Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
File: FpedN9oBar0TJ5JwulXWs8KWBXg.mft (raw, json)
Hash identifier: n/+1cvTsjqFbRmjuKUDLrIl+0BGe32TRcAjEblxMvkg=
Subject key identifier: C9:14:A6:A8:A3:B0:F5:4E:6E:85:32:D5:B7:BC:3C:43:72:F9:AC:4B
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 019FA18493E1BF8078E2B383C55B510C4C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
Manifest number: 18AC
Signing time: Mon 27 Jul 2026 03:00:48 +0000
Manifest this update: Mon 27 Jul 2026 03:00:48 +0000
Manifest next update: Tue 28 Jul 2026 03:00:48 +0000
Files and hashes: 1: BnkcR-zuhslzC_C9CeL-f_x72I4.roa (hash: uJSNgD6syL3St9C1qBsFditKy3aI8wT2H1jOG8X0Y04=)
2: CPLUynwu2NtFcucVWVxqTphoPjM.roa (hash: V+jAkOUO5qvzn78/cOQ6/1OzIhTFNyket1nMyJB8WXI=)
3: FpedN9oBar0TJ5JwulXWs8KWBXg.crl (hash: L7EWkUY/S4v8PAYf8lpB340GEJx9OLSi9UtFM73y9Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:93:e1:bf:80:78:e2:b3:83:c5:5b:51:0c:4c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Jul 27 03:00:48 2026 GMT
Not After : Jul 28 03:00:48 2026 GMT
Subject: CN=c914a6a8a3b0f54e6e8532d5b7bc3c4372f9ac4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:85:42:50:63:b2:b7:a7:3b:9f:29:e1:e5:
25:98:6e:80:8c:e1:bc:9e:c3:de:75:f2:8a:c1:bd:
64:0c:f1:37:fd:f2:ed:72:4c:e3:45:95:00:24:ce:
25:39:8e:bb:d3:c2:60:53:6e:f9:d2:8d:1a:ea:11:
fb:f0:38:e9:dc:b2:cc:29:40:a6:27:93:19:14:d5:
53:65:f7:fd:78:ca:88:81:18:49:92:f5:87:f2:66:
50:dd:91:ea:a2:46:bb:2e:95:a5:d4:ce:95:4b:4d:
a7:a5:b8:8e:e6:c7:73:3b:53:2f:7d:8b:d5:9b:e0:
eb:71:49:22:be:82:38:a1:f8:83:cc:aa:a3:ee:1c:
a0:c9:94:6c:98:28:ae:ad:af:83:92:0f:65:ae:f2:
db:a4:11:f5:e4:2d:c4:62:3a:33:db:46:56:64:db:
4b:27:6c:b9:4c:a1:92:3f:eb:31:20:bc:6f:36:f2:
01:b5:52:98:82:c3:42:04:ba:c5:f3:ed:91:da:e9:
36:db:a6:e4:16:dd:84:20:fb:47:6d:af:66:30:70:
f3:9b:cf:ed:81:47:e4:36:fb:f2:42:67:42:ed:0f:
81:d4:9c:36:cc:a9:da:5d:1f:e8:4b:ec:c0:cc:51:
24:40:6e:41:88:d6:c6:bf:84:ac:ff:1f:ca:39:4a:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:14:A6:A8:A3:B0:F5:4E:6E:85:32:D5:B7:BC:3C:43:72:F9:AC:4B
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:71:40:7f:f7:2a:3c:d0:ec:75:9c:48:37:e7:83:61:ee:d5:
32:c4:da:4f:ef:c9:b2:82:c6:06:94:66:ec:c0:a3:10:12:86:
d0:e0:c0:bb:8a:92:6c:1f:8b:ed:a3:5b:74:f5:a1:01:94:21:
d3:a1:f4:2c:9a:d8:85:69:e8:aa:11:46:e5:7d:d5:04:d5:4c:
c6:85:67:c9:94:27:f7:ba:b9:58:8a:47:c8:f7:ea:7e:23:fd:
19:dc:91:79:c7:2c:23:c5:9a:c0:b7:69:26:04:0b:a1:76:fc:
b1:a6:ed:16:f9:a9:67:3b:be:1f:3e:07:93:4f:5b:a1:8d:fc:
c5:87:3c:13:b5:38:07:91:4f:5a:a9:42:87:34:86:27:18:a4:
7c:11:ed:03:e0:4f:14:17:8a:ef:62:29:05:db:b6:f4:9d:78:
65:dc:cc:2b:ec:49:19:6a:43:c1:15:fe:a2:fb:c3:96:d4:66:
f9:fb:dd:2a:3e:97:6d:54:20:97:c6:61:46:cd:13:30:25:ea:
e7:e0:e7:73:0f:3a:73:b9:85:7c:44:ab:ec:a8:fb:e9:a1:ef:
88:e2:10:a0:07:0e:be:42:09:03:7a:02:bc:32:0f:5b:1c:f6:
18:8c:66:f5:64:a6:39:94:0a:fc:f5:47:a0:f9:ac:82:86:16:
61:ee:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:59 2026 by rpki-client