
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: lq95bFpViWMhkLPVbL0a/LhWKoMX2P80zlQYWVV71PY=
Subject key identifier: 15:B3:E4:BA:5D:CB:D8:C0:17:57:1B:F3:6C:D7:4F:25:11:05:CD:CF
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 019EBAA2C40AD6AE1571F79A2A6F26F2DCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 07:01:29 +0000
Manifest this update: Fri 12 Jun 2026 07:01:29 +0000
Manifest next update: Sat 13 Jun 2026 07:01:29 +0000
Files and hashes: 1: KUAPJbdgB7bFTMpgIeI0m91ZeU0.roa (hash: QW3H184Zc0T/jdKDA9ND/ZljCo0WBhJC9aqERQkXP2w=)
2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: vHzKSgmRZhuns0jkY55bnUL7emwtP3afOcHcpegRMyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:a2:c4:0a:d6:ae:15:71:f7:9a:2a:6f:26:f2:dc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Jun 12 07:01:29 2026 GMT
Not After : Jun 13 07:01:29 2026 GMT
Subject: CN=15b3e4ba5dcbd8c017571bf36cd74f251105cdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:fc:bb:8b:df:a2:a3:f6:37:b7:20:f0:66:
25:86:e9:a3:47:8b:ed:d0:f0:a0:4b:3d:ec:12:58:
cd:cc:f1:56:2b:0d:d8:7a:24:04:a9:28:13:20:14:
40:e1:cb:a9:5b:a9:c8:ec:9f:8d:71:42:46:42:f8:
ed:53:ff:8b:98:cf:da:94:c8:20:02:cf:d7:c5:17:
e1:0b:df:50:96:ba:a5:cb:ba:f8:8a:5e:14:9f:ab:
5d:03:81:53:f4:3d:43:7e:d6:fc:90:4b:bd:dd:e9:
37:6d:6f:ed:a4:94:98:17:88:73:fd:4b:d1:9b:b6:
84:c6:8e:ed:bd:7d:5d:00:2d:4b:5b:dd:f5:38:0d:
cb:a9:f5:b5:78:5f:d5:28:d6:13:89:a4:58:7c:f4:
7e:ea:14:55:37:cf:d9:bf:5f:81:64:a0:81:44:bb:
c6:7e:7e:13:8c:03:41:dd:e1:3b:b1:71:fe:5a:a2:
bb:c6:31:7f:d2:eb:ce:31:3c:29:d4:ee:e0:ca:12:
db:50:30:c5:63:cc:2f:6e:cb:52:f2:43:cb:a4:98:
ba:d0:0e:a0:41:6e:9a:e9:80:4b:87:86:4f:8d:b0:
01:3b:d2:69:46:da:9e:a7:5e:a9:43:50:f1:1f:58:
6c:35:f7:aa:df:3f:a4:dd:1a:04:2a:00:b2:95:1f:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B3:E4:BA:5D:CB:D8:C0:17:57:1B:F3:6C:D7:4F:25:11:05:CD:CF
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:12:37:68:6a:54:3d:4c:ed:33:32:3b:f1:55:d5:6e:77:86:
fa:67:5f:cf:ca:a5:a4:2a:dc:db:df:8e:ce:40:89:84:26:9b:
7f:92:aa:86:65:86:3d:bb:d0:2e:3d:de:51:eb:03:d2:b2:ee:
39:8f:36:2f:26:b2:b4:bb:d3:ed:58:cd:e8:ae:c8:16:0b:ef:
44:bf:91:62:7a:67:46:96:aa:55:b0:56:d5:d7:be:17:34:3a:
71:39:96:85:65:3c:1b:7a:6c:2c:fe:80:28:82:0f:a7:9a:6d:
fc:6a:95:67:60:2c:96:40:57:a2:ca:30:f4:a6:9a:d0:a0:40:
b0:7f:9d:0d:1a:86:44:96:f7:bc:b3:15:70:f9:a6:20:ec:4c:
80:c7:86:6b:60:89:f3:24:33:bf:34:90:f4:0f:a3:bb:aa:81:
e6:42:80:1a:c6:17:83:1d:d1:4a:57:5b:b4:82:26:af:38:ce:
15:fb:ac:5e:94:87:e1:8f:ca:bf:c0:0a:d5:a2:28:0a:4f:cc:
1c:25:82:3b:37:44:b5:54:01:0a:d9:97:5d:0d:5b:b5:1a:e2:
ee:d8:13:28:16:e5:c9:9a:57:55:7c:7a:35:91:e0:e3:04:9a:
fb:6d:d8:2b:aa:b9:e0:23:46:27:c0:e0:a7:b6:fe:79:cd:75:
b5:8c:90:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:31 2026 by rpki-client