Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
File: Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft (raw, json)
Hash identifier: 7/bTJtbWfeMxy3X4KWrr5onWR06Og3C2k50HfvPhHa8=
Subject key identifier: 66:3D:BC:19:B5:23:F5:46:84:4C:68:A1:83:B6:87:90:A1:79:D3:75
Authority key identifier: 32:1F:C5:6A:7C:16:27:D7:DF:C4:30:FA:1D:61:29:19:B5:01:45:5F
Certificate issuer: /CN=321fc56a7c1627d7dfc430fa1d612919b501455f
Certificate serial: 01A0F8A9B53D849983DF934A017E84BDC202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
Manifest number: FA
Signing time: Thu 01 Oct 2026 18:11:06 +0000
Manifest this update: Thu 01 Oct 2026 18:11:06 +0000
Manifest next update: Fri 02 Oct 2026 18:11:06 +0000
Files and hashes: 1: LGwzUxcjbq9-wb2ocqMqu3uyOjM.roa (hash: cDH6YJZW5QqvmFNmhrhTy7ZODICEHh2BK7oCwwTt9+E=)
2: Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl (hash: 4o0XzT2e+lMgpDLTZ9OSTuJ8nXm/9eMgJMZRs3I4W/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:a9:b5:3d:84:99:83:df:93:4a:01:7e:84:bd:c2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321fc56a7c1627d7dfc430fa1d612919b501455f
Validity
Not Before: Oct 1 18:11:06 2026 GMT
Not After : Oct 2 18:11:06 2026 GMT
Subject: CN=663dbc19b523f546844c68a183b68790a179d375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:0e:5f:5a:96:12:4a:09:69:b5:1d:f3:5e:
13:fa:31:a9:ec:2e:d7:c5:f2:f0:95:ff:b1:b1:7a:
aa:52:7f:ee:da:cb:e5:21:6c:ee:bf:69:f3:91:f7:
1c:8a:fb:22:f5:57:62:1e:94:a4:90:78:94:f8:b9:
6e:19:35:d5:58:65:46:0f:39:bd:c4:dd:df:78:89:
a6:18:e7:d8:0c:35:aa:ca:7f:13:36:fc:ae:68:eb:
30:96:d0:24:b8:5a:10:34:63:09:a9:25:94:ee:11:
d1:1b:dd:0b:0b:27:c3:61:1e:cf:d5:e3:46:8f:aa:
c3:34:8a:d2:3d:72:c1:e4:cc:56:ee:f7:71:70:7c:
e3:41:e7:1f:7e:81:58:94:48:ea:0c:8f:5d:69:f5:
11:e2:d1:a9:aa:72:11:53:c3:c7:bf:00:64:fe:48:
8c:27:7a:8c:ef:ab:5d:66:58:fd:06:88:67:c8:44:
1d:da:2f:5c:f7:fd:ca:3f:dc:b5:dc:db:3c:65:ec:
36:fe:3e:06:f2:d3:aa:6c:2d:99:65:0a:ce:a7:db:
c1:bd:8d:48:b2:03:65:db:fe:23:61:ce:fd:61:80:
9f:3a:3f:7f:6b:53:3d:d5:e8:98:7d:73:a1:26:08:
2b:b5:0b:59:79:28:8d:7b:0c:5e:d1:b5:06:d6:e6:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3D:BC:19:B5:23:F5:46:84:4C:68:A1:83:B6:87:90:A1:79:D3:75
X509v3 Authority Key Identifier:
keyid:32:1F:C5:6A:7C:16:27:D7:DF:C4:30:FA:1D:61:29:19:B5:01:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cf:81:d2:79:94:79:81:98:e3:3e:85:9f:3e:1f:99:97:e2:
18:de:3e:1a:e9:73:85:ac:cf:c2:71:b8:21:63:ec:bf:0e:9a:
2d:8e:ad:7b:2a:50:f7:38:0a:ed:61:e5:59:dc:10:21:a1:87:
00:bd:ea:0a:c0:49:4a:10:90:45:09:7b:bc:c2:78:2e:65:05:
3f:7d:1f:6c:59:b4:4e:69:9d:d2:55:82:c9:ab:15:a2:96:92:
0e:39:17:75:3e:ae:b3:5d:da:ec:18:59:23:32:f3:db:14:0c:
b0:14:a0:b4:65:92:53:fa:33:71:e6:0b:8f:b7:57:02:c2:80:
cd:e5:76:29:15:97:3b:cb:b1:fe:27:49:ef:17:a5:af:8e:5f:
d5:9d:6d:57:dc:dd:b3:d3:bd:9c:a8:13:39:04:70:cd:35:e2:
e0:bc:89:dc:e5:64:64:83:01:49:79:78:6a:c3:84:7a:55:97:
80:4c:22:2d:ce:26:23:36:22:59:c7:75:46:03:ef:85:37:0e:
e1:ac:76:5f:5e:3d:37:af:37:04:52:c4:c3:5e:44:a4:ef:c6:
3c:f3:0a:77:04:99:83:c0:f3:b5:3a:05:b4:41:9b:ea:23:c9:
1e:6c:be:16:e3:af:4c:20:53:c0:4c:4a:e7:a1:09:da:91:7d:
c7:ea:2c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:43:26 2026 by rpki-client