Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: XkiJLGA3g1WWkue2F7nbkkmb/k0FHQm0cTxjGOez/rk=
Subject key identifier: 0D:09:BC:4B:22:60:5D:C5:58:77:8F:B4:18:BE:5A:0E:FB:CD:4F:47
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 01A0E43F12E8960FC0375C2EF44564CCEAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: 062E
Signing time: Sun 27 Sep 2026 19:02:13 +0000
Manifest this update: Sun 27 Sep 2026 19:02:13 +0000
Manifest next update: Mon 28 Sep 2026 19:02:13 +0000
Files and hashes: 1: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: GbjGAydCQ4S5ctrUUIJ2EY0Zn4EgKl+yoW3eytWzRNY=)
2: l1nrHCg1JaRGqWglwBj3oSy_fj8.roa (hash: y4C2wS/8hOK+ga53wXjcr5tBKnj/Yfql4LK0XM8fOmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3f:12:e8:96:0f:c0:37:5c:2e:f4:45:64:cc:ea:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Sep 27 19:02:13 2026 GMT
Not After : Sep 28 19:02:13 2026 GMT
Subject: CN=0d09bc4b22605dc558778fb418be5a0efbcd4f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:29:2c:c9:b9:8d:e5:86:5d:14:5b:6f:50:ab:
a1:41:93:d1:22:0d:f5:93:f2:0b:0f:3c:95:3c:6a:
2f:29:fb:10:09:3e:fe:ac:bf:74:3e:29:ec:b8:e4:
bd:df:c1:83:65:b2:7d:30:dc:c2:b6:70:f1:51:d4:
0e:d4:df:40:ad:ef:ae:e9:0a:bc:51:47:90:ce:36:
16:ce:2f:d8:70:3a:08:9a:00:2b:21:6a:61:de:80:
08:09:12:97:ac:05:31:52:34:31:ba:ae:65:f1:73:
65:7b:7e:66:a8:32:9a:4d:79:69:41:ce:52:6c:70:
7c:3a:78:50:03:5b:39:41:c7:07:ff:00:9b:d5:5d:
f0:56:6f:0f:30:c5:6d:6c:cf:6c:ea:b2:5e:1c:2f:
de:e0:ac:f5:2b:48:95:55:f7:20:d9:a5:72:8c:38:
7a:16:e9:7f:8d:a0:7b:6d:49:c4:5d:6d:a3:cf:3a:
c6:19:b4:e5:d3:fd:05:b7:31:38:ae:62:4f:63:bc:
19:40:12:c8:43:d9:1f:6d:d4:54:6e:df:a7:6d:de:
29:a7:8b:79:f4:cf:0c:d9:d7:51:6d:56:ec:08:75:
02:8d:64:15:ae:60:3e:c7:26:20:7b:6d:63:01:05:
65:51:9f:d6:fe:eb:0d:dd:f8:55:fd:91:22:ce:cd:
f7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:09:BC:4B:22:60:5D:C5:58:77:8F:B4:18:BE:5A:0E:FB:CD:4F:47
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8d:d9:1f:f4:25:d7:ee:db:c2:af:bc:bd:49:d5:71:cc:d6:
8d:1d:bb:70:56:1a:8b:a7:7e:0d:86:58:5f:82:d8:04:8a:97:
d6:10:31:47:b8:25:16:03:08:17:a1:16:72:9e:70:1f:d9:4b:
e5:36:9f:2d:c4:c3:6a:94:ad:e7:ce:81:f7:f0:75:81:fb:d1:
5a:25:43:8c:e5:db:24:d2:1e:bf:d6:28:c9:8c:e7:54:62:76:
24:92:f9:48:f2:9a:fd:e8:35:de:e5:5c:79:ba:ba:99:57:ed:
55:c6:27:cb:4d:3c:4c:fa:76:1a:97:64:35:ec:3b:ec:1e:91:
27:75:9a:e3:10:51:48:63:bd:79:42:47:84:36:9c:66:b5:d8:
e1:0b:e1:60:b4:f1:ef:e1:10:fb:3c:f5:ae:82:a9:af:2e:a1:
7d:1d:b1:71:82:06:39:a0:78:09:74:67:19:1b:37:80:47:17:
42:5b:59:87:2c:62:5d:f4:31:01:c0:6d:f3:d8:6c:e9:a4:60:
69:c0:04:c0:7f:e3:44:6f:0f:ce:b2:e8:f5:56:98:69:52:b0:
43:0b:11:9f:1e:0e:0c:a7:28:ee:3a:65:f5:64:31:b1:5a:42:
09:de:42:1b:83:98:89:8b:8f:30:34:9f:0f:e8:f9:a1:43:c7:
86:8a:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:10:57 2026 by rpki-client