:75:31:e2:36:e8:f4:88:a8:28:43:1c:8c:08:
ae:7c:32:91:46:c7:35:5f:6a:39:57:43:33:0a:84:
42:a5:83:fa:35:4d:ef:26:83:21:fd:a5:3a:d5:da:
03:37:f4:40:2c:bf:7a:eb:5f:fc:a9:5b:0b:df:7d:
32:05:84:04:6c:25:fe:46:f2:f1:a5:a5:fe:2a:c5:
c8:4c:45:6e:aa:35:72:33:ce:8f:82:42:6c:cc:ba:
de:cd:e1:37:bc:79:1b:61:71:08:98:82:f2:cb:fe:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:50:42:42:2B:7C:8E:F9:BD:EC:6B:42:27:B1:6B:2E:1D:C2:BE:01
X509v3 Authority Key Identifier:
keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d8:7a:7d:6a:78:04:a8:e1:2f:1b:9c:9b:0b:4a:c5:24:07:
51:c1:2b:3b:fe:2c:62:fd:60:0d:b8:4c:65:1e:93:4a:29:e5:
4d:1b:53:d6:b9:42:9d:6e:45:c7:f7:e1:7b:9d:98:51:7d:7c:
32:db:0e:fa:7a:56:a7:09:2c:95:64:ea:51:33:a0:74:5c:8e:
12:6e:3d:26:90:2c:5c:50:18:29:61:db:67:2d:c1:5a:96:c3:
54:cd:56:1c:e8:74:4c:7c:62:e8:de:04:0a:31:cf:e0:f1:a8:
86:58:33:f7:32:13:75:ec:99:81:2f:e1:6f:95:69:9c:f8:d5:
eb:26:39:cf:11:61:1a:f8:51:a9:19:3b:76:c8:1d:38:9c:7b:
92:b4:12:41:cc:d1:9d:4f:be:a8:a7:7b:e4:b9:3f:69:08:49:
b3:95:7e:ac:5b:03:a2:a4:29:71:67:7a:02:67:8a:9d:75:3a:
06:12:ed:15:9d:73:3d:4c:c5:b5:87:8a:98:34:d1:a7:4c:62:
02:36:8b:d6:73:45:b2:26:3e:2c:69:22:c5:d3:da:d7:5e:ae:
29:6f:ab:b5:c4:dc:1a:60:e3:d7:87:88:2d:ea:f0:71:03:a1:
a5:e5:37:24:db:b4:63:87:05:b4:a4:10:6c:67:41:e1:97:96:
4b:d9:4f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:49:38 2026 by rpki-client