
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier: 1j1f2OCBYugkZRgcEewWWnIGm09QZUPYlvTwhXF60e4=
Subject key identifier: CB:17:6F:BA:FA:D6:A7:3B:6D:9A:89:E5:94:1B:3F:BF:21:36:11:BB
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 01A021314FFBC59A7B9B3895D2E2795F7E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number: 08D9
Signing time: Thu 20 Aug 2026 22:01:14 +0000
Manifest this update: Thu 20 Aug 2026 22:01:14 +0000
Manifest next update: Fri 21 Aug 2026 22:01:14 +0000
Files and hashes: 1: 1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa (hash: 1Isp4qEhUMW8RbXIHRvEykaShiBFWYANN4lo8FswOgU=)
2: OF8_FWobXxZIravQspxAerLsQCQ.roa (hash: Y7S5oVSgN9LGWqLS5miIXFy0ldxtoJVgFrZlsFrthM8=)
3: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: aA0DyjtdEBvuuhHL6p3JAMU427bp6gyDQMcM5o2P2qw=)
4: iYC8lbhytTD32pOwIBpaKnVh070.roa (hash: YM6e3l9qg3NAPYfHxGGt9x27m8gykxKp/xuSfybtvWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:31:4f:fb:c5:9a:7b:9b:38:95:d2:e2:79:5f:7e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Aug 20 22:01:14 2026 GMT
Not After : Aug 21 22:01:14 2026 GMT
Subject: CN=cb176fbafad6a73b6d9a89e5941b3fbf213611bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:73:82:da:4f:f6:ab:c0:86:e6:c1:31:c6:
99:8f:93:c0:03:69:63:f6:bf:2f:24:85:7f:d9:b4:
c0:8e:b8:ce:47:1d:a4:95:27:51:0c:50:06:84:33:
45:90:51:68:a0:cf:8f:e8:f5:04:d7:fd:2d:6e:b9:
e2:aa:a1:63:02:ac:a9:22:38:de:22:2b:73:4c:27:
fe:55:3a:6e:c3:95:1d:eb:4e:f1:45:f8:db:e5:55:
09:cd:30:72:20:c5:f8:2d:db:ff:0e:0c:7c:b1:8d:
d5:f3:10:57:d7:78:a0:ad:5f:bb:b3:cc:77:49:29:
cd:88:fc:ab:8d:87:75:0f:73:f9:9d:76:ed:16:4b:
b3:84:a4:62:53:d5:69:2f:1d:f0:80:8b:14:a7:62:
da:3a:ca:dd:0d:63:51:bd:54:d1:0d:b9:ff:55:d2:
8a:5d:f1:c3:1d:d6:fd:d1:e7:6d:81:51:4f:0c:05:
0f:e4:0c:f6:a9:0c:d1:31:38:4a:73:7b:0f:1d:cc:
fa:f1:f5:c2:14:f4:6b:99:69:d8:b1:32:ce:d0:c0:
b6:fd:14:5b:2d:20:52:bb:a8:cc:a6:82:32:39:21:
45:a7:24:9f:f8:33:c6:8f:1c:1a:c9:f7:16:d5:29:
94:ea:57:27:a1:7a:9f:14:49:ee:33:08:00:8a:c1:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:17:6F:BA:FA:D6:A7:3B:6D:9A:89:E5:94:1B:3F:BF:21:36:11:BB
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2e:b0:b6:cb:bd:d3:9a:7e:ef:2b:16:3e:35:4b:2d:88:a0:
37:64:68:21:32:c8:2d:02:f1:b8:1b:59:c2:9d:3b:bc:76:ff:
ff:fb:16:e6:90:8f:a8:c0:e1:7b:02:06:17:52:93:ec:d0:28:
93:d1:63:83:77:d9:d1:c7:0c:55:7b:56:68:ec:71:3d:a6:ee:
a8:5a:65:91:34:7c:8f:e6:10:a2:70:cc:43:a1:e9:5c:13:87:
9b:35:64:d5:46:c9:bc:0f:87:80:2a:94:d7:47:05:09:12:38:
1b:34:2d:ef:3d:bf:e5:7f:6d:19:a8:45:3f:fe:81:e6:e8:9e:
a4:78:4f:99:27:8e:a3:d3:13:c5:74:87:c0:83:91:83:50:ec:
42:f5:e1:3b:21:3d:34:a5:76:78:b4:41:c6:ee:e1:97:6c:6b:
2d:ae:35:b3:d3:fb:9c:d6:2b:9f:29:72:5a:0d:a2:c1:4d:34:
d0:e0:49:76:84:e9:3b:ff:8c:b9:58:b9:5a:6e:f1:86:5a:be:
6d:1b:5f:1e:5c:2b:c3:ba:10:77:fe:ad:78:a6:58:1a:99:d2:
e0:23:97:8b:bb:cc:40:b5:27:5b:6e:86:e0:27:ff:c1:97:f5:
70:ba:8c:76:d8:fd:c1:e4:5a:dd:fc:b3:33:de:52:4b:86:6a:
d2:ea:c3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:09:41 2026 by rpki-client