Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json)
Hash identifier: p4TMuRtj22a2YXhRzJGpzDmtGAZGh/BFBCdA4l/Jc4w=
Subject key identifier: F5:FE:73:0F:45:8C:BD:56:15:F1:88:61:A1:1E:46:67:FF:07:87:97
Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Certificate serial: 01A0DA9699BF9F4EFA1ED07E81899D59228E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
Manifest number: 0629
Signing time: Fri 25 Sep 2026 22:01:37 +0000
Manifest this update: Fri 25 Sep 2026 22:01:37 +0000
Manifest next update: Sat 26 Sep 2026 22:01:37 +0000
Files and hashes: 1: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: S1b6hJd5Yg2DC8UupeuOiPTZ0N8o4EO/8DSP22X8vIU=)
2: l1nrHCg1JaRGqWglwBj3oSy_fj8.roa (hash: y4C2wS/8hOK+ga53wXjcr5tBKnj/Yfql4LK0XM8fOmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:99:bf:9f:4e:fa:1e:d0:7e:81:89:9d:59:22:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d
Validity
Not Before: Sep 25 22:01:37 2026 GMT
Not After : Sep 26 22:01:37 2026 GMT
Subject: CN=f5fe730f458cbd5615f18861a11e4667ff078797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:c8:80:5f:f2:e1:cf:f9:a5:3e:8c:d7:7e:
3c:49:eb:52:5b:a5:a9:1a:98:98:0d:8c:fa:d1:b7:
b5:b6:ff:bd:61:4e:4d:e8:93:ef:ad:00:47:4f:82:
0b:fa:22:6c:a6:80:0e:fa:74:47:df:3b:ae:f5:44:
b3:0b:66:73:97:34:8a:c5:0e:a9:a2:df:4d:d6:52:
22:db:87:d1:7d:45:e6:3b:6b:be:57:e2:3e:13:5a:
9c:c5:ba:11:c9:6f:66:90:bb:44:6e:c3:bc:bf:5e:
45:d6:d4:ee:50:3f:f3:92:54:c7:14:18:c4:c2:d9:
b5:85:6f:80:d1:19:e8:11:39:0b:9e:cf:dc:46:83:
10:a1:b8:f3:96:2a:3d:17:96:34:c7:82:ea:ca:53:
8b:39:af:e7:16:5d:cc:9f:8d:a1:72:c4:17:fb:9a:
2d:2e:7f:ff:05:01:f5:b3:f3:e7:57:6a:a4:13:d1:
2d:30:33:63:5f:74:f3:79:38:bb:a6:af:45:86:2a:
1d:4d:67:e5:12:4b:5c:b0:66:da:c1:2c:3c:98:a3:
0e:75:81:ef:9a:f8:ef:ca:c5:ae:6d:a7:04:3c:9d:
79:57:9a:70:42:f5:2f:5c:63:d3:c1:3e:08:66:fe:
11:97:34:64:72:7b:7a:11:5f:f9:40:9e:66:76:dd:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FE:73:0F:45:8C:BD:56:15:F1:88:61:A1:1E:46:67:FF:07:87:97
X509v3 Authority Key Identifier:
keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:01:f2:83:f0:33:e3:97:c5:a3:1d:02:74:3d:f7:92:95:d0:
6e:cc:e5:cf:42:fd:87:21:2f:a7:89:90:84:b0:6a:57:fe:12:
0d:82:8e:a7:d7:be:58:01:f8:06:f1:3f:d7:c8:f8:2b:30:ea:
32:c2:e9:28:2a:8f:67:14:1f:b6:06:7e:58:3c:03:38:07:0c:
2b:70:68:3d:4d:85:b2:d6:37:36:db:a3:53:8a:81:37:8f:e4:
f0:21:53:35:bd:b2:82:3b:38:38:ec:89:e4:be:ad:00:5a:87:
73:04:c5:04:9a:74:75:48:2b:5d:5b:b9:cc:12:48:90:a5:ea:
93:3f:d7:19:e5:24:f3:5a:83:18:f1:21:84:bc:39:e1:7d:01:
ff:f7:18:41:9e:06:5e:5e:fa:61:e4:ba:1c:99:30:5c:85:81:
9d:6c:29:34:ab:ae:d9:59:eb:1f:ad:32:d9:cb:79:2e:3c:50:
6c:b1:2b:02:98:1c:f7:b3:d8:5f:be:86:0c:24:31:54:02:f0:
06:19:cf:fa:2e:d1:c2:a8:f2:1a:d5:67:62:c8:92:06:63:e7:
97:62:d7:79:ec:8c:53:33:5e:d9:2b:b0:09:c9:92:c8:5f:fd:
d5:1a:0e:74:4f:76:2a:95:d0:37:11:55:c6:e4:ae:a8:81:ba:
4d:de:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:53:14 2026 by rpki-client