
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
File: fhxn8ySb-H1syWulL_G9wOeJtBk.mft (raw, json)
Hash identifier: mXU3PqZsrOYoJj3GM/sXuMLtD9QBO3qbPYgnTEdJrw4=
Subject key identifier: 73:52:17:73:21:7F:81:66:7F:2B:1F:42:AF:75:2B:8E:9C:15:51:C5
Authority key identifier: 7E:1C:67:F3:24:9B:F8:7D:6C:C9:6B:A5:2F:F1:BD:C0:E7:89:B4:19
Certificate issuer: /CN=7e1c67f3249bf87d6cc96ba52ff1bdc0e789b419
Certificate serial: 019FAC75A4F681118E6E759EA2FE3209792C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:18 +0000
Manifest this update: Wed 29 Jul 2026 06:00:18 +0000
Manifest next update: Thu 30 Jul 2026 06:00:18 +0000
Files and hashes: 1: fhxn8ySb-H1syWulL_G9wOeJtBk.crl (hash: 3b4ODqSgyqdA3S8isHaiQxzRGvajDQRTBojOkdB2bvY=)
2: uhJ9E2xHD6VE0XyeXFxt9rFbjbs.roa (hash: ByrmQQLK2SZe1G5CS63vjY0S33+wHwZPNkpO65iKwLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:a4:f6:81:11:8e:6e:75:9e:a2:fe:32:09:79:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1c67f3249bf87d6cc96ba52ff1bdc0e789b419
Validity
Not Before: Jul 29 06:00:18 2026 GMT
Not After : Jul 30 06:00:18 2026 GMT
Subject: CN=73521773217f81667f2b1f42af752b8e9c1551c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:69:e3:14:bd:da:e0:fd:39:30:65:74:06:
9c:02:8a:5b:8c:79:bc:44:ab:60:00:12:c0:8d:9b:
7a:07:94:90:ae:ea:f8:73:9a:99:1a:bc:a4:a1:c8:
05:86:96:14:6b:d9:ed:66:56:fc:dc:7a:b4:79:4e:
3b:4d:cb:92:08:8e:80:97:4d:1c:87:08:b9:2f:9c:
d5:3b:9c:49:70:6c:3c:16:6d:00:78:2d:7a:c6:77:
a6:ca:8d:74:bf:c9:e2:84:95:66:b6:63:9b:de:23:
5b:eb:68:63:92:04:23:4f:ff:db:ce:ca:2f:51:72:
3d:36:c6:1b:7c:fb:3c:22:54:8d:8b:31:07:de:c9:
61:1b:87:3c:d5:f9:1e:57:f8:93:3f:d0:ab:7e:52:
62:0e:d0:24:8c:5f:96:f6:cc:b2:7f:43:4d:b7:6e:
7b:48:ee:4c:70:ca:96:63:08:0d:ca:fd:ea:fd:b9:
7b:4b:6f:40:d0:94:3d:3d:63:4c:c0:08:5d:77:c5:
e1:e8:61:45:c9:ea:7a:44:f6:17:ca:18:32:01:57:
04:d1:e7:05:ca:d3:06:51:1e:59:c4:73:cd:d2:1a:
15:f2:0b:e7:2e:d6:67:65:d7:e1:06:34:de:37:01:
44:80:e6:74:62:e9:62:d1:d2:2c:da:75:7f:f7:18:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:52:17:73:21:7F:81:66:7F:2B:1F:42:AF:75:2B:8E:9C:15:51:C5
X509v3 Authority Key Identifier:
keyid:7E:1C:67:F3:24:9B:F8:7D:6C:C9:6B:A5:2F:F1:BD:C0:E7:89:B4:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a1:d1:0d:96:c5:c5:61:e6:31:d2:54:ce:a8:b2:31:cf:af:
6b:91:95:33:6d:e4:37:9e:66:7d:7d:b5:9e:20:1d:59:a2:64:
e3:30:f0:8d:07:7f:59:1e:1d:02:9c:88:9d:c7:71:5e:17:98:
42:a0:35:a6:57:05:6c:52:53:30:a4:b6:73:5c:98:f0:e0:d5:
f5:2a:38:1f:dd:13:f7:3d:49:3e:1b:b7:c4:c0:4b:cc:dd:23:
f1:c0:18:2a:07:1a:12:97:18:e4:49:9c:cd:28:b6:8c:51:ae:
07:45:a8:ab:4d:9a:c3:4b:6d:cf:d7:05:2f:ff:0d:e8:68:ee:
1c:e8:e1:71:a5:d8:20:1e:d8:ed:2e:2a:91:d4:bc:88:1c:9c:
f9:23:30:b8:cb:8c:10:9c:e2:e7:42:02:83:57:f7:f1:22:d6:
50:f3:b9:44:ad:2e:06:64:1c:21:44:7d:fb:e0:18:3d:eb:b0:
89:f7:e0:a1:3c:cf:3f:5e:b5:7f:2b:c9:23:c9:10:ea:62:1f:
8c:d2:02:8a:44:7b:3d:6d:39:73:91:25:81:2d:ca:40:d7:84:
33:f6:dd:a3:43:5f:86:87:38:5b:66:b9:c1:95:c8:99:16:82:
cb:e0:68:c3:6a:15:76:8c:a0:d7:9a:18:39:2f:2e:0c:c4:4e:
69:6e:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:25:46 2026 by rpki-client