Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: Ucs0zPY4CMRLle5IH5LJsiz48NcVeHPQnLJQjMZ4q/w=
Subject key identifier: 19:1B:9C:A5:3C:38:F3:62:33:3E:2A:67:9B:C2:8B:E0:9D:73:A3:14
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 019CB84BCAFE994AAE4B040A06860D057AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: 0405
Signing time: Wed 04 Mar 2026 10:01:40 +0000
Manifest this update: Wed 04 Mar 2026 10:01:40 +0000
Manifest next update: Thu 05 Mar 2026 10:01:40 +0000
Files and hashes: 1: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: masunQN1gVZOLdZzImIMwKRhJpkl6HfqGIFBinkRfGg=)
2: l1nrHCg1JaRGqWglwBj3oSy_fj8.roa (hash: y4C2wS/8hOK+ga53wXjcr5tBKnj/Yfql4LK0XM8fOmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:4b:ca:fe:99:4a:ae:4b:04:0a:06:86:0d:05:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Mar 4 10:01:40 2026 GMT
Not After : Mar 5 10:01:40 2026 GMT
Subject: CN=191b9ca53c38f362333e2a679bc28be09d73a314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:f4:2e:74:df:e3:db:04:67:35:76:b2:ca:
c5:34:59:c9:e9:49:d6:fd:9e:2e:8c:de:d4:45:c3:
6d:7e:51:33:53:53:21:25:82:7b:81:86:80:84:a7:
e6:65:08:77:b7:14:80:b5:b8:83:e9:34:1c:11:5e:
e8:32:92:aa:99:5b:17:d4:6b:27:f7:69:49:f3:6d:
8c:32:12:89:40:cb:94:fd:8b:ab:4f:14:fb:58:a5:
0f:dd:17:f7:1a:45:6e:71:75:98:cb:29:3f:28:e4:
ab:21:6b:ab:8e:4e:ae:43:e8:63:f5:68:16:cd:60:
76:30:12:01:5d:f2:28:b4:a8:a7:40:65:73:28:a7:
30:1c:5c:dc:40:f6:6f:32:e3:4c:00:dd:cd:86:14:
f9:90:2c:0a:4b:3d:05:22:0d:5c:f5:2f:0f:cd:2b:
92:ee:59:be:a2:12:2a:ee:3d:20:06:a7:9a:d2:e6:
ea:4e:18:d6:6b:3c:28:86:3c:1f:55:dc:7a:5c:01:
30:db:ff:0c:5d:9f:58:67:2b:5b:49:6a:b7:8c:08:
d8:82:e8:5f:2b:37:d2:fb:dc:e5:a6:a7:22:cb:cb:
86:73:7d:f2:53:84:14:e8:b8:81:bc:84:fd:c3:f8:
1a:23:d9:a4:21:6b:d0:07:aa:bd:48:47:fc:a1:d9:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1B:9C:A5:3C:38:F3:62:33:3E:2A:67:9B:C2:8B:E0:9D:73:A3:14
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:77:f2:9d:19:d9:01:d4:5d:c0:96:75:ec:bf:0a:62:a2:e6:
78:4e:98:90:97:61:7d:0c:b7:37:81:0e:ee:8b:21:e2:da:c8:
31:b5:ec:e3:6e:72:c6:f9:77:98:dc:ec:a9:13:7e:cf:6e:e9:
ec:a5:76:48:93:e2:8e:02:45:bf:57:1d:f0:ee:d2:f3:82:b4:
e8:e9:ba:6d:62:f2:fc:a8:71:8a:52:4c:4e:9b:d4:29:2e:8a:
b1:09:31:ca:78:b2:a3:0e:c2:5a:2f:f0:64:7d:df:04:71:48:
b8:f4:c7:9c:b4:d7:55:7f:c6:ee:ee:fd:b4:cb:d9:51:d6:7d:
91:21:9e:98:8b:d1:be:c0:a7:ad:4f:02:b0:a9:a1:a5:80:46:
f1:2f:e4:8d:82:3b:99:e6:58:ca:90:ba:c1:59:64:90:4b:89:
e6:4a:11:31:16:57:f7:48:c0:49:16:79:00:77:5c:f2:ed:7a:
aa:07:cf:af:e0:3a:43:04:57:42:9f:30:82:2a:e6:e2:b1:b2:
a9:29:05:50:13:5e:26:6a:0c:d4:a0:58:c8:d4:20:c3:d8:01:
dc:39:cc:9d:bf:7b:3e:91:7b:4e:c6:a6:17:97:6e:ac:7f:cb:
b2:f0:f7:8a:67:43:1c:ed:e3:c6:d4:8d:f8:de:e1:7c:cd:d9:
f9:2e:40:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy4S8r+mUquSwQKBoYNBXrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTM0MGVkMjMyM2E5Mjg2ZTk4MGY2NjQ2OTk5MGE5YTFl
MzA3NWQwHhcNMjYwMzA0MTAwMTQwWhcNMjYwMzA1MTAwMTQwWjAzMTEwLwYDVQQD
EygxOTFiOWNhNTNjMzhmMzYyMzMzZTJhNjc5YmMyOGJlMDlkNzNhMzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvr0LnTf49sEZzV2ssrFNFnJ6UnW
/Z4ujN7URcNtflEzU1MhJYJ7gYaAhKfmZQh3txSAtbiD6TQcEV7oMpKqmVsX1Gsn
92lJ822MMhKJQMuU/YurTxT7WKUP3Rf3GkVucXWYyyk/KOSrIWurjk6uQ+hj9WgW
zWB2MBIBXfIotKinQGVzKKcwHFzcQPZvMuNMAN3NhhT5kCwKSz0FIg1c9S8PzSuS
7lm+ohIq7j0gBqea0ubqThjWazwohjwfVdx6XAEw2/8MXZ9YZytbSWq3jAjYguhf
KzfS+9zlpqciy8uGc33yU4QU6LiBvIT9w/gaI9mkIWvQB6q9SEf8odk03QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkbnKU8OPNiMz4qZ5vCi+Cdc6MUMB8GA1UdIwQY
MBaAFH4TQO0jI6kobpgPZkaZkKmh4wddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMt
ZmUwMjdhMDM0NDQ5LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMtZmUwMjdhMDM0NDQ5
LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3fynRnZ
AdRdwJZ17L8KYqLmeE6YkJdhfQy3N4EO7osh4trIMbXs425yxvl3mNzsqRN+z27p
7KV2SJPijgJFv1cd8O7S84K06Om6bWLy/KhxilJMTpvUKS6KsQkxyniyow7CWi/w
ZH3fBHFIuPTHnLTXVX/G7u79tMvZUdZ9kSGemIvRvsCnrU8CsKmhpYBG8S/kjYI7
meZYypC6wVlkkEuJ5koRMRZX90jASRZ5AHdc8u16qgfPr+A6QwRXQp8wgirm4rGy
qSkFUBNeJmoM1KBYyNQgw9gB3DnMnb97PpF7TsamF5durH/LsvD3imdDHO3jxtSN
+N7hfM3Z+S5AUA==
-----END CERTIFICATE-----
Generated at Wed Mar 4 15:41:16 2026 by rpki-client