Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier: iASbuLgXuIsUT9ZqW95+sYHBT9tQskhtHOth1/+dWr0=
Subject key identifier: 1B:20:D8:C6:CC:77:BB:DC:65:2A:44:89:76:72:08:22:99:2B:48:AB
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial: 019FA4BD1693C98789C4D898A98E0DC33537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 18:01:23 +0000
Manifest this update: Mon 27 Jul 2026 18:01:23 +0000
Manifest next update: Tue 28 Jul 2026 18:01:23 +0000
Files and hashes: 1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: eRE0P404ZMk9Jg73sIy55v8h5P3NUorD8iPIfVUA5DA=)
2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bd:16:93:c9:87:89:c4:d8:98:a9:8e:0d:c3:35:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
Validity
Not Before: Jul 27 18:01:23 2026 GMT
Not After : Jul 28 18:01:23 2026 GMT
Subject: CN=1b20d8c6cc77bbdc652a448976720822992b48ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:41:9f:83:d4:db:08:57:6c:ec:f3:7c:b6:
ac:dc:27:a2:d2:9b:b5:31:72:3f:be:af:ff:8f:1e:
5c:a8:7d:31:70:08:40:e3:d8:af:a7:28:d1:78:1e:
49:e6:89:62:64:9c:4a:b4:d8:b5:fc:52:a3:62:b3:
2b:af:0a:3d:44:c9:1c:80:6f:57:36:6f:cc:f2:24:
92:40:e6:15:dd:4a:94:01:33:ce:76:f8:f6:a6:ef:
a8:b5:1b:ba:d0:2d:44:a6:14:37:18:6d:54:1d:9b:
29:2d:d8:aa:65:15:3b:57:03:16:06:5a:1b:08:ed:
37:d8:f0:c0:f6:3f:24:eb:6c:52:e7:49:d1:77:be:
9e:45:f1:63:67:5a:99:d0:61:f0:15:8f:c9:a1:9c:
3f:8e:e8:92:6c:92:f6:87:15:f7:86:c7:89:8d:e8:
aa:e9:9c:2f:c2:3c:95:2a:6f:65:9e:3b:ac:3f:82:
0e:48:5d:7c:59:bf:77:5c:c0:90:e6:8d:ab:36:b8:
1a:47:89:a2:89:82:99:a6:37:d3:8e:50:91:c6:10:
bf:78:ac:00:1f:8d:75:e5:fb:13:42:2c:ab:dc:35:
84:4f:51:ae:55:ae:22:d2:ab:dd:c9:73:86:eb:5c:
75:19:31:de:d2:c8:16:f6:58:e7:f3:e0:b0:64:16:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:20:D8:C6:CC:77:BB:DC:65:2A:44:89:76:72:08:22:99:2B:48:AB
X509v3 Authority Key Identifier:
keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a4:5c:07:7a:ef:50:d2:f5:f1:2d:2d:e6:b6:96:70:f9:c9:
a4:eb:fe:ae:a5:99:d7:e2:04:6a:9f:c8:8d:a2:a6:15:5e:e3:
46:fa:16:8a:8f:42:b3:ca:ba:68:f2:8e:d0:86:d0:87:e6:de:
5a:3e:e9:dc:51:fd:13:0d:8c:d2:e1:fd:96:c3:0f:d5:c0:43:
03:17:36:52:1c:00:cf:b8:53:56:38:fc:c1:99:29:e1:1f:98:
6b:fc:69:16:05:06:60:95:d2:64:b6:4a:f2:bb:fe:27:46:fe:
a3:82:84:0b:63:06:e3:f7:dc:12:33:f9:43:4d:0d:66:19:fd:
50:fe:01:c7:85:83:40:0c:a2:ee:69:a3:77:9d:6c:e5:58:44:
df:10:11:12:d5:e3:0d:40:02:32:0f:99:06:b1:31:ff:1a:29:
3d:84:2f:e9:c9:d5:3d:86:00:8c:be:0a:9e:09:c9:4b:f2:67:
46:1d:41:90:4d:a1:10:f3:0a:a2:be:c8:02:96:c6:73:72:5e:
25:56:bf:bc:9f:52:4b:1a:c1:66:e2:c3:83:d4:e5:c1:58:72:
03:6e:e7:f6:ba:ef:14:a0:ce:94:3b:80:3a:85:4b:01:4b:30:
fa:5c:9c:d8:d4:79:d5:44:68:51:10:99:35:1e:5c:d9:9d:6a:
57:6a:2b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:21:40 2026 by rpki-client