Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json)
Hash identifier: En9/lcapO+mmonm5Bvs7GE8skvwMWrUZyYeZl3yebNE=
Subject key identifier: FF:6E:79:44:23:1A:45:48:1F:8B:26:D7:5D:F5:24:0D:FD:24:9E:8E
Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Certificate serial: 019F6494CB8BA8878BE4C1FCF7588A48FCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
Manifest number: 0BBC
Signing time: Wed 15 Jul 2026 07:01:40 +0000
Manifest this update: Wed 15 Jul 2026 07:01:40 +0000
Manifest next update: Thu 16 Jul 2026 07:01:40 +0000
Files and hashes: 1: E3jz9qmqTjg_zIJIvHv94CK6zsY.roa (hash: 0Lk+ZfoyEeeu5e++mGbGnXSf6tV5iYmorQKGtAl1EXE=)
2: GIL9uqecVqs2J_KF2ar2nbKLRYY.roa (hash: R/5DgAUg2cp6Uj0SCyngsXoMIJaoy6aqdVqAoNaJ2f8=)
3: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: NFFlfw+bSc/tFBM0PtZaVrtBEA2pgztuOpxqV6p4HRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:94:cb:8b:a8:87:8b:e4:c1:fc:f7:58:8a:48:fc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799
Validity
Not Before: Jul 15 07:01:40 2026 GMT
Not After : Jul 16 07:01:40 2026 GMT
Subject: CN=ff6e7944231a45481f8b26d75df5240dfd249e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:c4:a9:d8:94:f4:1d:e5:cc:48:1b:4d:cd:
e1:2f:1a:df:e3:d4:0e:fe:36:78:1b:b7:6c:0e:8d:
ab:f7:5f:2e:dc:60:59:5e:da:55:91:93:65:74:39:
1b:21:c8:1d:41:5c:44:43:16:ae:43:6e:22:f5:b1:
5d:a6:24:4c:3b:d9:ad:12:da:e5:bc:42:55:d2:08:
c7:f0:7d:e7:f8:d2:78:e6:da:5f:84:cf:00:0c:e0:
44:1b:88:52:50:61:b4:c2:f7:81:0e:43:a4:77:94:
67:e3:dd:97:76:29:f3:4c:8d:49:8f:c0:b6:20:86:
8c:d0:87:85:06:64:0d:c7:f4:f7:a3:fb:17:56:07:
6d:b5:a2:59:d8:33:03:78:b7:5d:f6:44:f8:9d:68:
35:35:70:b9:3f:e6:8c:65:7b:b7:56:c4:2d:3e:71:
24:2f:60:47:d1:02:ab:94:1c:52:51:6c:d1:f2:9d:
4a:01:da:5f:ef:48:7c:30:f7:05:ce:2d:dd:96:a2:
15:10:e8:81:62:a5:fe:c9:a7:0c:5d:86:e8:f4:90:
d9:9e:a3:2f:25:1e:e7:73:42:20:4e:08:07:49:17:
bb:3c:fa:e7:d0:24:7a:28:1f:95:6e:f7:0f:c0:53:
c3:34:14:43:17:ae:a3:f5:1b:91:46:2a:12:10:1a:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6E:79:44:23:1A:45:48:1F:8B:26:D7:5D:F5:24:0D:FD:24:9E:8E
X509v3 Authority Key Identifier:
keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a4:fb:e4:d4:bf:0e:15:5d:bf:de:1c:e7:ec:94:fc:c4:6c:
c5:f1:5d:c3:08:e9:8c:32:43:7a:71:33:01:d1:5e:0d:aa:d2:
da:2b:a5:44:f6:5d:5b:9c:c4:03:17:de:85:19:72:95:c0:41:
d6:45:6c:44:75:2d:e6:fd:aa:8a:a5:c6:0c:a6:4b:ed:6d:e0:
26:d4:ee:29:04:ca:17:c0:4a:d6:27:37:7c:47:df:40:31:71:
47:09:e2:a8:f8:75:1d:8a:67:7c:ab:04:bd:fb:2d:66:1d:e2:
48:cc:a6:a2:ef:ca:a0:0a:a1:04:6b:ed:5e:4c:00:c3:e0:16:
bc:b8:ea:37:15:53:c6:47:93:8d:e5:90:60:92:72:b7:b8:d3:
89:95:c4:fa:4e:fd:ae:ef:25:8d:92:b5:37:d9:64:b9:42:f7:
67:e9:31:23:a0:e9:1c:90:e7:03:7b:c2:65:ae:8c:7e:2d:dd:
8a:45:39:49:df:96:95:fb:41:1b:1b:47:dc:2f:f0:40:fe:e3:
04:94:68:3c:69:ed:50:62:16:65:5e:41:cb:a2:9b:5a:b3:11:
1f:f8:90:2f:b9:dd:10:11:3a:d7:fb:ec:7e:11:66:60:a4:de:
48:30:b8:f2:9c:1f:0e:76:ef:ed:aa:93:c6:17:29:f8:8f:8d:
13:0b:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 14:31:10 2026 by rpki-client