Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier: wDBz37xGrkvKFnYyS636838ZeeQ1/3upfLu1bU5jQ6k=
Subject key identifier: D2:DE:DD:AA:61:60:41:AA:A6:38:69:88:59:24:08:E1:99:FB:C3:22
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 019FA974E949603EC3DA78755735CCF7DA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number: 089B
Signing time: Tue 28 Jul 2026 16:00:39 +0000
Manifest this update: Tue 28 Jul 2026 16:00:39 +0000
Manifest next update: Wed 29 Jul 2026 16:00:39 +0000
Files and hashes: 1: 1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa (hash: 1Isp4qEhUMW8RbXIHRvEykaShiBFWYANN4lo8FswOgU=)
2: OF8_FWobXxZIravQspxAerLsQCQ.roa (hash: Y7S5oVSgN9LGWqLS5miIXFy0ldxtoJVgFrZlsFrthM8=)
3: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: 5qdBDlsSItFtRLdhe8rf9LywwYJwrVm0b2/UyHMsjcE=)
4: iYC8lbhytTD32pOwIBpaKnVh070.roa (hash: YM6e3l9qg3NAPYfHxGGt9x27m8gykxKp/xuSfybtvWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:e9:49:60:3e:c3:da:78:75:57:35:cc:f7:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Jul 28 16:00:39 2026 GMT
Not After : Jul 29 16:00:39 2026 GMT
Subject: CN=d2deddaa616041aaa6386988592408e199fbc322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:f0:ba:da:4e:c7:4e:75:6d:61:ab:b8:a8:
3b:04:e0:3b:fc:20:20:e1:f6:96:88:87:a0:ae:05:
dc:2b:51:70:f1:1e:7a:3e:48:8c:2a:1c:96:da:5c:
20:78:bc:b3:86:08:be:f2:1b:49:31:d2:54:96:f1:
64:b1:b8:38:26:b5:7d:fa:38:b0:5e:a9:8e:8b:ed:
cf:43:9e:e4:00:68:74:c9:c5:85:e3:19:6f:5a:17:
d1:54:71:3b:9f:d8:c5:4f:77:f8:0f:39:12:bd:86:
c5:e1:a5:19:90:eb:80:cc:61:14:10:ba:6e:d3:05:
f6:bd:81:07:7f:02:d1:de:40:24:ea:87:00:c2:bf:
6f:67:5a:0c:98:12:45:bd:47:f9:0b:ee:84:92:28:
e8:c3:a0:84:83:64:a6:d8:f3:b6:ca:3b:56:51:85:
ab:0e:31:c3:25:9f:a8:12:27:3b:5c:35:c7:7d:64:
2d:72:86:cf:1b:93:f0:c8:4a:0f:c4:a9:fd:f0:77:
c3:f2:50:ae:0c:3d:1a:bd:e0:83:78:a6:ec:60:1c:
26:db:f8:fb:a4:11:a3:2f:46:27:1b:64:34:83:68:
70:77:2c:da:ca:16:83:90:50:a9:e2:1b:e8:b0:b7:
0b:43:01:f0:41:aa:00:69:3a:98:8a:65:bc:23:70:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DE:DD:AA:61:60:41:AA:A6:38:69:88:59:24:08:E1:99:FB:C3:22
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:15:15:9f:99:c0:da:d1:9f:11:6c:ce:68:df:63:55:b4:8c:
9b:ea:29:7a:76:09:e4:a7:6c:b2:7b:50:38:28:56:1e:75:e5:
91:fa:6c:f7:6f:41:1f:2b:65:5d:97:fe:71:fa:0b:c8:23:5e:
87:39:aa:80:a2:95:21:7b:41:7e:17:09:19:d1:ce:5f:38:6d:
56:e7:4f:9b:04:61:93:ef:de:d8:b2:82:ab:2a:4e:f0:f0:79:
32:bd:74:66:08:d4:79:1c:06:57:a3:46:2d:5f:67:e9:f2:18:
5a:61:bb:e9:ef:97:1e:e9:6a:47:88:34:61:cd:2c:a9:88:7e:
6c:91:0e:b3:f2:cf:a8:5a:7b:29:26:dc:68:ed:80:e8:9d:7e:
e5:f7:ea:b6:cb:56:e8:e9:d7:4f:cd:38:61:2a:e9:ea:04:f1:
ff:66:b6:3f:93:e3:0f:5e:5f:3d:ac:80:20:a4:c5:25:3f:d8:
9b:98:00:c7:95:2f:1f:9f:90:5f:c0:ee:fb:38:bf:3e:19:0e:
7b:ce:f3:63:21:ec:4e:a4:05:34:54:fd:f2:52:36:65:a3:38:
74:c9:b5:8f:4d:91:54:ce:30:61:ca:a7:95:33:96:16:2e:99:
ed:f9:a4:86:ce:a2:3f:39:6d:7f:bb:1a:32:cf:61:5f:29:11:
67:84:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:55 2026 by rpki-client