Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
File: Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft (raw, json)
Hash identifier: 6LFzq6UeOcwk4wQVinu8xn/6t/9nz7DcJ4QJIMe2jd0=
Subject key identifier: D9:1B:27:12:F5:B7:D0:3F:2D:D0:13:3C:76:2A:42:76:4E:40:55:7B
Authority key identifier: 32:1F:C5:6A:7C:16:27:D7:DF:C4:30:FA:1D:61:29:19:B5:01:45:5F
Certificate issuer: /CN=321fc56a7c1627d7dfc430fa1d612919b501455f
Certificate serial: 01A1081466BC8972B86D86B99F6E7C2ADDF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
Manifest number: 0102
Signing time: Sun 04 Oct 2026 18:01:57 +0000
Manifest this update: Sun 04 Oct 2026 18:01:57 +0000
Manifest next update: Mon 05 Oct 2026 18:01:57 +0000
Files and hashes: 1: LGwzUxcjbq9-wb2ocqMqu3uyOjM.roa (hash: cDH6YJZW5QqvmFNmhrhTy7ZODICEHh2BK7oCwwTt9+E=)
2: Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl (hash: ooZmnFMwclR37LQbH/ks3xqjw6BV25PORxgTFbChZ7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 18:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:14:66:bc:89:72:b8:6d:86:b9:9f:6e:7c:2a:dd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321fc56a7c1627d7dfc430fa1d612919b501455f
Validity
Not Before: Oct 4 18:01:57 2026 GMT
Not After : Oct 5 18:01:57 2026 GMT
Subject: CN=d91b2712f5b7d03f2dd0133c762a42764e40557b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:15:bb:ba:9e:8b:df:92:65:c9:91:52:6b:
6e:8e:23:fa:38:ad:06:10:8f:f2:3b:68:a1:ba:63:
90:cf:d5:87:46:c0:68:8e:7a:50:cf:e4:51:4b:31:
f8:f9:97:7d:f0:60:11:ff:32:91:75:82:ad:d0:04:
93:6a:7b:13:7f:94:72:9e:09:cd:66:a6:2f:b5:35:
b7:64:47:be:20:b9:e9:62:06:ab:7d:e6:90:8a:70:
da:e6:1a:6a:6f:e6:a5:d3:6d:4a:e9:40:ea:77:33:
eb:2c:a4:d6:76:c3:ee:ba:08:59:54:4f:7c:9a:87:
33:08:b0:90:25:d9:c7:41:87:dc:2f:95:3d:54:a5:
d5:73:5b:c2:00:4e:a1:ae:e3:e0:5a:fe:a2:ab:e6:
9a:35:a8:4b:c0:d5:bc:23:29:8c:dc:64:28:2a:72:
69:03:77:0a:37:d9:e2:e1:e2:38:90:c8:a8:a9:17:
5d:e7:17:bb:51:ac:f9:97:8d:92:af:21:47:eb:1a:
ac:14:c2:e0:38:7e:71:ae:1d:b6:99:04:9b:4b:01:
92:16:2b:51:60:80:91:ca:1a:e0:a6:22:bd:6d:f8:
e6:78:ce:a1:11:09:18:1b:b9:37:dd:26:a0:ab:f7:
58:59:43:92:36:cd:82:3c:f5:e7:30:81:f7:4f:29:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1B:27:12:F5:B7:D0:3F:2D:D0:13:3C:76:2A:42:76:4E:40:55:7B
X509v3 Authority Key Identifier:
keyid:32:1F:C5:6A:7C:16:27:D7:DF:C4:30:FA:1D:61:29:19:B5:01:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f8:9c:80:e5:04:1c:93:a6:72:53:99:32:29:12:31:77:13:
83:4f:03:a9:cd:9d:fa:be:0b:79:3d:d5:49:a8:0e:39:eb:cd:
79:fe:f3:7b:be:97:e0:b8:63:96:81:1a:48:a4:2e:f5:1e:46:
80:11:30:e4:37:b7:2c:ae:1c:03:0e:f0:44:12:48:3f:40:7d:
9a:0f:16:06:73:d8:32:54:96:43:8e:74:70:b6:33:b3:be:74:
07:f6:d9:1a:17:aa:1b:ab:dd:d9:ae:56:0e:96:df:e3:eb:cd:
4c:7a:04:d2:b9:c4:7e:83:6b:09:9f:60:99:8e:67:c8:d6:07:
4d:9b:88:62:03:39:4a:6b:29:74:84:63:0a:a8:b4:f3:56:81:
7d:32:12:27:de:96:ac:4b:bd:62:a7:d8:0a:92:4e:e8:a0:43:
ad:15:2c:4b:dd:14:27:3f:e8:4c:6c:f4:3d:74:1e:2d:90:5e:
70:8d:fa:9e:d1:40:15:f2:19:ed:4f:12:54:6d:93:81:3b:e2:
b8:5a:c7:3f:52:44:98:0f:1d:84:c6:25:13:69:f6:b7:c8:c5:
10:50:42:49:a7:19:bf:aa:1b:5a:ab:4e:09:33:41:39:b0:80:
a4:fd:08:aa:27:c3:96:2f:b3:5b:de:8c:1b:62:4d:88:78:1a:
34:71:a3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 05:32:09 2026 by rpki-client