Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: Yr6V5a5sCd3q1aJrucOBBQWyGuM/2IFjhRGB+a5sXb4=
Subject key identifier: BB:A6:F5:2C:94:51:A1:42:84:33:12:AD:E9:4A:FD:6B:86:5E:BC:E4
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 019D9E1AD777CFF0A0A37A0C79199EF02E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: 047C
Signing time: Sat 18 Apr 2026 01:00:52 +0000
Manifest this update: Sat 18 Apr 2026 01:00:52 +0000
Manifest next update: Sun 19 Apr 2026 01:00:52 +0000
Files and hashes: 1: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: jzMibC8EfmfMNjJz1JUAOKWy7CEN5cRIjbf8I9SbbMc=)
2: l1nrHCg1JaRGqWglwBj3oSy_fj8.roa (hash: y4C2wS/8hOK+ga53wXjcr5tBKnj/Yfql4LK0XM8fOmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1a:d7:77:cf:f0:a0:a3:7a:0c:79:19:9e:f0:2e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Apr 18 01:00:52 2026 GMT
Not After : Apr 19 01:00:52 2026 GMT
Subject: CN=bba6f52c9451a142843312ade94afd6b865ebce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:19:f1:6e:e1:c7:f2:23:6c:c8:70:02:e6:
2a:48:05:53:95:07:7b:c6:fa:7c:b3:bc:7f:3f:a5:
26:a4:f2:7d:56:61:5d:87:df:95:87:c5:12:57:d2:
42:04:dc:ac:9d:71:7e:95:23:6b:88:39:bc:4e:ef:
61:eb:67:a2:de:a1:cf:ab:26:b6:03:b8:89:5a:a8:
99:c7:03:15:66:6e:cd:6b:cb:0d:ab:a3:0d:e7:b4:
68:df:20:ff:15:f0:04:9a:d9:28:6f:c1:db:8a:21:
c4:90:e5:65:2f:98:17:ce:03:8e:0e:29:30:33:22:
79:47:53:bd:11:31:db:26:c1:07:3d:07:ed:f6:7e:
e5:87:a1:9b:0e:3d:68:40:b9:a6:81:7f:44:40:c9:
6d:5b:3a:55:0a:61:01:3b:a1:ec:ea:88:e2:fc:17:
98:e4:5d:73:4b:58:91:db:3c:c1:f8:72:2b:c5:85:
88:86:df:e6:fe:2a:ba:cb:7a:9e:68:73:35:d9:a3:
46:60:22:17:d5:81:a5:c7:53:e2:93:04:95:9d:6c:
90:ab:58:5e:d2:c0:1c:0d:47:fd:44:60:43:87:ea:
e9:64:56:c1:b9:15:dd:5d:ca:d9:ee:5c:6f:61:44:
1e:12:8c:ab:38:90:0c:95:bc:14:66:ed:f0:8c:1b:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A6:F5:2C:94:51:A1:42:84:33:12:AD:E9:4A:FD:6B:86:5E:BC:E4
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ea:00:2d:9c:6f:be:ac:3d:2c:6a:42:c9:72:2a:5e:a9:d8:
37:45:99:b1:03:f3:94:42:70:85:36:df:68:21:e5:cb:8b:8a:
bd:6f:a1:e1:37:24:af:ca:08:6c:34:75:a9:64:50:65:6d:55:
db:da:8d:7f:89:e4:a4:2f:5c:6e:f9:51:ce:d1:33:ae:b1:43:
38:a4:35:2a:c5:bd:3d:d9:8f:38:c1:b1:f2:00:82:dc:5e:b5:
7c:4e:15:4d:db:d9:7f:f5:b2:64:04:8e:f4:00:b5:71:c0:84:
0a:a3:82:41:01:26:4e:8d:83:12:8b:75:fc:ab:20:01:d5:7f:
00:5c:f7:d4:55:9d:29:11:5b:95:34:c3:5d:8f:bc:2a:6a:ec:
ae:cf:3a:8e:ac:72:c1:50:50:f0:8b:ba:ce:1c:59:36:55:22:
f3:be:94:a2:18:38:42:b1:ea:2a:a3:cf:d4:53:2c:c5:c9:3e:
6d:e2:a8:3a:44:e0:92:c3:c4:79:d0:b2:6f:dc:24:51:15:b3:
90:f3:af:89:f7:82:84:e0:60:eb:de:f0:36:3a:a2:6a:18:9d:
89:aa:38:6a:0c:ea:4e:e4:e5:14:d1:03:0d:01:d8:d4:45:0a:
29:4a:27:46:85:6f:35:94:1c:a9:9b:81:2d:a9:aa:ff:de:f9:
17:5f:d4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:01:52 2026 by rpki-client