Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: TOotBrRzufj06JQe652HTEW3lX1rUImTI55XsX6peZI=
Subject key identifier: 57:A7:06:CE:F0:D3:BF:94:D1:59:C5:B1:56:68:3F:50:89:42:52:7A
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 019F94DB78EF28A7A433047147DBCAC983D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 16:00:39 +0000
Manifest this update: Fri 24 Jul 2026 16:00:39 +0000
Manifest next update: Sat 25 Jul 2026 16:00:39 +0000
Files and hashes: 1: KUAPJbdgB7bFTMpgIeI0m91ZeU0.roa (hash: QW3H184Zc0T/jdKDA9ND/ZljCo0WBhJC9aqERQkXP2w=)
2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: vzg1DCwKDBIgyYe9JP0NSF95wFYhXt1tcEuhZNPNI9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:78:ef:28:a7:a4:33:04:71:47:db:ca:c9:83:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Jul 24 16:00:39 2026 GMT
Not After : Jul 25 16:00:39 2026 GMT
Subject: CN=57a706cef0d3bf94d159c5b156683f508942527a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:03:f4:2b:66:73:85:00:e6:e4:5e:5c:f0:
d3:91:a6:ee:84:5b:e4:b0:b0:30:22:18:75:fc:09:
1a:90:a2:ea:dd:40:ec:d3:ac:6c:4c:78:92:ba:09:
aa:0f:69:59:f9:9a:ae:c2:af:17:4c:70:2b:5d:11:
a0:5c:ed:0b:85:d7:a1:a6:75:e5:bf:73:e5:1f:6f:
18:c2:25:52:19:82:46:4c:68:14:4b:75:d5:bd:91:
d3:8c:be:75:67:e7:42:40:aa:45:36:e3:a6:ea:54:
26:c3:a2:ae:28:e3:4e:d8:d2:4a:3e:45:96:a0:18:
7d:64:9a:28:d3:de:d1:3f:db:ec:07:3b:a6:12:73:
5d:e5:34:6f:19:bf:b5:3a:e5:4e:ca:d0:a9:43:5a:
85:c2:38:f1:23:e2:17:8e:51:cb:f8:5f:44:90:7c:
1f:1b:0e:d7:63:69:1e:fa:af:bf:df:34:f6:54:51:
49:fd:75:01:9e:bf:80:e8:40:1f:df:ed:ad:d9:c2:
e6:b9:b0:b1:98:38:38:72:31:46:f2:82:03:60:11:
fb:4f:3b:ae:32:fe:d0:d2:e1:8b:18:0b:dd:46:81:
43:a2:39:9c:fc:9d:3b:25:8b:1d:29:0f:9f:c8:aa:
a4:06:59:a9:f3:5b:3f:24:04:6f:4e:fe:9c:90:80:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A7:06:CE:F0:D3:BF:94:D1:59:C5:B1:56:68:3F:50:89:42:52:7A
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a9:74:1f:fe:c1:1d:d8:fc:d2:08:bd:77:71:02:96:76:29:
09:af:e5:9c:48:b0:54:59:69:b3:ff:05:74:0c:bb:f6:50:84:
ef:9a:57:ef:be:a7:4c:d5:c0:4b:95:24:27:4d:1d:f9:49:a2:
dd:d8:20:8b:41:58:2f:67:91:5f:d9:27:14:7d:4e:dd:ff:19:
c0:e3:65:68:ce:7a:f8:ca:13:cf:86:11:44:d6:a8:19:39:d4:
74:f9:b0:ce:ee:31:92:ba:72:32:07:4e:86:af:2a:0d:94:38:
da:77:f0:b5:d7:8d:a1:8e:07:35:47:5d:6c:30:30:80:0a:65:
95:fa:a8:cd:42:8b:b3:96:76:00:c7:75:4f:be:bd:3f:04:e6:
b2:6a:b6:6f:d3:7e:40:99:b5:a6:75:69:ac:b7:cd:00:3d:f6:
43:a6:02:64:d7:fb:a1:3b:1e:0b:fe:a3:63:9d:96:b7:1e:a4:
f5:a1:e2:df:08:0d:c9:01:7f:c3:3f:49:56:f1:86:36:9d:a8:
44:25:59:2d:fc:f9:1b:f0:5b:85:e9:e9:10:9d:a4:8a:da:99:
5d:74:d2:29:fa:06:f2:d0:b9:ea:cb:d0:52:37:1d:f1:cd:5e:
c7:d9:c1:e5:64:b5:27:b4:8e:37:c3:8e:e2:07:f1:55:d6:22:
11:19:49:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:18 2026 by rpki-client