Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier: aHhMYYYgBu8P1S4jQB8eZ+PpL47iJQusQCoS9jBCaTg=
Subject key identifier: 4C:E5:4E:22:0A:12:42:F5:EA:99:96:B4:B2:FF:CB:59:5F:F2:E3:59
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial: 019FA14D3F6B7AFFE54A5ADAC76B9B4B4522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number: 195F
Signing time: Mon 27 Jul 2026 02:00:21 +0000
Manifest this update: Mon 27 Jul 2026 02:00:21 +0000
Manifest next update: Tue 28 Jul 2026 02:00:21 +0000
Files and hashes: 1: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (hash: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM=)
2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: 4Q0r10Nx6StBEW3/yCU39i+YCHiwaawlHE70+RLKcEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:3f:6b:7a:ff:e5:4a:5a:da:c7:6b:9b:4b:45:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Validity
Not Before: Jul 27 02:00:21 2026 GMT
Not After : Jul 28 02:00:21 2026 GMT
Subject: CN=4ce54e220a1242f5ea9996b4b2ffcb595ff2e359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:66:a4:4f:fb:b0:07:99:be:17:31:28:ca:
05:d8:37:ca:87:47:c2:2b:dd:79:25:23:8f:96:1f:
f8:e1:58:04:f9:38:a3:fe:c3:67:65:85:11:b5:6f:
79:36:5a:30:49:f3:f2:70:4c:00:6f:ba:2d:dc:6b:
ec:03:21:8b:85:7f:0a:e8:36:70:ce:26:15:51:75:
87:61:83:9c:06:4d:78:16:d5:f2:17:61:ff:be:c4:
12:8e:f9:ff:6a:ac:3c:48:1e:1c:07:04:04:68:1b:
4e:af:d7:31:d5:7c:a0:6a:97:e7:a4:44:23:d5:b2:
82:3c:19:17:68:5b:fe:c9:d9:02:f0:12:61:e7:45:
6b:16:93:63:c6:7a:8f:45:45:f2:9c:1b:96:8a:e2:
62:4a:b2:61:a2:0f:1f:9a:0e:98:1f:ed:37:92:b4:
b1:6b:8d:3d:71:2b:09:66:a6:97:dd:56:e8:54:f4:
53:3b:71:7c:2c:4f:cf:52:a7:3f:51:8b:e7:d0:68:
60:66:92:c1:2b:46:48:4a:35:37:fd:b5:54:79:27:
f6:c2:84:30:b8:72:d0:e2:6e:d3:6d:3d:05:ce:06:
0d:94:6c:d7:9b:6f:a8:00:02:79:3b:92:4e:e7:83:
ec:1a:4b:9c:25:da:8c:92:b4:64:8c:60:51:08:b6:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E5:4E:22:0A:12:42:F5:EA:99:96:B4:B2:FF:CB:59:5F:F2:E3:59
X509v3 Authority Key Identifier:
keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:49:6e:2d:b2:82:9e:0c:cd:fc:b1:09:d7:92:6f:66:7c:f3:
db:4f:3f:a7:9b:5b:16:ee:bd:b0:1b:05:f8:92:2d:3e:57:de:
2e:34:60:5c:6d:d5:9b:45:18:a8:ef:37:da:94:67:20:85:0c:
4f:05:8c:98:8b:42:34:fa:92:51:78:c1:1a:dd:66:d3:ca:4b:
5f:14:52:26:74:cd:7a:f9:82:ac:09:bc:cc:4a:b5:10:49:5e:
90:c8:3d:4b:d7:20:6f:09:6b:98:42:7c:3e:e7:a7:bf:74:9f:
65:ef:b0:f7:d8:ee:ce:35:71:f2:73:67:6d:8b:12:cd:ae:e3:
85:22:5a:14:cf:ea:c3:5e:08:fc:2d:63:f0:ce:ed:38:33:e6:
15:49:82:c3:57:a0:3c:14:36:90:08:0e:d8:5f:3b:f2:a9:3c:
49:b0:a6:7d:6d:2d:07:d0:eb:d5:3f:33:51:88:18:74:b5:82:
bf:7a:09:c7:9a:0a:35:80:8c:6d:d7:57:fa:ed:49:a8:f1:66:
89:ef:71:fa:9a:1e:0d:23:02:c9:d5:64:f4:37:a0:47:82:f4:
b1:3b:63:39:5f:8e:37:c4:0d:51:0f:22:d6:e7:58:c1:5c:53:
79:6b:4d:52:bd:42:7e:7d:13:e1:2b:0e:1c:e5:c0:4d:ce:00:
5e:8d:d6:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTT9rev/lSlrax2ubS0UiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl
NWUwZTgwHhcNMjYwNzI3MDIwMDIxWhcNMjYwNzI4MDIwMDIxWjAzMTEwLwYDVQQD
Eyg0Y2U1NGUyMjBhMTI0MmY1ZWE5OTk2YjRiMmZmY2I1OTVmZjJlMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sFmpE/7sAeZvhcxKMoF2DfKh0fC
K915JSOPlh/44VgE+Tij/sNnZYURtW95NlowSfPycEwAb7ot3GvsAyGLhX8K6DZw
ziYVUXWHYYOcBk14FtXyF2H/vsQSjvn/aqw8SB4cBwQEaBtOr9cx1XygapfnpEQj
1bKCPBkXaFv+ydkC8BJh50VrFpNjxnqPRUXynBuWiuJiSrJhog8fmg6YH+03krSx
a409cSsJZqaX3VboVPRTO3F8LE/PUqc/UYvn0GhgZpLBK0ZISjU3/bVUeSf2woQw
uHLQ4m7TbT0FzgYNlGzXm2+oAAJ5O5JO54PsGkucJdqMkrRkjGBRCLYRHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzlTiIKEkL16pmWtLL/y1lf8uNZMB8GA1UdIwQY
MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt
ZjQ2YjVkNTdhNjg1LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1
LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0luLbKC
ngzN/LEJ15JvZnzz208/p5tbFu69sBsF+JItPlfeLjRgXG3Vm0UYqO832pRnIIUM
TwWMmItCNPqSUXjBGt1m08pLXxRSJnTNevmCrAm8zEq1EElekMg9S9cgbwlrmEJ8
Puenv3SfZe+w99juzjVx8nNnbYsSza7jhSJaFM/qw14I/C1j8M7tODPmFUmCw1eg
PBQ2kAgO2F878qk8SbCmfW0tB9Dr1T8zUYgYdLWCv3oJx5oKNYCMbddX+u1JqPFm
ie9x+poeDSMCydVk9DegR4L0sTtjOV+ON8QNUQ8i1udYwVxTeWtNUr1Cfn0T4SsO
HOXATc4AXo3Wag==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:08 2026 by rpki-client