Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: cGFSB1NI5Xh4vLfHp7j8km9cKE9Dj/jc2ACWxbeNNTA=
Subject key identifier: 02:04:DB:B2:FE:02:F1:E0:DD:1C:77:25:87:BB:7E:2B:2E:9B:10:01
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 01A0FAFD950B9659126B81DC167DA2F6FB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 1A83
Signing time: Fri 02 Oct 2026 05:01:57 +0000
Manifest this update: Fri 02 Oct 2026 05:01:57 +0000
Manifest next update: Sat 03 Oct 2026 05:01:57 +0000
Files and hashes: 1: anOK_t3CyTqq8NlqFB7A075gooA.roa (hash: UdYKN437GE/t4do7Cb6fa4jEkY53zklvjYRy+PQ0Xrg=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: QYMFPtg2vk2C05y9tl9gT7cRHzV7AUM8x6owDSWLoVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 05:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:fd:95:0b:96:59:12:6b:81:dc:16:7d:a2:f6:fb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Oct 2 05:01:57 2026 GMT
Not After : Oct 3 05:01:57 2026 GMT
Subject: CN=0204dbb2fe02f1e0dd1c772587bb7e2b2e9b1001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:80:d3:9c:21:5e:3b:68:fb:5b:72:c2:2e:28:
07:d5:c7:15:af:5f:44:2c:23:2c:f4:6b:29:40:9d:
65:d9:96:ee:ea:61:c0:83:d6:90:e8:72:1a:1f:b4:
5f:3d:a8:46:f1:f8:e8:c5:94:83:7d:c5:8c:a4:6a:
8b:f8:dd:91:97:ed:7d:21:11:d8:e7:7f:0e:a3:dd:
e4:1d:4a:6c:26:d7:34:33:ed:d4:3b:5b:87:2e:f3:
f0:d8:be:af:1e:bf:fc:ab:84:b0:c5:34:80:12:25:
98:6a:8d:5a:d9:f1:16:f3:cd:03:f0:a8:93:96:4f:
a4:52:e5:27:a1:d9:6e:7f:70:01:16:f8:97:cc:49:
de:34:64:e6:ca:4f:78:9e:00:f9:53:3f:62:88:96:
c1:5c:72:eb:de:4c:40:bc:8a:c8:8a:d7:dd:6c:34:
42:b1:4d:3f:67:e2:13:4d:48:59:ee:46:9b:62:73:
de:e3:18:58:fb:af:3a:ed:8f:fe:53:29:6b:f2:28:
c2:70:63:3e:8c:85:5c:95:18:ec:43:5d:79:8d:58:
af:fe:0b:93:ac:ee:30:18:2d:5a:65:69:09:d6:57:
a8:57:b7:37:65:e7:dc:10:4d:6b:ff:67:54:31:eb:
75:06:8e:73:11:20:14:da:11:5b:f3:a8:56:c3:e6:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:04:DB:B2:FE:02:F1:E0:DD:1C:77:25:87:BB:7E:2B:2E:9B:10:01
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:dc:5f:8e:9c:43:db:85:2c:ed:50:c1:1e:75:9f:c6:59:fd:
0b:35:d0:d1:a8:5c:e6:fc:c2:f9:09:6d:d6:f1:f5:54:03:7c:
2d:d3:cf:0b:a3:93:45:1c:5b:b4:48:48:09:47:98:bd:d5:ab:
19:e6:c2:af:f4:15:be:82:bd:19:26:af:87:03:64:bd:fb:de:
ae:3b:98:a4:7e:c7:44:85:f0:af:4b:4e:34:2e:15:74:17:73:
af:4e:2b:01:bd:62:57:ea:fc:4a:97:85:68:86:05:e6:d1:53:
c0:b5:0c:76:01:ce:7b:38:b8:c1:ff:65:d5:23:56:f8:71:96:
1a:b5:bd:ae:d5:fa:34:65:c9:94:a5:dc:bb:a0:1c:bf:51:e1:
d9:99:5d:9d:88:25:80:0c:61:4c:e5:9a:06:32:bd:41:a6:42:
e8:e5:1e:a1:55:24:3b:a7:b1:8c:3a:a3:e6:f1:42:a4:fc:73:
d7:80:85:c9:62:8e:40:34:a0:28:b1:40:32:27:e0:37:75:7e:
93:2d:fb:6c:2e:1e:02:5a:19:cf:d4:93:ec:cf:19:a9:89:5b:
bb:a5:96:06:f4:8d:76:fe:8b:b6:3c:1a:c2:54:d7:f8:cd:0f:
9c:1f:86:d7:a0:bc:87:13:57:f6:d2:28:70:d6:3c:1f:60:62:
51:eb:26:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:59:31 2026 by rpki-client