Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: MfjtENEO9bnmsdnLM2KfABK5anTkkKsMs51UyS2GLj8=
Subject key identifier: 8B:C0:91:31:65:8C:3F:71:8A:98:C5:2D:7B:0B:97:A1:62:38:08:29
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 01A12D3342CCD159C0570CC3F416A4849969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 23:01:36 +0000
Manifest this update: Sun 11 Oct 2026 23:01:36 +0000
Manifest next update: Mon 12 Oct 2026 23:01:36 +0000
Files and hashes: 1: anOK_t3CyTqq8NlqFB7A075gooA.roa (hash: UdYKN437GE/t4do7Cb6fa4jEkY53zklvjYRy+PQ0Xrg=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: jMzV8YNKLV350FU1oP4TK+t7mJjPlm9UsUe2aSTzwuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:33:42:cc:d1:59:c0:57:0c:c3:f4:16:a4:84:99:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Oct 11 23:01:36 2026 GMT
Not After : Oct 12 23:01:36 2026 GMT
Subject: CN=8bc09131658c3f718a98c52d7b0b97a162380829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:8b:f7:5a:dd:33:e4:e4:3f:57:17:51:e5:
40:24:a3:c7:e0:a9:f3:41:9e:50:6b:01:39:14:87:
2c:05:3b:07:03:14:b9:b1:31:29:ad:25:48:d7:e8:
3e:bb:e0:12:ac:90:41:9d:b3:1e:f9:6f:0e:d3:eb:
76:f7:d5:f3:97:66:a8:86:47:ab:fb:f5:b8:56:73:
a4:cc:c2:88:6f:88:b6:e6:99:b2:69:a9:ed:31:70:
8c:d5:45:5b:07:2d:4c:c8:19:7d:15:db:a6:8f:51:
f5:f4:d3:44:d7:e8:f5:e3:6b:66:fa:c1:00:5c:13:
8b:55:36:78:d5:6c:81:48:a6:d3:e1:cc:b3:11:fa:
31:c3:8e:81:f2:04:1e:93:2b:d7:d8:62:fe:dd:b9:
75:cd:7d:9f:ef:f0:f4:de:2f:0c:b0:e9:65:01:37:
cb:67:ed:55:ac:4a:55:6b:b4:4c:8f:6b:dc:9a:13:
15:7e:5d:5d:93:08:12:9a:ef:bd:18:e1:32:da:fa:
82:10:b0:b0:25:8a:17:c3:1e:3d:7b:bd:fa:b0:bd:
ed:30:3d:23:2f:1d:a3:a8:c4:c3:63:03:84:22:63:
bb:b9:8d:f8:12:ff:f3:ca:44:ca:20:e6:b3:c8:4d:
14:4f:5b:c4:48:8f:af:23:cc:9f:28:93:d8:24:b2:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C0:91:31:65:8C:3F:71:8A:98:C5:2D:7B:0B:97:A1:62:38:08:29
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:48:a2:d1:09:d3:b5:8d:6e:4c:97:c9:a9:6f:e1:5a:b5:f1:
e1:5d:8b:7b:1c:a0:dc:f3:6b:22:86:af:84:ff:28:23:e1:1e:
4e:4d:ab:98:b3:3e:35:fa:36:c4:d4:d6:71:3e:c5:68:7a:f9:
aa:44:8a:60:3c:3e:55:a9:5e:89:07:88:6e:c8:bf:f9:11:ba:
7a:d5:1b:67:8a:a5:ce:e5:09:e6:7a:88:04:a2:05:e6:28:dd:
88:3c:91:1d:02:cc:8b:91:44:e2:e7:d6:52:ac:f9:61:5c:e6:
a7:45:56:b3:b4:50:53:35:3a:1f:e4:a0:bc:f3:e3:33:7a:c3:
5e:96:b1:1d:42:a4:b6:90:58:48:5a:7b:c7:03:28:f8:38:4e:
fe:90:b1:aa:fa:42:a7:55:f3:89:af:57:fd:cd:e4:d7:c7:ea:
87:df:e4:de:96:87:e0:82:e1:fd:95:67:4d:6a:56:54:c5:a6:
83:8a:6d:d8:e8:b7:65:c9:07:74:66:68:27:c2:49:15:96:f3:
03:85:f7:a7:1a:62:82:1e:8a:f5:05:40:6f:b4:77:02:92:26:
82:57:da:01:ff:8e:38:e4:d1:ac:e8:5a:d0:0e:33:e0:4f:5c:
83:6a:f8:64:a3:de:d7:49:aa:bf:c5:e0:87:ff:02:83:4a:82:
90:be:b0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 10:07:26 2026 by rpki-client