
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
File: Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft (raw, json)
Hash identifier: OLxkQCsSfnD18uUZyFulJVlLsF7fG9NwEZdysttT+HM=
Subject key identifier: 81:ED:5C:91:95:FC:4C:24:74:63:40:88:24:01:4A:A1:60:52:0E:62
Authority key identifier: 32:1F:C5:6A:7C:16:27:D7:DF:C4:30:FA:1D:61:29:19:B5:01:45:5F
Certificate issuer: /CN=321fc56a7c1627d7dfc430fa1d612919b501455f
Certificate serial: 019F85D71363FCB6FA656B5493BA0A91FD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:01:32 +0000
Manifest this update: Tue 21 Jul 2026 18:01:32 +0000
Manifest next update: Wed 22 Jul 2026 18:01:32 +0000
Files and hashes: 1: LGwzUxcjbq9-wb2ocqMqu3uyOjM.roa (hash: cDH6YJZW5QqvmFNmhrhTy7ZODICEHh2BK7oCwwTt9+E=)
2: Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl (hash: 3selNyv/sJA5XbmH797JDgkS4rsZ7auW4YzPmimq5EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:13:63:fc:b6:fa:65:6b:54:93:ba:0a:91:fd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321fc56a7c1627d7dfc430fa1d612919b501455f
Validity
Not Before: Jul 21 18:01:32 2026 GMT
Not After : Jul 22 18:01:32 2026 GMT
Subject: CN=81ed5c9195fc4c247463408824014aa160520e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:56:36:b4:4f:e7:b9:62:9c:f7:e3:34:01:0f:
3d:93:f9:61:87:e2:d0:16:65:91:6c:6d:50:24:92:
db:68:be:59:62:65:5d:b7:c3:e9:49:46:ce:70:46:
35:1c:02:82:d7:52:60:d2:bd:f6:ea:e8:bf:29:9e:
69:4a:e7:e7:25:a5:27:67:28:44:6b:6c:c2:c2:12:
b2:2a:02:48:7d:e1:75:7e:59:22:23:79:b6:65:a2:
db:19:ee:4b:a6:0d:0c:c5:55:e8:45:72:d1:e3:5c:
eb:0a:34:4c:11:a2:a9:78:6e:5a:5e:97:3b:fb:39:
6a:e6:e0:71:c1:29:a7:0c:2f:88:cb:7e:f8:51:c9:
13:72:d0:38:52:71:06:f8:26:b1:58:34:d4:54:36:
06:2f:a1:2c:bb:1b:c0:eb:75:04:07:99:f3:31:fd:
3a:20:1a:a1:2e:03:9f:56:50:fa:1e:20:8c:52:c1:
19:6a:60:5c:6a:28:57:72:33:c5:70:2f:4f:ab:7d:
fb:c1:01:6f:86:6a:7c:14:d3:84:57:35:04:f7:72:
ab:e1:d1:33:52:a3:57:e8:13:80:ac:fd:46:31:3e:
08:58:d6:d0:fb:56:ab:71:f1:2d:bd:a2:d9:a4:2d:
3c:99:f9:8e:4f:ae:50:c9:d2:6d:bf:b1:43:d9:3c:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:ED:5C:91:95:FC:4C:24:74:63:40:88:24:01:4A:A1:60:52:0E:62
X509v3 Authority Key Identifier:
keyid:32:1F:C5:6A:7C:16:27:D7:DF:C4:30:FA:1D:61:29:19:B5:01:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d7:1f:1a:1b:2a:a5:4c:55:4d:9f:34:0c:eb:35:1d:69:31:
28:6f:ab:44:4d:b2:c5:ee:8f:93:24:18:0d:71:fe:73:96:06:
54:61:52:1a:be:27:ab:60:11:dc:84:62:6a:b1:fc:f1:32:61:
10:30:ac:6b:56:c9:a1:ac:ae:dc:3b:13:35:1a:6c:a5:fb:d4:
20:63:28:74:85:4b:d1:5d:f3:24:18:ca:47:66:66:3f:8f:5d:
80:22:f2:2c:25:5f:73:a6:33:7e:b8:13:c2:d0:a2:e1:07:39:
a5:a5:ee:f2:c8:45:e6:fe:ff:89:d2:24:6d:96:60:fc:73:ce:
4c:3c:cd:b6:f0:fd:8f:54:b5:05:31:ef:00:ea:f4:06:4f:e5:
69:2b:df:68:58:6a:0d:26:5c:67:99:57:6e:31:c2:fc:25:33:
72:79:03:9e:1a:f3:99:ff:04:53:3b:7c:5a:4c:cb:27:21:05:
04:15:90:0c:6f:37:9a:c6:d9:d7:00:39:b3:8f:bf:a0:52:49:
d8:c9:4c:db:df:0f:7a:f0:f3:d4:e4:dc:6f:5d:7a:3a:13:e9:
05:a2:6d:91:5f:61:50:c0:11:51:58:d8:bb:24:de:7b:d1:d2:
0f:df:0e:c8:47:4d:2a:9f:8a:8c:a4:65:60:72:6b:12:2f:0d:
9e:a2:f1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:36:59 2026 by rpki-client