
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier: tayUo70c04tvYgG60qxVUjqWrTOhvxYwVpZkBt7JfhM=
Subject key identifier: 84:8E:CC:31:5D:5B:09:75:C5:C6:4E:F0:81:6A:F6:B3:6C:3E:D6:51
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial: 01A0DCBB756D8697AA9D7DB5AD5947F621E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number: 1A7A
Signing time: Sat 26 Sep 2026 08:01:07 +0000
Manifest this update: Sat 26 Sep 2026 08:01:07 +0000
Manifest next update: Sun 27 Sep 2026 08:01:07 +0000
Files and hashes: 1: 3XhI2AnxE9Iob8Z4cu24L14fqh0.roa (hash: FrYruNBfkjSi7B2g8ZPV7E7JbrqIhIIg8LFhYWGl7/4=)
2: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: gTrm4Q0e1kTAzYiZZZHn0R4eb58c95qz2TAGCLTkPzc=)
3: FftuvVwHax9rBycvM4DRr28X-6o.roa (hash: bwaRbSjhdz4y7KT7CJ7m6+1M8w/NqaRjSm1en4rz3ZU=)
4: JQnCfY6YafPRsaYc7zKPwbPOWDw.roa (hash: GmdykJDu2x9EESYje5rdUV18QI0AESFSpmuLu31e0OA=)
5: YInBR7bsYgDdM9URzfND8cE-528.roa (hash: QGeVQC9vpESzvL8GZfpI0KdzNZQJgFqjrA2fAYIfxE0=)
6: gQ7St51r5tRsr1STgJZSpb51fy0.roa (hash: 2Qh2IkkpDn5a2bQBxP6BJ08eMuKLDD2wyJNu9l57aaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:75:6d:86:97:aa:9d:7d:b5:ad:59:47:f6:21:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Validity
Not Before: Sep 26 08:01:07 2026 GMT
Not After : Sep 27 08:01:07 2026 GMT
Subject: CN=848ecc315d5b0975c5c64ef0816af6b36c3ed651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f5:03:1d:19:e1:f9:c4:20:71:80:76:e5:5c:
cd:1c:fa:11:fb:a0:95:0f:73:33:a7:fd:0b:98:26:
c0:47:77:c3:0d:69:54:6b:f1:93:1b:35:c8:56:65:
43:e7:e9:f4:44:8a:72:ba:23:87:48:80:ab:32:a6:
29:d0:c5:70:8b:c4:9c:96:d7:71:92:b0:17:0b:1b:
7e:1a:1c:52:39:77:7e:21:7f:fa:37:09:1f:9a:1f:
fc:47:e8:e5:c1:52:03:29:d9:09:a6:89:4f:09:4d:
65:7b:24:c1:10:2d:d6:f3:06:93:3c:8c:9d:f5:1d:
5d:8c:96:75:41:e0:e0:7c:60:87:5d:43:b1:92:e7:
41:fa:c3:b2:5a:08:d3:40:0a:77:e1:7f:9e:29:c5:
2a:e0:08:b1:3e:0c:81:a8:47:81:96:3b:a4:eb:68:
7a:16:31:ad:62:f8:b3:1e:df:22:f3:18:8e:62:89:
c8:d7:d3:ae:02:b2:a4:f8:33:5d:16:36:27:b8:c5:
85:2e:f7:2a:c1:59:d8:d3:80:d0:ca:c9:47:7d:2f:
b1:3d:d0:e7:35:47:9b:d8:db:00:b5:e5:a7:bb:d8:
74:91:42:00:82:f2:9e:12:3a:f6:0d:1d:95:d9:18:
31:f0:c8:f0:91:e8:6f:3b:d2:8e:02:d8:f8:96:e4:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8E:CC:31:5D:5B:09:75:C5:C6:4E:F0:81:6A:F6:B3:6C:3E:D6:51
X509v3 Authority Key Identifier:
keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1a:4d:46:93:58:77:e7:72:3d:cd:49:13:34:4d:21:b1:62:
ea:d3:1c:fc:e8:52:1b:5e:95:50:04:ee:51:f8:0f:68:68:e7:
cc:10:16:4d:e9:1d:96:27:7a:84:85:42:bf:0a:f2:10:01:e9:
fa:19:55:b0:69:2b:3d:a3:da:7e:e3:79:e7:67:53:e5:51:9b:
cd:60:5d:21:80:ae:8f:b9:7f:a0:f5:2d:22:fe:c8:15:75:f4:
56:3d:00:bd:77:df:f7:d8:bd:1f:5f:63:d3:8a:fc:8c:d3:cb:
eb:41:c5:2a:80:f8:e6:0a:b7:16:e3:34:e9:6b:7f:8e:c9:a6:
35:5b:b5:d4:bf:73:cb:25:4f:c3:cf:1a:25:53:82:fc:b0:8e:
ec:d4:63:0f:2b:b7:83:59:33:73:c3:4a:43:35:72:82:4c:55:
38:43:98:63:bf:fb:cb:20:7f:49:db:df:c7:f7:d6:be:c4:86:
77:4a:6a:b1:a4:fd:fc:a7:95:83:46:82:a4:f4:a3:50:8b:ef:
8c:fe:8b:fa:67:3e:db:2d:b2:6f:9f:8f:91:1c:72:9b:22:c1:
7a:76:fe:3c:24:90:bb:17:6c:27:b3:69:95:21:0a:4e:88:b6:
c4:7d:b6:8b:6b:aa:c3:57:ad:1e:0f:46:d6:8a:65:d1:18:82:
0f:15:ac:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:18:23 2026 by rpki-client