Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: cVAcQUAgRE7/CWiG14eCjRhyycBkvVOzyFhGq2zHrk8=
Subject key identifier: 00:88:01:27:D8:F5:0A:D0:6A:15:DF:F8:94:22:C6:C6:79:80:1F:D4
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 019FA2601A7BA068CB1CF2144B6807BBA97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 07:00:34 +0000
Manifest this update: Mon 27 Jul 2026 07:00:34 +0000
Manifest next update: Tue 28 Jul 2026 07:00:34 +0000
Files and hashes: 1: KUAPJbdgB7bFTMpgIeI0m91ZeU0.roa (hash: QW3H184Zc0T/jdKDA9ND/ZljCo0WBhJC9aqERQkXP2w=)
2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: LL8pV740xNlvBPzH81XOgeS9Q4sWmNG7MrYgIx50KNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:1a:7b:a0:68:cb:1c:f2:14:4b:68:07:bb:a9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Jul 27 07:00:34 2026 GMT
Not After : Jul 28 07:00:34 2026 GMT
Subject: CN=00880127d8f50ad06a15dff89422c6c679801fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:8f:ac:6b:0d:44:1d:0d:71:bb:29:c3:84:
33:53:db:25:50:a4:7c:00:87:24:7f:dd:e8:f0:a6:
58:00:69:ad:35:bc:5e:b0:b8:45:cd:fa:da:9a:79:
38:39:52:95:72:dd:df:24:cc:d6:80:8d:53:00:3b:
16:66:49:d3:20:a4:50:01:68:2f:17:1c:f0:0d:a1:
84:65:97:3b:c1:bf:ae:e6:fe:6e:a9:c7:ad:cd:61:
d4:b7:5c:48:ba:d1:30:44:84:8d:e6:c4:56:97:d9:
1d:0f:1d:58:87:a6:e5:39:40:0b:45:76:05:c8:96:
00:59:a5:ef:4c:8e:30:2b:0c:a8:13:ce:8f:da:6a:
8d:f3:07:f4:65:e4:d5:2f:e1:31:5a:96:b9:1b:3f:
f8:49:22:e6:03:6e:28:d2:36:78:9a:c8:37:5c:ba:
8f:af:03:d0:78:18:12:fc:31:f7:b4:17:ae:f1:15:
6b:3d:c7:5c:fb:7b:71:b9:08:6d:25:7a:ac:53:bb:
a0:c3:1a:84:3a:67:69:87:00:80:22:f0:de:b8:23:
c7:fe:de:2c:bb:3f:f2:73:53:7d:c9:d4:44:bf:be:
63:f7:9c:88:5a:bb:d3:b0:6a:03:81:bc:c6:a1:21:
81:5c:06:7a:d9:ac:73:8e:fb:48:59:34:fe:eb:e2:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:88:01:27:D8:F5:0A:D0:6A:15:DF:F8:94:22:C6:C6:79:80:1F:D4
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:28:8d:d1:47:fa:64:f3:97:c6:bf:94:83:ea:ff:ea:ac:0a:
8b:5a:26:4c:06:34:7d:ae:9e:40:58:4f:84:b6:da:48:d9:21:
6f:b8:9b:47:24:34:64:ac:01:f3:0b:8f:89:86:5e:47:a5:62:
a6:95:95:7b:32:59:e7:fd:26:bb:f8:b1:31:2a:9a:44:00:12:
82:f1:e8:77:88:a2:13:1c:e9:df:65:79:ab:a6:40:77:1f:d3:
ef:82:24:d8:ec:f4:69:2b:a4:b1:09:3d:65:ed:bb:9f:c2:ef:
4c:24:a9:47:40:70:a2:6a:d2:e9:d1:8f:b0:67:f1:85:46:a8:
b8:b9:85:ab:50:55:61:41:d1:a9:8b:a9:61:95:7a:ef:a6:5e:
e7:9c:21:6b:6a:bf:db:67:0b:70:be:dc:e2:e6:49:cc:46:a5:
b3:49:22:31:64:f9:03:31:5d:d1:1d:71:50:69:ef:13:f2:e4:
f9:8e:ae:62:1a:6a:a4:17:e2:bb:fa:23:54:9d:48:33:b5:2d:
a7:7a:57:7e:e5:9d:b7:d5:5c:19:8b:1d:cd:3e:36:3a:17:7e:
38:69:1a:24:33:1d:d3:f8:af:24:c6:f0:a9:4e:b1:b8:51:6b:
2e:e8:6f:50:d0:cc:78:6b:26:5a:bd:67:57:d9:da:a8:b4:90:
c0:3c:56:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:48:02 2026 by rpki-client