Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: syuCE6DarQdofLGEtyU1N/WsmtRYIO4hSLE/bbOdNtg=
Subject key identifier: 2C:92:87:07:F4:B0:D0:8B:3F:6F:1A:5B:32:38:29:D9:9B:04:19:28
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 01A059325E04195BB48B4E710DD9CBD1393B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: 05E6
Signing time: Mon 31 Aug 2026 19:01:08 +0000
Manifest this update: Mon 31 Aug 2026 19:01:08 +0000
Manifest next update: Tue 01 Sep 2026 19:01:08 +0000
Files and hashes: 1: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: eATdncal3VXxfFHXk1c+x0+V9vUMv6/bh4Nq7xscHwY=)
2: l1nrHCg1JaRGqWglwBj3oSy_fj8.roa (hash: y4C2wS/8hOK+ga53wXjcr5tBKnj/Yfql4LK0XM8fOmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:32:5e:04:19:5b:b4:8b:4e:71:0d:d9:cb:d1:39:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Aug 31 19:01:08 2026 GMT
Not After : Sep 1 19:01:08 2026 GMT
Subject: CN=2c928707f4b0d08b3f6f1a5b323829d99b041928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:73:6c:e0:80:8a:cc:85:c5:92:6d:bc:98:ef:
b5:5a:04:63:1e:9b:72:69:b1:7f:c7:fe:f2:7b:ec:
4d:a6:9e:73:83:b7:d8:fb:a7:08:5b:cb:43:97:ea:
26:9a:68:fc:e8:4c:8c:99:41:a8:70:89:6f:dc:6b:
d3:af:6f:41:24:fc:a4:ec:fa:a6:55:2c:b0:e0:3f:
b4:75:38:ad:80:f5:3e:db:54:46:47:20:8b:b5:1f:
91:14:21:8f:0b:a3:43:f7:ca:b7:7f:8a:5d:ea:ce:
37:c6:dd:b3:e2:65:88:4e:86:0a:77:65:10:7d:45:
20:81:44:49:48:17:de:19:b8:59:c6:6a:a4:ac:cd:
e5:52:ba:97:f7:82:f4:aa:23:27:8f:ad:08:da:e3:
c4:10:77:af:94:cf:21:19:35:cb:92:d4:74:99:61:
80:25:bc:ed:52:67:18:47:6e:2c:83:38:49:b6:54:
68:ee:e3:26:4f:eb:2c:dd:16:bc:34:82:6d:0a:e2:
b8:50:89:a0:87:d4:5b:ce:fb:db:cd:2e:5f:ec:2c:
fb:f7:00:e3:14:1a:72:2b:eb:db:a3:8e:ce:e6:ba:
0c:01:14:79:bf:42:92:1b:a2:59:3c:c6:bb:29:9c:
d0:49:f6:09:c2:04:84:b2:f8:63:84:6f:4c:82:c5:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:92:87:07:F4:B0:D0:8B:3F:6F:1A:5B:32:38:29:D9:9B:04:19:28
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:64:2b:57:8d:08:c4:eb:15:e1:0a:c0:f8:a3:e8:9b:d4:aa:
4d:6e:14:d7:ab:78:a2:16:a0:00:f4:15:86:ef:ec:d9:1c:3d:
98:4e:2b:c0:19:3a:1a:03:fa:28:e5:27:04:df:f6:dd:5b:23:
b7:83:a2:59:7c:dd:b7:51:de:04:cc:02:6a:e9:04:ea:3d:a2:
73:af:c0:fe:f5:97:51:13:ce:01:56:ab:dd:a1:85:33:db:6b:
52:77:f6:ed:00:83:b8:10:ec:37:82:c9:b4:e3:c9:7a:01:6f:
1a:6f:6e:1b:d9:b6:11:1a:bf:a2:bb:93:29:f4:5f:01:0d:25:
6d:f3:83:e9:5c:0c:ed:9f:af:0f:f6:f8:4b:5d:85:21:a9:18:
e5:ec:94:d9:9a:4c:1c:68:f1:40:a2:0c:7d:01:9a:96:01:7a:
4f:43:c8:40:2d:4e:c3:a1:a2:b4:e4:e9:5c:66:cf:81:54:37:
bd:73:5c:5f:18:1a:94:13:39:71:4f:fc:ec:da:cf:e6:c7:62:
e4:b8:43:aa:00:91:b3:5d:63:d2:d2:91:4e:f4:4f:1c:e3:7d:
67:1f:ba:9d:81:41:61:be:53:25:34:f4:e8:e6:a2:49:10:c0:
d8:6d:24:a8:5c:ce:76:ed:db:57:d2:34:a5:5d:ad:2b:e3:16:
f5:c3:a5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:16:40 2026 by rpki-client