Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: HQ/6CjHrkf0EQtiBP3+kc71tjQg9ir9WgFH0lIqlMHI=
Subject key identifier: 33:90:52:33:5B:50:C5:DD:D3:06:80:48:5F:53:6E:53:30:1A:17:1F
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 019FA071976A0755C2C4E2E9C94552CABA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 19CD
Signing time: Sun 26 Jul 2026 22:00:26 +0000
Manifest this update: Sun 26 Jul 2026 22:00:26 +0000
Manifest next update: Mon 27 Jul 2026 22:00:26 +0000
Files and hashes: 1: 9zx-jGX3RbLlRInzB3WpUMej34c.roa (hash: 8a+25rbKXY3XSXyYkMEL2laj6pvmya/GUv2Ei14rA+I=)
2: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: IgclTpbDL44fVSaaBz4e36Jc8Xw3Jdxjye9VhgCxSbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:97:6a:07:55:c2:c4:e2:e9:c9:45:52:ca:ba:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Jul 26 22:00:26 2026 GMT
Not After : Jul 27 22:00:26 2026 GMT
Subject: CN=339052335b50c5ddd30680485f536e53301a171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:19:91:6d:b1:30:b4:fc:9e:c4:64:3c:62:ee:
20:0c:ce:08:8b:21:33:09:94:8d:a8:58:69:d9:67:
97:ab:ef:d0:70:25:0a:8a:3b:a1:4f:4a:00:dd:bc:
4b:e0:ae:b0:48:df:5b:a4:53:76:d8:81:95:a4:ba:
ae:cf:2b:2f:71:da:44:77:bb:c5:aa:e3:b9:e7:2f:
a4:d3:23:bf:78:73:49:94:b2:4c:e2:69:21:0b:da:
74:29:26:85:3c:26:4e:52:dc:76:f8:1a:e5:1e:23:
d0:d3:c7:6c:12:92:a7:b9:45:3b:ad:1a:6a:c5:a9:
5a:15:e6:22:87:b2:c6:f6:f9:78:93:c2:85:6f:24:
d7:a1:4b:90:30:7e:e0:02:82:a8:33:a2:a7:f0:6c:
cb:7b:f5:bb:63:c5:ed:a1:90:2b:0a:1a:c4:1c:ec:
64:98:46:69:b3:16:3c:74:99:4f:be:95:88:6c:a2:
e0:c0:ba:56:e9:5d:e5:66:cf:2f:07:66:f9:87:56:
0b:19:50:15:66:39:04:d1:21:1c:94:ac:c4:bc:e3:
0b:fb:c6:ea:66:9f:0c:ed:cc:df:34:94:71:eb:1b:
59:3b:5c:1a:6d:b5:a9:d5:bb:c5:6d:df:f8:fc:ab:
28:27:49:7e:2c:a4:ab:e8:50:68:c0:21:ca:d8:50:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:90:52:33:5B:50:C5:DD:D3:06:80:48:5F:53:6E:53:30:1A:17:1F
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1b:aa:ba:c3:e3:99:90:a2:ee:fe:a1:10:da:c5:7b:aa:57:
4f:b3:99:09:d0:da:e9:af:ed:a2:b2:fd:15:b5:da:2d:52:92:
fa:9b:89:2b:e9:52:56:5c:7c:63:7e:7e:11:de:52:7f:e7:63:
06:06:ae:01:37:cc:0e:61:dd:5b:e8:0a:36:a3:aa:5c:b3:0c:
42:48:3a:a8:0e:7a:88:11:1d:52:8b:57:f9:19:32:12:fa:f3:
7f:a9:33:51:41:08:e2:19:ad:15:e1:8f:49:8c:c5:c3:fb:da:
5b:05:24:44:a3:b8:ce:1b:a0:14:e7:4d:04:81:ba:d5:58:0f:
01:c2:28:05:54:f9:95:e3:c5:27:51:01:9c:42:da:3b:04:57:
6d:0c:c2:58:d0:df:fa:cc:b4:24:4d:fa:dc:85:fb:e3:99:1e:
ad:55:37:5e:f5:e8:1b:5e:bd:90:14:44:e3:4c:5a:26:cb:44:
20:0f:49:47:51:56:e0:02:ac:8b:40:98:b3:62:36:7f:98:c2:
3f:f8:0c:ce:cb:6f:d1:f7:82:08:67:1f:59:a6:f3:89:74:31:
32:41:60:e9:07:37:1a:9e:b2:59:86:71:a5:f8:ce:54:3c:ee:
b8:0e:f3:2a:74:fb:19:81:e6:3e:bb:6e:12:85:28:0c:19:a6:
fd:23:75:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:04:43 2026 by rpki-client