Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: 4m2nMwECsJlVC/UZZ8EuXPpTtbTMsYEaySolgVCEJX0=
Subject key identifier: A1:B2:21:9A:4A:46:36:69:CA:5F:7B:21:50:5B:30:74:70:2C:C0:1E
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 019D270451F3EA87804B78A0F2E473EB052A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:27 +0000
Manifest this update: Wed 25 Mar 2026 22:01:27 +0000
Manifest next update: Thu 26 Mar 2026 22:01:27 +0000
Files and hashes: 1: KUAPJbdgB7bFTMpgIeI0m91ZeU0.roa (hash: QW3H184Zc0T/jdKDA9ND/ZljCo0WBhJC9aqERQkXP2w=)
2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: k1DqUohKHitS2NCoQZHBpy61nzjRiiPfdhhEOV4MQNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:51:f3:ea:87:80:4b:78:a0:f2:e4:73:eb:05:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Mar 25 22:01:27 2026 GMT
Not After : Mar 26 22:01:27 2026 GMT
Subject: CN=a1b2219a4a463669ca5f7b21505b3074702cc01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:23:4d:6a:2d:ce:dc:d4:fa:34:1a:e5:f1:c8:
9d:5e:14:b5:df:86:3d:dd:80:36:68:29:57:69:b8:
79:24:56:00:72:60:e7:bc:1d:c6:0a:c3:3d:92:66:
16:36:7f:6e:3c:76:88:25:6c:5e:79:ce:29:b6:9b:
85:f1:e8:88:c2:7c:a9:85:c1:c2:ea:e1:e6:15:4f:
a5:ac:20:4d:32:e8:ee:d9:1e:61:ce:54:14:0b:08:
10:ac:d8:12:13:c9:a2:29:aa:f8:8b:a1:aa:61:fc:
b3:e2:fb:57:91:84:fd:4a:8c:3f:a0:31:c9:4b:c1:
b6:68:59:63:a1:f3:9b:d4:69:d2:b2:f9:ee:96:1c:
b4:80:60:d7:d5:c7:35:55:fa:a4:20:81:c4:77:78:
70:b2:7b:ae:d7:68:44:04:91:99:62:07:5b:c8:fe:
74:0b:aa:4f:97:0c:de:58:71:a3:2b:04:10:6f:b7:
ac:ad:f6:e2:7b:f0:12:bb:92:56:09:97:1d:65:ce:
15:72:55:00:97:09:76:7f:42:13:d6:b5:19:91:f3:
0b:44:3e:ac:a8:af:69:3e:f7:5c:87:99:79:41:0e:
e2:60:7c:6f:e5:9a:dd:ce:73:73:ce:7b:df:65:46:
a1:6f:e4:d3:d5:50:bc:d4:da:a4:15:22:b1:6d:c2:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B2:21:9A:4A:46:36:69:CA:5F:7B:21:50:5B:30:74:70:2C:C0:1E
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f5:a4:b0:e8:ac:e5:32:64:ad:81:2e:e5:19:19:d0:39:69:
f1:c6:c8:ca:a1:46:6d:aa:ef:c4:0e:e2:7d:82:d5:cb:6e:3a:
0c:65:92:86:c9:11:1d:59:73:3f:af:3c:f1:93:55:1a:4d:ed:
b0:49:b5:12:b1:28:12:1e:e3:f4:0f:52:94:7c:7f:ae:e8:a6:
43:25:67:2c:3d:e6:e0:87:92:0d:24:b8:72:0d:cb:4b:c3:0b:
85:03:95:15:ce:8e:fa:ec:76:36:ac:74:1f:36:8b:84:c7:b3:
53:a6:a3:5b:33:29:ac:32:36:93:e3:22:7d:42:14:b2:c4:b8:
81:23:94:62:1a:75:25:80:9f:ba:a6:88:f4:8c:f2:60:53:d9:
03:41:1e:5a:43:c4:cc:8b:8e:25:90:e9:39:63:97:c0:45:d6:
89:eb:f8:3f:26:69:10:a5:bf:8f:87:75:6d:db:69:ef:b0:42:
5b:a7:47:ac:3e:de:3a:e5:63:18:c3:58:fe:56:0e:b7:91:f2:
e4:ac:90:d1:9a:69:01:fd:cd:9c:f1:03:09:38:12:03:84:85:
97:23:a0:53:ef:51:42:84:ed:9b:e1:66:ff:e9:2e:63:4b:e4:
57:e4:21:7c:c5:4d:52:d5:ef:d6:64:f9:6c:83:09:28:6c:9c:
d2:94:e0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:12 2026 by rpki-client