Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: g+kO5qVY9s29eZYsOHp/Y70aJ46YmY++xkgs1teqZSc=
Subject key identifier: 2F:70:E6:9E:09:7D:2E:3D:55:53:FB:69:E0:02:42:F3:95:34:87:6D
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 019CAC46F379A1FBABA5FBC6AC7EBF983178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:00:56 +0000
Manifest this update: Mon 02 Mar 2026 02:00:56 +0000
Manifest next update: Tue 03 Mar 2026 02:00:56 +0000
Files and hashes: 1: anOK_t3CyTqq8NlqFB7A075gooA.roa (hash: UdYKN437GE/t4do7Cb6fa4jEkY53zklvjYRy+PQ0Xrg=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: ELPJB/JX8bgSfqCtUIKqnwvNzHo5sHgv20wE2WoaNuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f3:79:a1:fb:ab:a5:fb:c6:ac:7e:bf:98:31:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Mar 2 02:00:56 2026 GMT
Not After : Mar 3 02:00:56 2026 GMT
Subject: CN=2f70e69e097d2e3d5553fb69e00242f39534876d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:79:bd:71:41:10:62:d1:d4:cc:7e:68:73:
fa:f8:72:d1:01:97:05:bc:0f:8b:1e:53:aa:e5:df:
61:04:a3:65:96:3a:ff:bb:d2:b4:09:cd:f8:99:5b:
55:c4:b1:3b:bc:3b:41:26:83:50:ee:b3:25:f1:60:
73:6d:c2:66:50:bd:86:a8:58:00:2b:7c:55:53:85:
90:7c:08:1a:36:55:55:1f:20:5d:30:8f:10:c4:ae:
08:9f:11:0c:f7:cb:86:2f:b2:e2:b4:b1:3d:4a:93:
73:20:c6:73:4c:06:ce:b7:59:fe:c9:c5:5b:a1:5f:
75:75:0f:a2:89:c6:7f:0a:7f:68:16:6f:25:b9:a2:
2c:13:e5:80:9b:87:48:ef:f4:52:1b:eb:c7:cd:9b:
55:48:ab:16:4d:d4:f7:1b:31:3f:35:b6:e4:b9:62:
a5:f0:f7:24:c3:fc:ac:ca:6b:4f:79:07:7b:d4:00:
8a:02:ca:e5:22:80:bc:9b:4b:ea:15:a1:97:94:90:
60:e5:18:f4:64:c9:fc:1c:98:0e:5e:04:1b:47:55:
43:81:5d:fe:85:ae:ab:75:38:a4:2d:cd:3b:04:59:
3c:14:b8:cc:e1:47:6f:43:19:2e:73:a4:1d:c1:ce:
c3:b5:11:d0:6e:71:9c:ac:1f:ad:35:42:2c:a8:44:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:70:E6:9E:09:7D:2E:3D:55:53:FB:69:E0:02:42:F3:95:34:87:6D
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:89:02:4f:77:2d:40:42:51:fb:36:5e:5e:67:dd:d6:a6:7d:
2e:1e:57:33:18:81:ca:e5:19:aa:b0:a8:53:92:76:0c:db:60:
36:ca:a8:61:c6:72:b8:18:53:3d:58:3b:7e:a1:d7:82:47:e2:
4c:7b:a2:09:0d:00:38:a3:b0:f2:55:d2:c0:6d:84:3a:81:2b:
ce:bc:76:a5:4b:8c:8c:de:00:68:7b:79:c1:17:15:76:c0:db:
1e:82:3e:9e:56:15:b1:65:98:22:ec:44:0d:90:09:d6:db:97:
d7:86:51:a9:90:1c:b9:70:13:8c:b6:ed:9a:0e:54:c1:37:cc:
c1:2a:87:5e:aa:f8:26:a8:69:8a:86:a8:38:b3:31:c2:ac:93:
28:b0:0d:67:a5:5b:78:68:b1:d9:9d:4d:18:fb:49:d1:83:56:
49:a1:48:bb:a5:55:0e:e6:c2:8a:b3:83:ae:b7:15:c5:3e:ea:
86:c0:c6:fc:a4:65:67:06:14:01:7c:03:a0:a4:0f:2f:38:64:
4f:51:8a:62:0f:18:30:cf:5e:21:55:af:47:8e:ac:01:f4:f4:
72:3c:67:01:2a:e0:c4:14:ad:5f:b4:af:77:2d:9b:a1:b2:22:
88:6f:3a:90:78:f0:38:76:50:1d:43:d6:86:bc:39:09:ee:a3:
1a:57:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:08 2026 by rpki-client