Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: UMaBH9GcPXzqQ9LqwLuT/Vb9IlAl6CjITdKGMKgYTpc=
Subject key identifier: 92:5E:41:93:EE:6C:E0:F8:97:87:E7:AD:C2:51:13:C6:60:B0:A4:59
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 019D9BBEAF5BE90D27750785790758B743F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 14:00:58 +0000
Manifest this update: Fri 17 Apr 2026 14:00:58 +0000
Manifest next update: Sat 18 Apr 2026 14:00:58 +0000
Files and hashes: 1: anOK_t3CyTqq8NlqFB7A075gooA.roa (hash: UdYKN437GE/t4do7Cb6fa4jEkY53zklvjYRy+PQ0Xrg=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: imvGHrv4lwUxcPwJlu1Uez1szqNXwldWNH5lj7A34yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:af:5b:e9:0d:27:75:07:85:79:07:58:b7:43:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Apr 17 14:00:58 2026 GMT
Not After : Apr 18 14:00:58 2026 GMT
Subject: CN=925e4193ee6ce0f89787e7adc25113c660b0a459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5d:77:b3:f8:1a:28:aa:c7:a0:2d:71:69:0a:
c8:af:6f:6b:3a:f4:e7:c9:c4:f3:7a:c2:ab:52:5b:
1a:5d:f8:01:cf:f4:95:e2:f5:ec:9b:bc:8e:f7:28:
89:5f:33:c8:7a:3e:13:fa:2f:f5:41:c9:5e:93:d6:
39:6f:68:6b:77:95:06:41:32:6a:d8:d2:1c:24:20:
15:09:d9:51:1f:4a:78:b2:99:22:82:8e:b9:5b:26:
8d:28:bc:e7:de:14:1b:06:8d:04:89:1f:a9:12:08:
09:65:0b:34:d4:30:fa:61:9d:4b:a6:27:62:44:c0:
ec:16:87:34:97:08:89:3b:b7:6b:d5:b2:5a:bb:4f:
e3:69:46:b0:10:87:f7:86:88:c0:92:8a:65:76:13:
b5:8e:90:f4:b3:25:8a:6d:39:ff:ae:38:ba:c9:c6:
77:9b:10:14:c1:f9:42:d5:cb:8f:e7:72:38:f9:b1:
86:69:c5:08:98:51:78:f7:00:93:9e:f6:e3:ae:0c:
28:fa:d0:7d:6a:45:a4:67:dd:84:ba:cb:47:1a:ae:
f8:f5:c6:f8:88:d7:ef:e9:e4:05:3b:c8:4a:f9:72:
0b:01:72:a1:53:04:70:99:40:20:e1:7b:6b:ac:37:
90:57:5e:1b:8b:18:07:7c:9d:aa:9b:e9:17:0b:01:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5E:41:93:EE:6C:E0:F8:97:87:E7:AD:C2:51:13:C6:60:B0:A4:59
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0f:e8:06:d8:15:7f:d6:8f:fe:ff:b1:0f:b9:b9:56:cb:72:
1c:5a:d7:a9:70:4e:08:29:ad:32:c9:51:48:26:d9:c5:de:19:
36:5e:54:b7:c4:aa:c2:87:4a:1f:d8:80:d5:c0:3a:df:fd:3f:
21:2e:12:43:66:e2:a7:71:2e:57:a2:12:a5:47:5d:2c:b3:62:
32:00:3f:ee:55:dc:fd:fe:13:19:1d:4b:de:11:b2:de:ca:28:
63:5c:50:3a:25:02:28:7b:2d:77:40:2b:07:ef:05:3a:78:a6:
80:9e:4c:07:ab:3d:a7:3c:01:97:d7:10:0c:46:22:71:8e:d3:
33:5b:6b:6f:19:62:4b:fc:b3:7d:5f:c0:80:79:b8:51:0e:2e:
c7:88:75:7c:4d:27:5b:cc:dc:d3:42:41:03:64:f6:82:2e:1c:
be:38:8d:d1:f4:31:0e:e2:cd:19:79:aa:2c:78:7c:a6:4d:52:
3f:ae:f9:30:13:46:2e:9b:65:04:66:9b:de:08:e4:fe:7d:e3:
73:9d:ad:fa:d4:51:e7:ae:d0:7f:3f:32:c4:d5:2e:0c:5e:4d:
51:88:23:ec:4b:6c:e3:be:e7:25:18:23:7a:4e:55:5e:24:e5:
66:00:70:95:ab:c7:04:c1:07:86:dd:82:5d:f3:a5:5c:db:a0:
0b:c3:94:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:41:08 2026 by rpki-client