Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: ggHCBL/LsVD9pGLG+c8jpGpNoQxb+1OwhhXarQWQRo8=
Subject key identifier: 11:21:5D:16:A2:87:9A:0A:22:F5:A4:82:5A:61:90:92:83:A3:9F:2D
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 019D2BBBE91055BC4F703213708E29F40F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 20:00:28 +0000
Manifest this update: Thu 26 Mar 2026 20:00:28 +0000
Manifest next update: Fri 27 Mar 2026 20:00:28 +0000
Files and hashes: 1: anOK_t3CyTqq8NlqFB7A075gooA.roa (hash: UdYKN437GE/t4do7Cb6fa4jEkY53zklvjYRy+PQ0Xrg=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: Eq6U7HEP3j9UxcYhAtaOhdOfcgXDhsLfJuuJB2c/j0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bb:e9:10:55:bc:4f:70:32:13:70:8e:29:f4:0f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Mar 26 20:00:28 2026 GMT
Not After : Mar 27 20:00:28 2026 GMT
Subject: CN=11215d16a2879a0a22f5a4825a61909283a39f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:71:67:24:54:3f:78:bd:4c:30:cb:48:d0:
79:dc:90:04:7d:de:d8:f9:b4:f1:d6:5a:a9:38:ae:
e8:dd:5d:da:fa:6b:04:c9:7c:14:bc:e3:4d:c3:e1:
5b:2f:a3:d6:af:c8:1d:19:cd:3c:39:ee:b9:96:4c:
ac:e8:46:75:e5:28:58:42:d9:b4:0b:2c:ed:a1:58:
00:8a:a4:cd:2d:d8:7b:8e:51:b4:e4:a3:e6:2a:aa:
61:4b:f4:1a:57:0a:16:39:05:d6:09:4f:1d:cd:19:
db:98:4f:70:a7:4d:0d:ab:38:4a:88:bb:55:29:66:
b1:50:19:c9:32:e3:36:66:90:9f:f5:4a:d6:71:26:
f3:2b:a3:59:7f:a3:b1:04:1d:1d:cf:56:b5:d9:81:
f8:a2:01:7d:e2:a5:3a:ac:db:ed:74:16:62:ee:27:
18:7a:fe:0d:be:64:90:a0:ee:79:d9:1f:4d:af:98:
5a:09:f5:96:b7:ec:be:f8:a0:9b:66:57:66:d6:3f:
71:dc:d1:e8:e4:43:5b:aa:91:0e:32:12:04:7f:e5:
23:47:05:cb:13:83:0e:e4:67:6b:1c:54:5f:87:e1:
61:64:56:50:d5:34:7a:fb:f4:7b:19:d0:12:8c:b4:
0b:fc:5e:98:26:fb:09:9f:fb:b9:98:8e:7a:82:bf:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:21:5D:16:A2:87:9A:0A:22:F5:A4:82:5A:61:90:92:83:A3:9F:2D
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:66:4b:7b:68:ea:6c:67:4d:71:33:78:e0:fe:6b:5e:c4:9a:
5b:2d:34:1b:ac:12:2d:2f:a2:2f:77:7a:02:4e:f3:c4:62:30:
a6:65:da:4e:72:37:cd:3d:94:f8:4b:e5:cc:e7:bb:60:8e:6f:
fc:e1:38:e2:2c:1b:29:66:3a:25:c7:37:7f:f9:5c:a7:9f:74:
7a:14:23:00:fe:ea:07:2a:f2:65:29:c8:8a:58:18:63:4d:0e:
ff:24:21:18:37:ef:b1:98:60:22:e3:40:1a:32:76:16:54:98:
14:5e:23:fd:6a:53:2e:57:d4:14:00:29:10:f9:d6:b9:49:82:
e2:eb:ed:62:4c:fd:e5:7d:24:e9:f4:9f:8b:85:c1:cf:ee:ae:
5e:8a:3c:7e:c9:c3:eb:70:97:4d:de:7e:37:fc:39:cb:c4:d5:
27:68:9f:85:d6:79:03:2d:c5:2d:47:f5:91:7e:a7:6b:ea:46:
f9:c4:0b:c2:c2:5d:66:38:f1:28:d0:d4:15:bf:e9:ce:f8:89:
01:ab:50:95:d4:fc:0c:ca:6b:cc:23:e1:51:15:ff:cc:58:28:
37:ad:10:2c:98:80:4e:1b:77:dd:04:f2:e6:56:ca:1f:2f:62:
92:d8:17:ed:41:33:a0:0e:96:e1:18:2c:84:f3:bc:09:25:c4:
1b:14:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:56:15 2026 by rpki-client