
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier: oO7FunbKWkdgSYjIEGpvnwKfTKYSi408hdOELibvHT4=
Subject key identifier: 04:07:14:F5:32:48:DF:70:57:14:7B:78:D5:2E:30:E9:1E:E4:92:72
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 01A175153695F662B6B7892EB2177622F8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number: 0989
Signing time: Sun 25 Oct 2026 22:01:26 +0000
Manifest this update: Sun 25 Oct 2026 22:01:26 +0000
Manifest next update: Mon 26 Oct 2026 22:01:26 +0000
Files and hashes: 1: 1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa (hash: 1Isp4qEhUMW8RbXIHRvEykaShiBFWYANN4lo8FswOgU=)
2: OF8_FWobXxZIravQspxAerLsQCQ.roa (hash: Y7S5oVSgN9LGWqLS5miIXFy0ldxtoJVgFrZlsFrthM8=)
3: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: ETqD3H18gQ5J9GJ+6dFjeHSkgf2EVrV6rTTPph6pWxE=)
4: iYC8lbhytTD32pOwIBpaKnVh070.roa (hash: YM6e3l9qg3NAPYfHxGGt9x27m8gykxKp/xuSfybtvWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:15:36:95:f6:62:b6:b7:89:2e:b2:17:76:22:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Oct 25 22:01:26 2026 GMT
Not After : Oct 26 22:01:26 2026 GMT
Subject: CN=040714f53248df7057147b78d52e30e91ee49272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:f8:6e:96:aa:37:02:64:dd:d7:9c:ab:41:
31:55:fb:4f:52:1c:e9:04:3a:63:09:79:12:3e:d7:
81:03:45:e2:2d:ae:62:3f:f6:fb:91:45:1f:51:a2:
28:04:7c:54:af:92:86:85:4a:f7:de:bf:c2:65:e2:
a8:f3:2d:d0:49:09:3b:77:24:29:69:60:f3:53:2b:
52:52:30:5e:58:3b:06:cf:f4:31:6f:b1:1c:a3:07:
88:31:3e:95:4d:6e:82:46:d4:84:66:90:8b:bc:f3:
63:0e:4d:b7:f0:50:f5:29:af:d3:aa:5f:f0:f8:b2:
b3:f7:f3:4b:86:7a:55:b4:3f:c3:d1:cf:57:6e:dd:
5d:2f:48:c4:1d:e3:8f:31:a5:d1:5c:9f:71:96:c7:
75:e6:cd:0e:2a:9a:90:2c:7c:65:8d:a1:7d:25:fc:
26:04:c1:eb:e8:b5:4a:64:25:71:67:8c:bd:08:44:
e9:1b:d5:29:a0:44:c7:2c:a3:12:67:e3:b9:fe:40:
0a:50:e5:55:85:0d:99:64:1e:74:91:44:25:52:7f:
b5:31:9c:cd:d0:75:13:db:80:f1:db:f3:09:c8:c0:
ef:cb:40:61:a9:91:ea:3d:f8:45:ef:c7:1b:56:1b:
6a:04:0f:67:be:e1:61:d9:89:84:ba:78:3b:09:79:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:07:14:F5:32:48:DF:70:57:14:7B:78:D5:2E:30:E9:1E:E4:92:72
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:da:a7:09:4c:33:83:ff:f5:72:89:62:2a:71:45:cd:4d:58:
e7:ef:8a:e4:54:a5:e5:a8:7b:80:b9:11:26:c0:43:7c:f1:1a:
bd:58:86:0a:18:f4:58:72:7f:1d:7c:c2:8c:79:66:20:90:06:
e1:38:d9:2e:9e:ca:74:40:62:d4:9e:a9:45:8d:fa:70:a1:64:
c2:79:3d:70:ce:3a:a2:d2:e4:90:b0:f4:0c:2e:bb:af:67:73:
91:6e:02:2e:cb:cb:6b:12:02:3e:1c:db:72:28:b3:87:a7:24:
a3:23:5b:ef:c6:0b:64:1c:0e:fe:f7:0a:09:4b:71:3b:9b:17:
7f:99:20:35:b2:92:cc:9c:0b:d0:bc:07:09:63:0c:df:52:ae:
a4:a0:c3:c8:38:51:8a:57:d7:42:3c:3a:81:55:bd:76:08:c6:
dd:9f:4d:e6:da:9e:d5:81:b9:db:f6:36:ea:14:92:19:18:49:
b8:15:8b:7a:c3:6e:8f:f5:41:8a:6c:d6:71:f3:76:c1:6c:38:
ed:0d:da:6b:61:38:eb:32:6a:37:ba:e2:31:e1:3c:d6:6b:6c:
a3:81:5e:34:c6:0f:0a:7d:3d:63:8b:91:cd:63:1d:4c:ef:4e:
df:b0:fd:f1:74:c1:4b:be:97:c6:73:52:6a:ef:f4:33:68:24:
df:df:30:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:51:04 2026 by rpki-client