Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: e+257aNPQfDwGvsuhJb1fB4aSqLmyPQt/9oofOcgTEU=
Subject key identifier: F6:B1:51:6D:52:DC:BA:7D:CD:71:4B:F8:6C:A2:52:34:68:C5:E3:0C
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 019E20FFE40E634479437892E25FC1F8B8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 11:01:41 +0000
Manifest this update: Wed 13 May 2026 11:01:41 +0000
Manifest next update: Thu 14 May 2026 11:01:41 +0000
Files and hashes: 1: anOK_t3CyTqq8NlqFB7A075gooA.roa (hash: UdYKN437GE/t4do7Cb6fa4jEkY53zklvjYRy+PQ0Xrg=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: Ax4qH5iQe2YNupDm83icnEQSC/ZXq+uTRpVY2KwyOhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:e4:0e:63:44:79:43:78:92:e2:5f:c1:f8:b8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: May 13 11:01:41 2026 GMT
Not After : May 14 11:01:41 2026 GMT
Subject: CN=f6b1516d52dcba7dcd714bf86ca2523468c5e30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:3c:50:31:7c:15:80:33:d7:28:66:dc:7e:
2a:78:ae:39:6b:75:57:a0:58:de:b0:8b:2f:aa:6c:
3a:38:9b:0d:f6:e7:8f:3e:c3:a6:b8:0e:ad:a3:82:
41:0a:e9:f7:cd:19:52:19:f9:9a:39:45:7f:af:4c:
85:31:19:e9:c7:d5:dd:af:d3:40:94:05:d1:37:57:
37:66:b7:a2:c7:e7:5e:b6:12:a6:da:8d:05:7b:bd:
f7:52:9f:56:fc:27:59:2d:65:ac:1a:bd:0f:42:38:
27:3d:51:64:7c:a6:8f:87:71:3b:8e:68:03:ed:05:
76:7c:9e:b4:7e:e7:28:bb:ca:14:77:e4:85:53:ab:
56:a2:99:95:2a:83:05:38:e8:66:44:cc:e7:86:28:
ce:5a:28:e4:8c:04:ed:d5:ce:94:18:e6:01:15:aa:
13:be:6b:8a:7c:db:e0:a0:2b:5f:5f:10:0d:98:ce:
be:61:35:41:1b:c8:75:43:a7:a8:fb:f7:6f:c0:94:
9a:ac:ef:7b:9d:d0:b0:ef:ea:e6:47:d8:e8:5d:f8:
30:b2:7e:47:fc:ad:1b:95:7b:96:09:7d:11:57:35:
6e:1f:e6:81:8d:f8:19:8b:f8:f2:a3:0b:b2:42:18:
9e:47:65:56:0f:2f:00:bb:d6:8f:83:c7:ac:1d:7e:
99:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B1:51:6D:52:DC:BA:7D:CD:71:4B:F8:6C:A2:52:34:68:C5:E3:0C
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1d:fc:dc:58:f0:e4:3c:ef:f0:ff:9b:da:5c:f0:73:91:cc:
26:e7:b7:24:a1:c1:23:2a:04:ff:97:20:91:7a:c6:ac:b7:34:
3a:b2:5f:e0:ce:9c:8b:81:1e:b2:e2:d6:39:14:fd:45:48:b8:
98:46:71:71:f2:ee:57:26:a3:b1:dc:cb:ea:f4:bd:7a:e7:6a:
c2:7e:da:70:55:33:1f:a9:10:35:e5:dc:2c:b9:e2:9c:2a:b1:
b5:38:cf:77:6b:15:32:48:cc:68:74:bf:ed:49:e8:38:ec:85:
bf:c4:14:26:3b:7d:c0:64:1e:5e:74:7a:ae:fc:ac:ed:02:5e:
ee:a0:38:9c:b1:47:8b:70:46:cc:d0:b1:e6:24:c3:43:0f:61:
c2:b5:58:7a:94:79:0e:d2:b9:f0:85:65:50:5c:9c:42:9f:75:
4b:2b:34:2b:12:5b:40:13:29:e9:e5:72:5d:21:f5:67:6a:e8:
23:1c:1b:a6:d9:ed:5e:eb:a0:46:19:93:e6:95:56:f9:e7:47:
53:e3:ef:95:a3:89:48:ec:89:73:8c:94:43:72:77:7e:f7:49:
0a:15:10:8d:5b:83:cd:06:93:86:d5:61:62:61:52:3f:c5:f7:
82:60:ac:01:d6:cb:fe:65:23:6e:a7:87:77:0b:20:68:d5:ef:
6a:c3:6f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:58 2026 by rpki-client