Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: ExcGMVNlsGs2y9R5jJUqF5ZH3Vnt9sucWetuWZngCXg=
Subject key identifier: 4A:F3:2F:08:5E:56:1A:FA:27:7A:4B:01:0E:2F:6D:47:9E:A7:FC:AB
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 019CAAC72068F1A716C674DE8DE02B7EC2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: 03FE
Signing time: Sun 01 Mar 2026 19:01:42 +0000
Manifest this update: Sun 01 Mar 2026 19:01:42 +0000
Manifest next update: Mon 02 Mar 2026 19:01:42 +0000
Files and hashes: 1: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: fABsWXOSva7vFNNa9foLrHLXtaY8UvhL+MG74GGqTcU=)
2: l1nrHCg1JaRGqWglwBj3oSy_fj8.roa (hash: y4C2wS/8hOK+ga53wXjcr5tBKnj/Yfql4LK0XM8fOmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:20:68:f1:a7:16:c6:74:de:8d:e0:2b:7e:c2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Mar 1 19:01:42 2026 GMT
Not After : Mar 2 19:01:42 2026 GMT
Subject: CN=4af32f085e561afa277a4b010e2f6d479ea7fcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:85:b4:0c:3a:e4:24:30:01:1a:47:ba:e5:
1e:ba:3c:ff:99:eb:d1:75:32:15:20:99:d2:ab:c0:
10:ca:5f:2f:0a:50:67:4a:2f:57:3f:cd:15:fe:2b:
bb:e6:d0:69:82:52:68:b0:83:14:30:d2:bd:48:9c:
bf:4b:f1:6f:0c:89:c5:4e:56:30:70:c0:63:d9:ff:
03:a5:1d:c5:51:a3:06:89:21:31:67:c7:88:63:8f:
46:95:b7:04:39:eb:bd:94:bf:54:60:9a:bc:29:6c:
d3:32:77:dd:a1:c7:34:2c:ff:2c:f3:86:ed:37:4d:
04:ce:4f:5d:33:8b:fd:43:e6:6b:c8:a1:cc:45:3f:
e4:60:de:cf:eb:b2:cf:48:25:29:0d:a8:2f:0b:fd:
59:fc:72:92:83:16:fd:93:c7:b6:30:34:5f:d5:6a:
48:ef:da:57:e5:e3:70:d7:42:59:64:6b:c7:b7:55:
c6:8b:a9:9c:81:e4:85:c0:54:65:b6:26:8c:37:43:
f1:c0:ae:20:0b:60:20:5c:cf:fa:dc:0f:36:db:9f:
08:f7:52:5e:b7:61:64:26:c9:96:5c:26:f3:55:ea:
d3:48:85:cc:2f:3f:11:b4:00:32:fc:a3:4d:31:a9:
24:4b:71:2b:09:24:ef:58:3a:b3:de:4e:b9:1f:79:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F3:2F:08:5E:56:1A:FA:27:7A:4B:01:0E:2F:6D:47:9E:A7:FC:AB
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9c:97:0b:ce:75:6a:aa:88:da:65:6e:5e:0d:c0:af:6d:82:
f1:d9:3c:d5:30:7e:4b:47:d2:8a:4f:cf:2b:e6:e2:c1:f8:61:
10:4f:6a:3f:8f:27:0f:c0:be:1c:be:f0:fc:0f:7d:81:5b:50:
98:21:ed:8a:a0:53:b3:07:9c:63:d6:5c:87:b7:27:03:a8:a2:
a3:65:34:3c:cf:1f:a4:bc:20:68:8e:43:62:05:0c:b9:c9:c8:
94:d8:8f:ee:1a:32:89:1f:d8:81:4d:c0:15:eb:ba:df:00:31:
c6:e8:fe:43:53:ea:18:c0:d4:65:7f:c0:21:dd:08:6e:05:36:
da:23:7f:62:52:16:8c:31:c9:27:de:2a:75:f9:31:2c:1b:1f:
6c:f0:c1:6c:65:22:9a:7f:4d:27:18:ff:8e:d6:29:12:28:59:
4f:07:17:2f:68:70:39:5b:b9:91:f8:82:41:19:f1:13:39:48:
0f:19:6e:9a:c1:a9:59:02:f7:99:e4:fb:c3:fb:91:63:26:19:
b3:70:2a:af:bd:f8:04:9a:e2:b2:fb:17:f0:85:79:3d:fb:46:
90:bd:1b:cb:c6:89:1a:50:d2:65:ae:7e:60:d1:68:2d:2c:5d:
a7:11:71:46:88:12:d2:de:12:7c:fd:a1:07:69:dc:eb:bd:95:
2e:4f:f0:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxyBo8acWxnTejeArfsLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTM0MGVkMjMyM2E5Mjg2ZTk4MGY2NjQ2OTk5MGE5YTFl
MzA3NWQwHhcNMjYwMzAxMTkwMTQyWhcNMjYwMzAyMTkwMTQyWjAzMTEwLwYDVQQD
Eyg0YWYzMmYwODVlNTYxYWZhMjc3YTRiMDEwZTJmNmQ0NzllYTdmY2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiKFtAw65CQwARpHuuUeujz/mevR
dTIVIJnSq8AQyl8vClBnSi9XP80V/iu75tBpglJosIMUMNK9SJy/S/FvDInFTlYw
cMBj2f8DpR3FUaMGiSExZ8eIY49GlbcEOeu9lL9UYJq8KWzTMnfdocc0LP8s84bt
N00Ezk9dM4v9Q+ZryKHMRT/kYN7P67LPSCUpDagvC/1Z/HKSgxb9k8e2MDRf1WpI
79pX5eNw10JZZGvHt1XGi6mcgeSFwFRltiaMN0PxwK4gC2AgXM/63A82258I91Je
t2FkJsmWXCbzVerTSIXMLz8RtAAy/KNNMakkS3ErCSTvWDqz3k65H3lZpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErzLwheVhr6J3pLAQ4vbUeep/yrMB8GA1UdIwQY
MBaAFH4TQO0jI6kobpgPZkaZkKmh4wddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMt
ZmUwMjdhMDM0NDQ5LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMtZmUwMjdhMDM0NDQ5
LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJyXC851
aqqI2mVuXg3Ar22C8dk81TB+S0fSik/PK+biwfhhEE9qP48nD8C+HL7w/A99gVtQ
mCHtiqBTswecY9Zch7cnA6iio2U0PM8fpLwgaI5DYgUMucnIlNiP7hoyiR/YgU3A
Feu63wAxxuj+Q1PqGMDUZX/AId0IbgU22iN/YlIWjDHJJ94qdfkxLBsfbPDBbGUi
mn9NJxj/jtYpEihZTwcXL2hwOVu5kfiCQRnxEzlIDxlumsGpWQL3meT7w/uRYyYZ
s3Aqr734BJrisvsX8IV5PftGkL0by8aJGlDSZa5+YNFoLSxdpxFxRogS0t4SfP2h
B2nc672VLk/wgQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:45 2026 by rpki-client