Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: 5AiaXLcRlxmuyhIk9fXrrGmew86BZDH66jizOaXPP+o=
Subject key identifier: D3:22:52:48:CE:BB:8A:E0:D7:B3:86:C2:A1:13:2E:03:AB:6A:A4:CF
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 01A15DE86EA90D9635D29FABC73A8B205BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: 066D
Signing time: Wed 21 Oct 2026 10:01:15 +0000
Manifest this update: Wed 21 Oct 2026 10:01:15 +0000
Manifest next update: Thu 22 Oct 2026 10:01:15 +0000
Files and hashes: 1: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: CQ1bAzK0GfOjtSTxWo+MeuoT007Ry9/+siZ7sZ6hEPs=)
2: l1nrHCg1JaRGqWglwBj3oSy_fj8.roa (hash: y4C2wS/8hOK+ga53wXjcr5tBKnj/Yfql4LK0XM8fOmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:e8:6e:a9:0d:96:35:d2:9f:ab:c7:3a:8b:20:5b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Oct 21 10:01:15 2026 GMT
Not After : Oct 22 10:01:15 2026 GMT
Subject: CN=d3225248cebb8ae0d7b386c2a1132e03ab6aa4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:df:9d:03:41:15:0a:c2:52:0b:cf:86:b2:
83:95:49:7e:4b:00:b6:0e:81:d2:9c:d7:03:dd:ef:
15:7a:b9:3a:83:ef:0c:cb:58:6f:b1:3d:82:8b:b7:
d9:d7:64:b4:fd:89:eb:82:e1:5a:8f:28:e2:8f:fc:
30:d8:87:37:05:21:51:c6:13:73:30:7a:f2:12:3b:
8a:e8:42:d6:ba:f1:48:ea:7f:4c:14:0a:60:2d:d7:
2c:9c:b8:35:23:00:4c:7c:d5:28:b5:24:db:1d:97:
65:2c:02:e1:4f:c4:69:fb:40:85:96:d8:15:c2:ab:
a8:b2:b4:43:46:92:01:af:1c:33:42:54:e1:02:22:
36:51:83:9c:24:34:70:0c:6b:ca:d3:b8:6b:a3:53:
65:c1:06:66:ad:9b:1f:3f:85:82:c9:3f:db:ad:d3:
28:f1:18:58:6a:17:c1:78:b5:44:a4:df:7b:80:76:
bf:51:8c:91:57:3f:6a:c5:9c:6d:e9:01:dc:ef:e6:
71:a0:a8:b7:99:07:4f:fa:34:50:85:20:63:26:4e:
61:38:e0:ee:d1:ab:c4:aa:fd:b8:ca:ac:59:31:77:
8c:39:03:32:d3:a6:38:e9:fd:be:01:d9:5e:5b:1e:
7f:75:c5:4a:b8:15:59:57:3d:f9:ac:dc:a6:95:0f:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:22:52:48:CE:BB:8A:E0:D7:B3:86:C2:A1:13:2E:03:AB:6A:A4:CF
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:22:a4:7a:c1:58:86:b5:b8:7d:86:2f:94:7c:58:0b:68:a1:
e8:cb:b5:9a:83:6d:87:71:76:d5:26:46:dc:62:dc:65:84:65:
d9:d8:bc:60:b1:fe:c3:1f:4a:28:54:2d:cd:f2:c8:f1:f9:b0:
19:33:8c:ef:36:6f:a1:89:36:97:df:40:75:55:f9:d6:8d:58:
22:9e:83:63:46:2a:b4:35:05:9b:a3:85:70:ec:e2:22:0e:78:
f9:da:02:42:f1:29:90:0f:e8:9a:1b:2c:81:d5:32:e2:ca:ac:
0a:3f:cc:ef:56:c8:cf:ea:4b:a6:d9:65:b7:f2:e5:24:2d:40:
f1:d4:9f:13:ca:3a:35:93:fa:37:27:fc:b7:b9:18:d7:05:99:
f2:19:0e:01:a8:85:02:59:40:99:44:06:90:a2:88:b1:f8:d5:
ac:3a:f7:de:4a:d5:36:0f:2b:57:28:e5:35:ac:85:df:ba:71:
ae:1e:5f:5b:a1:6e:f0:3f:41:0f:f4:13:9a:b8:89:d5:b8:97:
46:31:f1:31:56:76:aa:b3:56:9b:04:f4:53:da:32:44:24:d0:
63:0d:47:a1:25:0d:92:a6:a5:47:13:85:7f:19:6d:54:4f:16:
6a:b9:3b:ab:64:21:9e:85:2d:8b:90:2d:8f:a4:c7:90:d8:f1:
23:00:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:28:49 2026 by rpki-client