Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: bdCiAYuctCZXvuLNqfLc/TkZb+7aj+5PaTankMiAg7g=
Subject key identifier: E9:0D:D9:E8:C8:98:1F:45:CC:5A:94:D7:6B:EC:3F:9C:7C:C2:F6:2E
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 01A08DFB53827F59B03ABAC0B8E92040F0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 1A4B
Signing time: Fri 11 Sep 2026 01:00:53 +0000
Manifest this update: Fri 11 Sep 2026 01:00:53 +0000
Manifest next update: Sat 12 Sep 2026 01:00:53 +0000
Files and hashes: 1: KUAPJbdgB7bFTMpgIeI0m91ZeU0.roa (hash: QW3H184Zc0T/jdKDA9ND/ZljCo0WBhJC9aqERQkXP2w=)
2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: ZbL73MYsCw5bqgDHDE3pMJk8TC4OQjf8OsoxqRzh1S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fb:53:82:7f:59:b0:3a:ba:c0:b8:e9:20:40:f0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Sep 11 01:00:53 2026 GMT
Not After : Sep 12 01:00:53 2026 GMT
Subject: CN=e90dd9e8c8981f45cc5a94d76bec3f9c7cc2f62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:a8:d3:7c:6c:ee:62:22:f6:83:34:53:16:
b2:ef:86:62:f4:56:a4:83:0c:5a:44:1b:9f:6e:cc:
0a:6a:e4:84:a9:fe:95:9c:c4:d2:aa:08:54:78:cc:
fe:e4:0a:63:19:08:0a:2c:d4:f0:9d:db:86:02:b6:
25:8f:5a:57:4d:e9:2d:45:9c:1e:06:ab:5e:3d:71:
58:bd:5f:9d:4a:c8:ab:c8:54:14:ff:59:70:73:1d:
8e:19:9f:d2:e5:ce:9a:31:dd:68:66:56:29:43:4f:
69:76:78:3c:c3:44:bb:32:b3:7f:16:81:fd:a4:4c:
49:a9:2e:64:f9:7c:fc:6d:a3:b8:b0:89:c0:ae:57:
4f:97:0a:b9:5b:a1:a1:27:d7:51:5f:73:a7:26:8b:
69:ba:dd:ef:07:da:87:44:86:69:73:c7:0c:11:90:
46:65:a1:ac:a9:00:9d:8a:19:26:95:25:4c:ea:ae:
85:da:d6:76:a8:71:cd:cf:07:67:b3:35:df:e9:d4:
f4:84:a4:a0:20:56:fd:8b:dc:6e:0b:8f:1d:3b:1d:
75:59:95:59:bd:46:c3:31:e5:4b:32:12:d5:63:c7:
00:e2:bf:ce:8b:36:cc:90:d4:ec:b3:d0:b2:71:6a:
3a:54:b3:b3:ed:4b:ae:ba:63:ac:7e:c6:83:3c:1a:
c5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0D:D9:E8:C8:98:1F:45:CC:5A:94:D7:6B:EC:3F:9C:7C:C2:F6:2E
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8a:fb:d7:83:04:c5:79:65:0d:1a:d6:e3:dd:4a:6d:0d:d4:
b6:8b:e4:31:5f:b8:99:7a:00:57:f6:9a:d8:b8:81:8c:a2:e0:
21:97:85:e3:38:2b:77:f5:49:2d:4a:48:46:fa:84:1f:23:2a:
da:e7:a5:68:48:06:0a:28:2d:22:d3:be:54:8b:9a:53:f5:67:
a0:3b:bd:84:78:23:90:86:bb:eb:03:0a:f7:5c:5c:4c:70:67:
8a:f8:04:8d:77:46:63:06:d5:5f:91:c8:6c:54:7d:99:62:95:
b6:50:30:37:c4:07:fe:21:29:e4:6b:e4:e1:d0:2a:77:e7:5b:
2d:13:ec:06:1b:c4:c5:34:6c:4a:99:b5:e3:bd:30:94:9a:47:
73:3d:4b:36:dc:a9:7f:c7:ce:4b:aa:79:ac:08:0b:34:02:45:
a9:ef:9e:e9:de:4b:e6:04:51:ed:ca:e4:08:3f:16:77:66:13:
f8:f6:7a:06:d5:ce:7e:cd:f7:0f:a0:84:70:6d:95:fb:40:22:
dd:73:34:b3:11:0c:fa:6e:9e:55:b2:9a:a3:f8:78:2f:f9:84:
39:73:1a:5e:f1:b8:c3:45:3f:83:90:63:bb:e0:e6:a4:69:ad:
b5:e8:8f:50:74:f4:9a:f4:da:91:df:75:ee:d3:4b:c5:e6:d1:
52:4f:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:23:08 2026 by rpki-client