Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
File: fhxn8ySb-H1syWulL_G9wOeJtBk.mft (raw, json)
Hash identifier: lFMBsYh57hM3n9HnSqY6na5rxjOL+fFW1dHFekdnHpc=
Subject key identifier: 90:69:97:B3:F6:BC:9F:75:7F:F5:EB:1E:F4:6A:2B:56:D7:67:2C:1E
Authority key identifier: 7E:1C:67:F3:24:9B:F8:7D:6C:C9:6B:A5:2F:F1:BD:C0:E7:89:B4:19
Certificate issuer: /CN=7e1c67f3249bf87d6cc96ba52ff1bdc0e789b419
Certificate serial: 01A12AD644C81DC6EAE49C709BFA4DCEF506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:00:47 +0000
Manifest this update: Sun 11 Oct 2026 12:00:47 +0000
Manifest next update: Mon 12 Oct 2026 12:00:47 +0000
Files and hashes: 1: fhxn8ySb-H1syWulL_G9wOeJtBk.crl (hash: CgSUj+REjGxddixXcnXlZzOtkziZ7x9oYkWHJw22xLE=)
2: uhJ9E2xHD6VE0XyeXFxt9rFbjbs.roa (hash: ByrmQQLK2SZe1G5CS63vjY0S33+wHwZPNkpO65iKwLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:44:c8:1d:c6:ea:e4:9c:70:9b:fa:4d:ce:f5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1c67f3249bf87d6cc96ba52ff1bdc0e789b419
Validity
Not Before: Oct 11 12:00:47 2026 GMT
Not After : Oct 12 12:00:47 2026 GMT
Subject: CN=906997b3f6bc9f757ff5eb1ef46a2b56d7672c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:61:00:56:6d:8b:b2:c5:ea:c1:69:e5:e2:50:
7a:57:f4:a5:d5:83:dc:da:e0:53:54:41:c9:49:da:
4c:fb:ad:a9:f8:45:5f:28:ee:38:e2:1d:e3:78:ce:
a4:b9:f8:7d:7f:ab:b4:71:37:e4:e6:43:0a:3f:a7:
fc:12:f2:a8:90:8d:4d:22:8c:15:b2:fa:73:66:6f:
b2:72:87:28:c9:0a:59:f6:94:94:af:15:12:a6:3d:
2d:95:02:72:a6:97:fc:fe:33:62:68:f2:96:27:9a:
ea:85:22:0f:5b:89:00:e4:88:56:1c:5a:cb:ca:06:
50:a3:6d:36:f8:48:53:e2:0c:0e:88:20:57:c5:0e:
4c:dd:b9:5f:60:9f:0c:5d:e5:3f:72:66:c0:e8:a4:
70:03:6c:09:ee:39:83:98:9e:a6:d8:c5:93:b8:8c:
a0:4f:2d:62:e1:b3:78:bd:81:d9:64:ba:ff:ae:3e:
cb:c7:01:d5:42:d4:49:e6:0e:9f:25:4d:66:71:a4:
f4:9a:56:99:5b:59:d0:f4:e1:db:cc:69:51:ef:a2:
93:e0:a7:a1:84:ea:74:e6:e5:52:7c:62:07:03:a7:
60:c2:7b:71:98:87:a5:98:45:5a:46:4c:19:e1:cb:
79:a4:9f:0d:ef:cb:56:f1:88:47:87:19:ac:ae:1b:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:69:97:B3:F6:BC:9F:75:7F:F5:EB:1E:F4:6A:2B:56:D7:67:2C:1E
X509v3 Authority Key Identifier:
keyid:7E:1C:67:F3:24:9B:F8:7D:6C:C9:6B:A5:2F:F1:BD:C0:E7:89:B4:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d3:d0:8c:e5:c6:ec:7d:78:3e:8d:5d:60:82:81:e5:cd:fb:
2a:1e:84:cc:03:54:e4:5e:e0:05:e0:16:17:1e:e3:d6:a2:80:
02:22:61:13:ac:8b:2a:10:72:a8:64:32:55:ab:1f:10:75:ce:
f8:ef:12:c3:21:55:f1:57:92:3e:5c:55:45:c0:c5:2a:2d:86:
2c:ac:e5:87:47:4e:82:c4:08:67:92:fc:5e:0a:cf:e4:4f:1c:
91:06:bf:f8:2f:9d:ae:16:68:a6:49:4e:28:9a:c4:93:b1:de:
98:77:5f:f6:94:cc:6f:8d:8d:bf:21:f9:62:65:5f:85:75:03:
7a:f0:30:d4:84:a4:0d:34:4a:79:0b:e0:62:4c:b6:90:7d:12:
ef:de:d6:b3:81:4a:e7:57:5c:2a:49:21:bf:81:8f:17:c4:3c:
b2:c2:b6:e7:e5:81:16:5d:7b:e1:34:b3:f4:e1:7c:0a:b6:12:
9f:9e:ee:8f:b3:b1:4d:98:40:57:12:63:81:8b:21:03:d0:30:
66:2b:98:7a:fb:51:4e:40:1f:d1:3c:e3:b0:05:d9:60:47:66:
10:77:1b:94:da:a0:d9:e7:0e:74:ea:43:5f:ba:21:4c:d0:5f:
28:8c:24:59:01:d5:3c:7f:84:50:df:df:1e:e7:97:2d:a5:f2:
54:3c:f3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:38:32 2026 by rpki-client