Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: PujDaKL9sggUVwTXKWtUwOnwDHXZ0jjy7NoOtGxOze4=
Subject key identifier: 6E:90:61:9A:0F:F2:B2:67:4A:1B:51:2C:36:B8:D6:E7:79:6C:5A:95
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 019FF8354B196F0D4E2E273E35718871EFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 19FD
Signing time: Wed 12 Aug 2026 23:01:09 +0000
Manifest this update: Wed 12 Aug 2026 23:01:09 +0000
Manifest next update: Thu 13 Aug 2026 23:01:09 +0000
Files and hashes: 1: anOK_t3CyTqq8NlqFB7A075gooA.roa (hash: UdYKN437GE/t4do7Cb6fa4jEkY53zklvjYRy+PQ0Xrg=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: uOldZal7LtqEGkZ0j7/UjyjtV+DQxyWZfzI/FccIlLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:35:4b:19:6f:0d:4e:2e:27:3e:35:71:88:71:ef:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Aug 12 23:01:09 2026 GMT
Not After : Aug 13 23:01:09 2026 GMT
Subject: CN=6e90619a0ff2b2674a1b512c36b8d6e7796c5a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:87:03:5d:ed:e7:d4:48:06:91:9b:ef:e2:
15:2a:a3:97:9e:87:29:9d:6a:57:df:ae:e2:f1:e2:
ed:99:01:fb:0b:92:38:d2:fa:3f:ec:47:e5:5d:b3:
f0:0c:58:5a:be:84:b2:f2:78:c6:67:9c:a4:e1:01:
93:d0:71:c2:c0:28:64:d2:68:ea:bf:f1:a2:2b:da:
ea:be:4d:cc:e9:bd:b0:ff:49:92:79:ba:69:f3:4c:
04:f0:9d:52:20:89:97:3b:ac:65:e6:53:8a:b3:47:
7e:55:5d:46:4a:cb:22:b0:b2:0b:98:23:08:f8:fa:
9d:81:8a:1a:c3:82:e5:a8:f5:4f:40:73:46:75:bb:
7c:b0:27:2b:1e:7c:54:92:64:70:75:e0:e9:f3:16:
47:eb:fd:40:7b:b5:3d:4b:8e:4d:a9:fc:b4:ea:1c:
24:3c:7a:53:05:29:d9:f3:c3:49:b2:16:37:c4:12:
b4:53:67:cf:46:42:8a:17:21:da:14:80:9f:75:99:
be:be:d8:6e:fc:d5:c6:74:c5:13:6c:d8:f4:80:01:
23:6c:2a:fb:80:e9:a8:de:ac:e9:81:4e:55:6e:9c:
f4:79:c4:e6:90:46:c8:1a:62:59:47:2f:60:17:4c:
9d:88:58:48:42:19:0c:22:7e:fa:84:2d:d9:ae:6a:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:90:61:9A:0F:F2:B2:67:4A:1B:51:2C:36:B8:D6:E7:79:6C:5A:95
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:22:fe:23:ae:16:1a:c9:b1:22:8a:10:31:ae:d3:82:a3:69:
96:4e:27:cb:2c:4b:e1:e9:c6:2d:70:23:ed:ce:5c:dc:5e:6a:
0c:74:5b:c9:51:39:43:f0:da:3b:6a:8c:ef:4d:53:5b:89:22:
e8:e1:e2:a4:14:a1:86:06:0d:4b:fc:95:c0:b0:72:2b:05:16:
d2:77:94:41:f0:2a:36:59:03:f3:5f:ca:c0:d0:fd:1b:18:01:
29:a4:f1:db:41:b2:32:fd:8c:a8:cf:25:b3:62:a4:d2:a8:b7:
8f:33:22:a3:5a:73:6e:15:55:16:1c:bd:17:21:b6:c4:31:4f:
c7:26:d7:38:ae:e5:84:24:7d:e8:f2:db:ad:37:dc:eb:1c:eb:
e5:dd:5a:f8:0d:5b:50:f8:3b:5d:c9:92:49:54:9f:be:f1:44:
c0:3a:c2:7c:2f:cd:b2:bf:65:65:a6:d3:fd:ff:03:48:dd:8e:
16:9a:ee:6a:21:67:96:c8:89:a1:8a:8d:40:75:bb:59:69:08:
84:92:5c:13:78:a8:04:25:0d:d3:a2:b3:68:cc:3a:32:c1:ce:
63:57:2d:be:d2:be:71:3f:14:13:23:ce:eb:16:3a:d5:c2:2e:
17:f9:56:76:52:ab:8a:1d:ff:c2:51:8e:c1:1e:2c:98:10:ca:
3c:b8:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:49:12 2026 by rpki-client