Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json)
Hash identifier: gL/FDMiszwVaTkEdyXlBSdIig3wiqqyHdZRsMFCA3Zo=
Subject key identifier: 94:FB:C5:76:CB:D4:0D:83:DB:BA:78:68:59:1C:4F:06:A5:51:0D:15
Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Certificate serial: 019F1378E7DF6FE1E963766063CD153CFFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
Manifest number: 0516
Signing time: Mon 29 Jun 2026 13:01:58 +0000
Manifest this update: Mon 29 Jun 2026 13:01:58 +0000
Manifest next update: Tue 30 Jun 2026 13:01:58 +0000
Files and hashes: 1: 0hS-dXastI13cpwFNDpfMzpMJMo.roa (hash: /PWpz2GpXrpBSZf2HusroGndm5V0a7tNkaagb+MoyqQ=)
2: T2C7WIfF0wbXIdpisxkUUAqC7Vg.roa (hash: IG8wYbRO9EgR+lhTadWwp9VBM4VCFO/ElkXU+SiTN5o=)
3: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: WRvSdTlCUyXQp23gcUnpfK3+wL4h3rEfLW/xAA+B1hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:78:e7:df:6f:e1:e9:63:76:60:63:cd:15:3c:ff:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1
Validity
Not Before: Jun 29 13:01:58 2026 GMT
Not After : Jun 30 13:01:58 2026 GMT
Subject: CN=94fbc576cbd40d83dbba7868591c4f06a5510d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:7b:59:60:d1:ba:4d:1e:15:62:ec:cd:e2:
93:2d:f4:ea:ee:8b:67:af:d8:95:de:0d:3b:2b:8c:
07:11:07:48:48:5c:6e:ba:06:3d:3d:7a:d5:a1:88:
56:1e:a0:7e:fd:bb:dd:ed:3d:63:5c:b3:51:17:53:
50:00:32:cf:15:c1:c0:98:56:0e:ed:13:42:81:45:
34:fe:ac:8d:c2:41:48:0a:db:1d:7b:38:a3:54:89:
37:bd:34:24:d2:de:f9:eb:83:81:d9:07:90:00:67:
cf:f0:c2:30:7a:8e:4a:6b:37:5a:cc:e5:15:7e:a2:
aa:59:54:39:d0:44:d6:c7:3a:19:81:e8:cb:e9:b3:
12:71:93:9b:5b:70:2c:58:68:10:34:bc:91:70:e7:
f5:54:69:58:63:8a:9c:57:e7:be:49:a2:bf:fe:24:
e8:c2:3d:98:63:a2:e2:97:38:e9:82:4d:a9:67:44:
2a:de:91:8b:cd:70:dc:7a:a8:02:f3:b6:23:63:de:
7d:f1:4f:0c:ca:66:39:8d:34:9d:4e:72:03:0b:8c:
b1:8e:6b:41:37:54:8b:61:58:ba:d7:3e:af:bc:a3:
03:35:ba:b8:77:af:3a:b6:81:b0:ee:18:b1:a5:9f:
0a:db:86:12:d4:5e:18:a9:a6:a7:ca:8b:08:70:cf:
60:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FB:C5:76:CB:D4:0D:83:DB:BA:78:68:59:1C:4F:06:A5:51:0D:15
X509v3 Authority Key Identifier:
keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b8:9b:76:07:1a:c6:4a:8f:d9:88:e0:ec:c6:5d:2b:85:4b:
06:9e:ac:60:b2:e2:0d:e9:b1:7c:18:12:12:f7:34:ea:e3:25:
ad:56:39:13:56:f9:61:09:a6:5e:bc:f3:bd:9f:15:7e:7a:6a:
c6:5c:88:2b:de:92:fb:a8:cb:3f:58:a9:1a:90:30:66:58:dd:
c3:02:d6:f6:ce:5c:f4:19:94:86:b0:18:97:eb:3e:31:c3:93:
8d:cc:c4:e7:26:ae:ef:b5:e5:3a:20:39:74:cc:54:11:e5:83:
d2:d4:e5:00:56:e8:d4:44:d7:22:6e:18:92:48:d8:09:2a:13:
9e:96:d4:7e:de:21:c1:0d:c4:a7:25:c1:6b:73:f4:08:5f:09:
fe:48:cf:22:46:54:df:26:0c:cd:c5:ba:23:74:73:e7:03:6c:
42:6d:b7:cf:b8:e9:87:3d:1c:7a:b4:1c:75:08:52:12:ae:07:
f0:68:26:88:50:e2:d7:8d:a2:3b:21:eb:ac:ee:6e:9b:5a:e2:
ba:66:64:89:e4:ee:07:da:7c:f9:6c:6b:67:cd:18:de:1e:45:
3c:73:f1:32:d7:2a:eb:72:0c:c4:4f:04:04:38:cc:93:11:e1:
7b:92:af:6a:3a:ec:3a:93:14:d7:f9:59:a9:94:61:93:a1:33:
6b:58:22:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:34:37 2026 by rpki-client