Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: m896ApYpCKs0phsO+qMBhp+IvDgdyC1hlO591IEPb2Y=
Subject key identifier: 43:A3:9F:B8:02:31:A1:4C:1A:B6:4D:1B:51:4D:1E:0C:C5:6A:95:F9
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 019F845661B5EC2B3981B61970B913DF7DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 0900
Signing time: Tue 21 Jul 2026 11:01:21 +0000
Manifest this update: Tue 21 Jul 2026 11:01:21 +0000
Manifest next update: Wed 22 Jul 2026 11:01:21 +0000
Files and hashes: 1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: NNgs6yiRBzesBSKV3Pob3tlJJwcxss8U9JH0PzH3seA=)
2: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (hash: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:56:61:b5:ec:2b:39:81:b6:19:70:b9:13:df:7d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Jul 21 11:01:21 2026 GMT
Not After : Jul 22 11:01:21 2026 GMT
Subject: CN=43a39fb80231a14c1ab64d1b514d1e0cc56a95f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:14:b1:45:7b:bc:5f:1b:0d:e8:f3:50:8d:
6f:4c:e2:af:fa:68:76:f4:1a:5b:be:46:49:a3:67:
10:8e:2b:04:46:83:50:ea:26:5d:0b:b9:95:15:da:
86:ad:dd:b5:7c:a9:1e:da:da:2d:f6:0c:0d:24:9c:
0b:94:f3:04:c7:42:f8:f0:aa:e7:09:6b:b9:aa:db:
51:8e:2a:00:61:d4:a8:28:6a:c9:42:b5:41:07:07:
e9:7d:f6:ce:b9:13:c0:66:32:31:7d:14:b5:2d:2f:
ea:4e:7f:1e:63:8e:f1:58:53:11:e9:36:c2:b9:41:
1e:51:fb:f7:cf:5b:3b:5c:c0:af:b6:f7:87:ff:bf:
7e:a8:04:68:fd:20:17:c5:2b:23:d3:0f:53:c5:ec:
e3:3f:d1:68:c0:31:bd:f8:a3:ab:2c:2b:ae:49:6c:
8f:4b:93:ab:ab:46:e0:db:b1:eb:d3:09:21:c0:9c:
89:9d:17:88:67:87:4d:b9:89:a0:c4:ad:c7:41:e7:
ef:75:59:cd:ca:f5:06:80:f9:c3:b4:61:a7:f1:9c:
01:2e:b4:3a:9e:85:1d:f7:57:03:ef:ad:ad:99:51:
ea:99:c7:a2:3f:af:b1:28:79:00:f1:40:26:02:99:
56:b2:52:02:1c:b4:14:05:cd:0f:47:a1:fc:3c:16:
d7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A3:9F:B8:02:31:A1:4C:1A:B6:4D:1B:51:4D:1E:0C:C5:6A:95:F9
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:54:49:d8:0d:46:68:53:59:e5:ee:b7:00:07:c2:a8:30:d9:
1c:3e:87:0f:77:42:b4:be:d5:cc:9b:53:a5:b4:09:a0:5b:6d:
b8:7d:ca:d2:bb:c2:f8:02:46:de:dd:f7:51:f9:0d:9d:7b:50:
89:db:de:fa:6e:8c:b3:c5:fa:13:6a:3d:07:74:77:0f:74:2e:
c6:cd:f5:c3:33:eb:a7:a9:f0:ba:c6:d4:8c:65:88:ea:5a:8c:
b3:2f:d6:21:fb:be:d1:08:40:db:c6:9f:85:e3:ea:a2:95:c7:
a8:31:37:56:56:6c:70:31:d8:54:98:46:23:aa:e0:19:87:1f:
c6:82:ac:27:eb:94:bc:e4:0e:53:e2:32:e1:63:44:d0:75:11:
ce:29:f3:9e:d6:2f:d0:66:eb:76:50:92:38:83:e4:cc:64:5b:
30:4f:41:d6:8a:16:71:be:0a:93:0d:29:ba:c4:26:9e:30:a9:
e6:a1:68:22:3a:14:c4:a2:e0:6f:87:f9:77:71:43:be:08:fb:
36:ba:24:35:dd:6b:f8:c6:d8:57:f6:0a:34:10:15:b2:bd:9b:
c8:bc:cb:74:42:9d:63:ce:17:f4:bb:73:f8:a3:57:6d:df:41:
52:6c:4b:86:1d:75:f8:37:a3:d0:24:60:47:7d:75:7f:20:af:
e5:4d:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:41:15 2026 by rpki-client