Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: Jt1DvdQzrwuk5c9b+X2wBvyI3D5T/c5yXYS6j5GET5Y=
Subject key identifier: 32:AB:8E:35:55:6B:CF:3A:08:78:5B:3C:E6:77:D9:4E:FD:3C:18:14
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 01A0EAAECE630205E2DD29BE0DB6F84CDF6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 01:01:59 +0000
Manifest this update: Tue 29 Sep 2026 01:01:59 +0000
Manifest next update: Wed 30 Sep 2026 01:01:59 +0000
Files and hashes: 1: KUAPJbdgB7bFTMpgIeI0m91ZeU0.roa (hash: QW3H184Zc0T/jdKDA9ND/ZljCo0WBhJC9aqERQkXP2w=)
2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: 78cFa6YqrOt527vHQl1AwWPS7ATDnTRfRhZ3r8UsvDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:ce:63:02:05:e2:dd:29:be:0d:b6:f8:4c:df:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Sep 29 01:01:59 2026 GMT
Not After : Sep 30 01:01:59 2026 GMT
Subject: CN=32ab8e35556bcf3a08785b3ce677d94efd3c1814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:49:2b:9f:68:58:8f:ad:a1:86:ac:c5:20:
14:b0:41:11:f1:90:97:c2:fd:96:12:14:de:cf:0c:
25:34:8c:8b:67:24:19:cd:a3:d4:7e:97:5f:9f:36:
97:b0:1a:6a:83:b5:a4:e9:6c:ce:a3:6a:d5:00:3a:
01:a6:e9:0a:f0:e8:ea:b7:2a:86:ed:e5:dc:90:00:
68:5d:f3:5f:6a:60:e8:37:df:3c:12:16:02:a4:cf:
18:04:bb:13:00:46:7e:3b:66:04:7f:9a:0c:4b:5e:
c8:64:82:14:86:3b:6c:2a:ed:5f:d9:fe:ed:0a:40:
a1:e7:d2:e2:2c:1d:06:b0:48:3c:44:2f:6e:fc:3a:
dd:02:26:bc:6a:e2:c5:35:c2:2c:09:20:4f:74:02:
16:78:6d:17:a0:50:d3:16:ca:4a:14:51:40:f1:f8:
96:13:3a:25:89:cc:f8:7a:bf:ba:8f:b7:b5:fb:29:
98:7e:3e:00:8b:2c:5f:47:83:dd:09:bf:62:ac:04:
66:36:0d:b6:a8:d6:33:1c:e0:35:9c:ff:c1:b2:07:
e7:7d:8f:a8:0e:f8:2c:e9:15:c6:9c:5e:6f:c2:96:
80:68:32:7b:1a:b5:51:8c:ac:45:87:87:9d:d1:39:
00:bf:e5:36:bc:a8:11:6f:b6:35:dd:ff:f2:db:26:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AB:8E:35:55:6B:CF:3A:08:78:5B:3C:E6:77:D9:4E:FD:3C:18:14
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c5:98:7e:1c:09:17:44:46:0b:3d:fd:d2:cd:a6:54:85:7c:
ab:11:aa:75:1b:34:fd:c4:d3:13:4f:92:de:74:6d:a5:e0:36:
bf:a5:4b:74:31:52:a2:e3:07:35:e9:b0:84:f2:d3:77:16:47:
e3:fa:ce:41:5e:eb:2d:23:ee:19:36:2f:0e:5e:ea:f4:3a:15:
41:92:82:58:6e:2c:dd:b4:02:02:a3:79:ca:88:b1:7f:84:08:
66:50:53:54:54:7e:40:e0:3b:a6:c0:f1:ef:ff:53:72:72:2d:
13:bf:75:cf:05:be:01:56:56:0d:68:17:a3:66:50:83:45:bc:
3a:cc:5f:a1:33:fd:ee:67:1c:40:71:83:18:b3:bc:c8:1b:38:
54:34:27:2c:bd:43:c5:fa:e2:e5:80:72:40:89:eb:f7:0e:47:
b1:cf:0a:e3:57:ba:0f:21:75:61:29:5b:4b:e3:40:c1:26:29:
b2:8b:fc:89:ba:3e:76:cf:86:5e:fd:57:25:ff:89:56:c4:37:
38:ec:74:23:70:26:3e:60:23:1a:d6:91:64:7a:28:a7:db:be:
0b:51:35:9a:d0:2b:82:51:49:02:43:7a:87:35:0b:2e:8e:02:
73:9c:78:75:d2:85:67:04:2d:dd:3a:64:ac:e3:67:20:a5:bf:
65:5c:04:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqrs5jAgXi3Sm+Dbb4TN9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZDg0NzNlM2Q5ZWQ0MjNjNDFlN2E4NThmNGMwZjBmYjgw
YzA3YmEwHhcNMjYwOTI5MDEwMTU5WhcNMjYwOTMwMDEwMTU5WjAzMTEwLwYDVQQD
EygzMmFiOGUzNTU1NmJjZjNhMDg3ODViM2NlNjc3ZDk0ZWZkM2MxODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGlJK59oWI+toYasxSAUsEER8ZCX
wv2WEhTezwwlNIyLZyQZzaPUfpdfnzaXsBpqg7Wk6WzOo2rVADoBpukK8OjqtyqG
7eXckABoXfNfamDoN988EhYCpM8YBLsTAEZ+O2YEf5oMS17IZIIUhjtsKu1f2f7t
CkCh59LiLB0GsEg8RC9u/DrdAia8auLFNcIsCSBPdAIWeG0XoFDTFspKFFFA8fiW
Ezolicz4er+6j7e1+ymYfj4AiyxfR4PdCb9irARmNg22qNYzHOA1nP/BsgfnfY+o
Dvgs6RXGnF5vwpaAaDJ7GrVRjKxFh4ed0TkAv+U2vKgRb7Y13f/y2yb0+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKrjjVVa886CHhbPOZ32U79PBgUMB8GA1UdIwQY
MBaAFHzYRz49ntQjxB56hY9MDw+4DAe6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODct
OTc1NzY5NGQyOTFkLzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODctOTc1NzY5NGQyOTFk
LzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8WYfhwJ
F0RGCz390s2mVIV8qxGqdRs0/cTTE0+S3nRtpeA2v6VLdDFSouMHNemwhPLTdxZH
4/rOQV7rLSPuGTYvDl7q9DoVQZKCWG4s3bQCAqN5yoixf4QIZlBTVFR+QOA7psDx
7/9TcnItE791zwW+AVZWDWgXo2ZQg0W8OsxfoTP97mccQHGDGLO8yBs4VDQnLL1D
xfri5YByQInr9w5Hsc8K41e6DyF1YSlbS+NAwSYpsov8ibo+ds+GXv1XJf+JVsQ3
OOx0I3AmPmAjGtaRZHoop9u+C1E1mtArglFJAkN6hzULLo4Cc5x4ddKFZwQt3Tpk
rONnIKW/ZVwEWg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:25:10 2026 by rpki-client