Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: DLvx8A1PuRMjqQNtbm6aFzQykHYYa8ZnOPurAkLlBKo=
Subject key identifier: 7B:D7:84:83:02:1B:95:B8:2F:DE:EA:5E:AF:FF:15:0A:E6:A1:01:29
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 019D386633174ADC24DD8A6F8FDFCD9897D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:54 +0000
Manifest this update: Sun 29 Mar 2026 07:01:54 +0000
Manifest next update: Mon 30 Mar 2026 07:01:54 +0000
Files and hashes: 1: KUAPJbdgB7bFTMpgIeI0m91ZeU0.roa (hash: QW3H184Zc0T/jdKDA9ND/ZljCo0WBhJC9aqERQkXP2w=)
2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: mt+P/v06jSWqobvjkKfgzDTMlNkEVqaV4obLwJyxnGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:33:17:4a:dc:24:dd:8a:6f:8f:df:cd:98:97:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Mar 29 07:01:54 2026 GMT
Not After : Mar 30 07:01:54 2026 GMT
Subject: CN=7bd78483021b95b82fdeea5eafff150ae6a10129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:80:60:aa:a6:22:d6:d4:aa:50:ee:ad:7d:0e:
fa:1d:51:c5:f7:22:39:a9:1b:ce:5e:2a:f0:80:5d:
2a:be:85:29:ff:0f:0a:e3:f7:79:28:c5:71:f3:7b:
0a:02:54:b8:ca:8e:ac:a4:1e:e7:b9:51:22:3f:75:
53:9e:d0:12:8c:c4:b4:75:17:79:90:84:36:58:94:
2f:91:1c:d9:f1:86:eb:c4:68:1b:14:75:1a:6a:33:
10:64:40:05:fb:0a:21:7a:7b:cf:62:7a:f7:c0:80:
4f:b9:73:e4:6b:1b:28:2e:27:68:a0:52:39:6b:44:
0f:5b:73:8f:d5:07:6f:ad:e2:d7:ff:49:bd:2d:94:
6c:c5:0f:86:fe:f7:4f:1d:73:7d:ea:ca:a0:ac:3b:
4f:95:1b:c7:4d:a3:ca:3b:18:0f:32:c4:27:c2:cd:
ad:c6:a9:b9:af:35:2e:26:21:fd:ee:31:86:7c:16:
d1:80:4b:8c:fe:c9:e7:b5:51:d6:74:f8:b1:c5:55:
40:56:99:df:dc:da:67:1c:38:8a:2f:ba:68:6b:7a:
de:02:0c:9b:f1:eb:20:6c:4d:c3:8c:cc:81:51:6d:
a6:f9:96:5a:cc:93:7b:a1:43:c3:a4:76:61:31:f1:
3b:06:03:6b:b2:da:7c:fb:04:30:48:58:fd:b5:8f:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D7:84:83:02:1B:95:B8:2F:DE:EA:5E:AF:FF:15:0A:E6:A1:01:29
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:58:d0:33:dc:20:0e:f1:ce:66:af:a5:d5:a7:7c:eb:a9:f9:
f7:9e:d2:12:32:1f:70:b8:0e:3a:53:a0:93:89:07:bb:5f:42:
04:9a:f5:fe:d5:08:71:63:35:85:41:cb:07:c8:16:2e:fb:3a:
a9:b2:f6:62:c0:f4:35:69:df:0a:b4:59:e5:8d:0a:46:c0:30:
8a:92:96:1b:5d:32:c4:62:dc:f4:4d:1f:cf:2f:fb:24:46:ee:
7e:0c:13:fc:2e:4a:16:04:83:b3:b3:ff:c9:73:9d:12:93:13:
17:f5:fc:3d:45:82:24:f7:b3:6b:92:63:57:0e:71:f0:87:b9:
e5:74:fc:37:f2:a8:63:9a:40:29:23:43:00:0b:d1:62:ac:b8:
eb:ab:61:9b:1d:ee:4f:d0:aa:1f:8a:38:67:14:60:4b:67:c0:
4a:a6:8b:9b:9e:b6:b7:05:65:13:11:36:b5:16:68:0b:1b:27:
92:bf:0b:ad:76:07:3f:d6:e7:90:96:9f:d3:3a:8a:55:37:a1:
98:96:cd:c5:6a:b9:3b:62:d2:6e:d1:05:54:63:dc:2b:67:d0:
35:b0:c7:73:65:ab:27:40:ae:83:95:28:7d:f7:74:e3:57:39:
06:a9:d8:12:70:42:38:5e:ed:0c:33:cd:8d:f3:6e:58:a0:10:
ad:0b:87:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:36 2026 by rpki-client