Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: Q6UVxMDK1OBgcjO8rhlmTitNvk9Kbh/btJubWjyz9Zw=
Subject key identifier: 6D:86:F2:46:93:E1:64:9B:DB:27:7E:5E:0C:B6:CE:03:8E:8D:3F:E8
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 019F93C94C0DABF2D518A5A68685969FFF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 11:01:10 +0000
Manifest this update: Fri 24 Jul 2026 11:01:10 +0000
Manifest next update: Sat 25 Jul 2026 11:01:10 +0000
Files and hashes: 1: anOK_t3CyTqq8NlqFB7A075gooA.roa (hash: UdYKN437GE/t4do7Cb6fa4jEkY53zklvjYRy+PQ0Xrg=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: Czi7+X/LvEkPgNK9b0EJFGLcNSQyw/OpD74drYMSwCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:4c:0d:ab:f2:d5:18:a5:a6:86:85:96:9f:ff:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Jul 24 11:01:10 2026 GMT
Not After : Jul 25 11:01:10 2026 GMT
Subject: CN=6d86f24693e1649bdb277e5e0cb6ce038e8d3fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:73:d4:b2:b5:19:ac:15:f5:ce:97:2b:c1:48:
0d:4b:38:fe:32:52:02:9a:31:79:c7:73:3f:8e:bd:
53:bf:b0:c0:35:bb:64:2b:70:be:1f:26:cf:87:64:
9e:f6:2b:4a:f8:72:97:06:cf:92:dd:5e:d5:02:b7:
17:ea:15:11:8e:6a:84:f3:95:a0:63:c6:98:c6:78:
e1:5b:23:8e:a6:71:71:8f:c0:76:c8:28:3a:3f:74:
41:d0:6b:00:07:6d:92:ad:79:bf:69:8c:9c:4c:36:
2a:1b:36:d2:7d:20:c3:8c:1d:7d:54:87:0f:f1:50:
e0:53:13:52:2c:d2:fb:c5:18:52:56:a3:5c:7e:a7:
ea:2b:cf:e2:20:ed:cd:a6:55:3b:34:42:71:b7:99:
37:20:6b:e5:d4:04:e2:a3:cb:a0:24:d1:a3:8b:76:
70:ae:1b:6d:40:93:fb:bc:50:de:2c:1a:22:d0:b5:
ea:30:bd:b7:65:e8:38:1c:de:19:b1:17:60:b2:f8:
36:a1:f2:85:0c:90:b0:17:b2:f4:8b:90:70:ea:8a:
de:bc:a7:6e:d9:5f:db:5e:24:66:21:57:5b:af:39:
2f:13:3a:cc:24:62:09:8a:93:a9:4a:5b:42:1d:cf:
17:33:25:49:ed:66:e0:24:c8:26:3a:94:27:c3:9c:
7d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:86:F2:46:93:E1:64:9B:DB:27:7E:5E:0C:B6:CE:03:8E:8D:3F:E8
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:56:44:8b:0e:a3:68:d4:f4:8f:c7:63:04:58:c8:28:57:51:
88:c4:c2:b0:f3:1c:5e:ef:05:11:d7:aa:a8:40:65:df:36:61:
35:f4:0d:db:47:70:04:1e:2a:be:f9:1d:f2:5f:ce:24:c3:a0:
e2:af:86:bb:3d:07:f9:82:af:01:03:74:35:1f:be:64:2d:91:
09:ad:24:e5:13:d8:93:a0:b6:48:6b:56:4a:72:c8:ba:1d:4d:
eb:29:4a:2f:97:a9:e6:96:17:54:6e:4e:aa:4a:15:65:9c:1d:
2f:8b:0f:21:f0:e3:f8:f9:5f:20:19:19:ac:1c:de:e2:d7:d8:
c5:10:86:90:a8:4c:f4:6d:9f:a0:06:64:f6:63:3f:8d:4e:4b:
39:18:3d:5d:af:fb:69:59:c6:c8:2d:87:91:21:4c:7e:7a:b6:
3b:38:78:d6:bc:bf:7c:9e:22:03:4f:4a:20:78:c5:07:96:d4:
c7:ac:74:43:e3:b4:65:13:48:54:9f:81:42:ae:e9:1e:04:b1:
58:76:91:bd:40:7a:57:52:f2:63:3d:2f:eb:f0:a5:45:16:64:
fb:fe:91:4a:17:cc:62:e8:93:73:68:3b:e9:a5:59:a3:ad:1d:
98:18:ab:7b:3e:b1:32:44:bd:7e:d2:75:53:3d:cf:91:7b:e8:
fa:e9:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:21:49 2026 by rpki-client