Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: 4yBiR6mJkUjmw+KZhEbAaSzGkk2kb5K930PpVE+cZsg=
Subject key identifier: 90:0D:52:B8:E4:69:B9:CD:7A:AE:CE:90:34:25:93:52:A9:0A:8A:C5
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 01A12579CEDC8562E5F872605216EFB9B9D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 11:01:42 +0000
Manifest this update: Sat 10 Oct 2026 11:01:42 +0000
Manifest next update: Sun 11 Oct 2026 11:01:42 +0000
Files and hashes: 1: anOK_t3CyTqq8NlqFB7A075gooA.roa (hash: UdYKN437GE/t4do7Cb6fa4jEkY53zklvjYRy+PQ0Xrg=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: IT81djuSB/uAYh9prYpf3gJ1qF/KjRnN6Pmm7aJ0frM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:79:ce:dc:85:62:e5:f8:72:60:52:16:ef:b9:b9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Oct 10 11:01:42 2026 GMT
Not After : Oct 11 11:01:42 2026 GMT
Subject: CN=900d52b8e469b9cd7aaece9034259352a90a8ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:96:be:72:b5:d6:c7:f5:be:15:21:33:42:
ac:d0:e8:00:87:46:2e:92:f1:7e:03:79:18:77:c0:
2a:b6:7c:13:55:af:0f:92:55:2c:f2:c5:32:d1:50:
08:4e:0a:70:45:80:15:52:55:7e:16:e4:78:58:3c:
61:c3:dc:dc:44:9e:9f:68:06:a3:ff:af:26:0a:cc:
de:b2:3c:cd:ab:d0:0b:1f:06:ce:e5:e3:a2:4e:7a:
8f:ce:46:35:ba:31:82:ba:6e:94:04:90:6f:41:b4:
5e:c7:60:21:e2:94:7a:eb:23:d9:14:66:62:ef:a9:
33:16:e5:d9:aa:12:8a:92:1d:40:02:f7:7d:e6:d4:
31:e2:b0:fa:6d:a4:00:88:a5:c7:e8:57:9b:4b:dd:
52:2e:0d:f5:d6:be:2e:c8:d7:26:63:2a:69:b7:d2:
f9:8b:cf:a4:b5:bf:dd:83:6c:1d:94:9d:8a:1c:78:
31:56:bc:18:6f:b4:91:1a:82:f1:d2:2a:4a:d2:5c:
d2:04:b2:74:c2:ad:6c:d7:65:0d:12:01:2b:a8:00:
a7:5c:4a:07:96:d9:3e:1f:d7:90:3a:00:34:2b:58:
4e:62:59:fa:0f:29:2b:6b:97:a0:0c:bd:a6:4d:d6:
35:55:f5:cd:d3:fe:a3:9b:3e:72:5c:01:f3:bb:5c:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:52:B8:E4:69:B9:CD:7A:AE:CE:90:34:25:93:52:A9:0A:8A:C5
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:99:f4:41:3a:d7:73:0f:72:12:e0:91:e6:a9:ac:5f:70:ce:
ea:15:10:68:32:65:12:9c:7b:1c:0f:51:c8:99:93:33:86:04:
55:23:f6:04:86:c2:22:15:50:6a:f9:5e:38:30:fd:a2:2b:93:
db:dc:24:55:e4:0d:65:87:db:62:7e:28:82:92:3d:c2:c1:2b:
f7:3b:1b:07:5b:5d:4f:13:c0:54:2d:91:f8:26:96:86:86:35:
87:bf:83:17:f7:4f:bb:33:bc:ff:95:e4:c1:6c:f0:07:e2:9b:
5c:10:59:48:3b:86:2b:19:b3:ff:4e:51:a6:10:5b:01:91:af:
c2:7c:e0:24:79:0f:0d:46:64:d6:6b:23:a2:a7:6d:62:5c:e3:
ac:52:99:f8:41:27:8c:e0:ea:10:d0:a5:ef:0f:c8:ff:e3:8e:
c2:d9:1f:48:03:68:70:06:23:f9:83:f2:8f:e4:7b:7f:e4:cd:
3e:4a:91:78:2c:f4:03:77:58:da:b3:6f:0d:0c:2c:57:a0:69:
2d:ae:a0:2b:d6:29:0c:ad:75:d1:6f:d9:e5:c6:f2:df:3e:51:
72:0c:de:a1:c3:59:d9:d8:c6:66:60:92:80:47:03:ac:23:24:
5a:b5:ae:01:a6:cb:b1:af:93:7f:40:f6:52:30:b0:12:11:5d:
d2:4b:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:55:04 2026 by rpki-client