Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File: fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier: SoMpLl7kCczP2GA/NEFp+eQ2LQCTlE3kInIMdw8RmrQ=
Subject key identifier: 94:14:30:3F:08:44:07:33:CE:F9:54:7A:65:30:F1:71:AB:08:19:07
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer: /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial: 019F85313927F0CD8176D9BF4230081D46B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 15:00:23 +0000
Manifest this update: Tue 21 Jul 2026 15:00:23 +0000
Manifest next update: Wed 22 Jul 2026 15:00:23 +0000
Files and hashes: 1: 5LuGzHTGNXh7ooCOYMthjUDSS6E.roa (hash: ueacTOAGFcsAA9jabTl3i8ESOHojLkJGvrFKPoo+SiA=)
2: Up6FPG2EmlxGGm-IJpPlY2eyxIw.roa (hash: vllY3zX6/fq+SiGXdC5fpCJcuaKw1ngd9//Sa26iQZc=)
3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: wxC43eDNSmqvPOUADTaEkmXhgasQ24wWkwfPo7Au5+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:39:27:f0:cd:81:76:d9:bf:42:30:08:1d:46:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Validity
Not Before: Jul 21 15:00:23 2026 GMT
Not After : Jul 22 15:00:23 2026 GMT
Subject: CN=9414303f08440733cef9547a6530f171ab081907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e7:ae:02:c5:fe:26:32:3c:cf:66:64:8b:ba:
95:8a:46:8d:93:28:6e:4e:cb:0a:c3:ca:44:1c:b9:
c6:28:c1:48:ac:06:02:ed:32:5d:92:a1:cd:25:c0:
7a:2a:20:65:35:00:8e:cd:c0:1d:9b:61:7a:ac:43:
59:f7:15:07:8f:af:88:01:dd:60:e2:71:48:ee:e7:
e1:e2:81:a7:9e:50:fc:dc:f8:b8:d7:00:e6:9a:1c:
b9:1a:d4:25:1d:2b:a7:a2:0c:c1:ca:e6:00:80:dd:
ac:c1:2e:dc:c9:fd:9b:ec:88:21:21:0d:69:c0:a5:
74:6f:c3:50:2e:dc:2d:79:34:09:0b:a7:e0:fc:0e:
1f:b7:b8:d9:9b:50:61:b9:f6:0b:30:d5:61:10:13:
1b:dd:62:32:e4:1f:f9:e7:06:c6:58:57:76:31:6a:
fa:a9:43:97:f8:b3:f7:2b:9f:4a:fb:a6:ff:90:d6:
da:dd:28:49:03:19:3c:32:02:4f:6d:8a:fb:60:b0:
5b:ef:c7:e9:e3:03:ed:73:7c:61:19:2c:34:1f:da:
b3:3f:52:3e:bf:b3:e0:c5:ef:17:20:74:05:c3:4f:
77:57:8f:d0:aa:23:fa:ea:20:ca:5c:a5:f5:d6:63:
ce:73:48:6b:5f:bb:4e:18:2d:24:54:13:ce:5d:ae:
b0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:14:30:3F:08:44:07:33:CE:F9:54:7A:65:30:F1:71:AB:08:19:07
X509v3 Authority Key Identifier:
keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:97:06:be:20:7c:9b:3b:99:51:e7:68:4b:f8:1d:2e:71:8e:
39:e7:3e:9a:9d:6e:17:9b:50:b8:7a:e0:74:a6:1c:b7:d3:84:
33:98:d4:9e:13:3e:d1:fa:14:24:9b:3e:8d:af:7e:17:71:62:
88:3e:b1:0e:3c:a6:a6:e8:7d:cf:02:04:4e:d6:c4:0d:96:60:
8d:c3:d2:5b:89:24:41:95:de:ed:79:dd:33:72:eb:24:df:50:
e5:2c:2f:d4:4a:77:8f:e5:e7:61:73:fa:98:15:32:08:b9:75:
02:4c:10:4a:86:db:b6:63:2c:b8:f4:ef:3d:27:36:a6:b7:e2:
95:00:e8:4c:21:e0:4a:56:7b:3c:58:2e:77:0f:ce:0c:31:56:
9f:12:8f:04:c0:1a:89:73:53:76:9f:6c:5c:15:6f:f9:4c:64:
3c:7b:6e:e1:8c:c2:38:b3:63:6d:78:ee:47:e0:3b:b1:5b:37:
57:24:81:a9:03:47:33:25:0a:66:45:44:d6:49:9b:0f:05:f2:
46:c8:7f:f4:63:3a:cf:01:12:6e:2f:62:8d:5f:60:f3:87:37:
55:94:1c:be:76:8f:e6:a3:0e:09:26:98:9d:74:6f:49:01:ae:
7c:d2:c4:02:bf:05:2f:94:39:b8:67:6e:dd:0c:9d:9c:72:9d:
6d:57:5c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:07:34 2026 by rpki-client