Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier: OoCf71fHoKPraGSQMUSaLwq44agBhhkazoKHt4zVUtk=
Subject key identifier: 34:7D:41:CC:A5:7C:51:E0:D0:85:46:3F:0B:6E:FE:46:9F:8D:6F:7D
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 019CACB553A54CE6222B1A1F106CFA790358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number: 070F
Signing time: Mon 02 Mar 2026 04:01:30 +0000
Manifest this update: Mon 02 Mar 2026 04:01:30 +0000
Manifest next update: Tue 03 Mar 2026 04:01:30 +0000
Files and hashes: 1: 1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa (hash: 1Isp4qEhUMW8RbXIHRvEykaShiBFWYANN4lo8FswOgU=)
2: OF8_FWobXxZIravQspxAerLsQCQ.roa (hash: Y7S5oVSgN9LGWqLS5miIXFy0ldxtoJVgFrZlsFrthM8=)
3: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: qxOiPMM1feQJuVNInyR/+BB3+cXeL07wEEO2EydZOkg=)
4: iYC8lbhytTD32pOwIBpaKnVh070.roa (hash: YM6e3l9qg3NAPYfHxGGt9x27m8gykxKp/xuSfybtvWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:53:a5:4c:e6:22:2b:1a:1f:10:6c:fa:79:03:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Mar 2 04:01:30 2026 GMT
Not After : Mar 3 04:01:30 2026 GMT
Subject: CN=347d41cca57c51e0d085463f0b6efe469f8d6f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:70:e8:5c:8e:7a:a9:09:92:f7:da:d8:ee:f2:
bf:92:11:1b:79:ad:c4:3a:41:fb:ff:8c:33:33:83:
b0:52:fe:b6:a7:aa:e2:5b:70:d0:a8:a5:5c:53:4a:
cc:09:02:e3:8d:fd:32:8e:26:50:ec:67:4b:91:bb:
aa:c1:b9:b2:f8:2f:7e:f0:35:d0:5e:0c:bc:a2:17:
c4:fa:a8:dc:0c:5c:7f:a6:e1:06:1a:32:aa:a9:70:
c0:b2:9b:f1:c1:30:7d:25:3d:35:f0:e1:a7:fe:8c:
25:31:c6:21:42:7b:14:b9:c2:90:60:14:85:5d:c8:
c0:f7:76:79:5f:2d:bb:fd:e5:8d:4e:75:a2:2b:6c:
33:86:df:74:49:28:f5:4e:f8:0c:bd:6c:05:e3:34:
05:b6:96:e6:92:a1:d3:2a:b5:60:cf:50:3f:35:60:
db:d2:81:3e:d4:46:37:fd:68:b0:f5:f1:25:72:11:
9e:ee:4e:56:71:b8:d9:b3:2b:9f:34:55:8f:15:8a:
1d:41:d3:e2:e1:72:b8:80:f5:ff:60:b7:3f:5b:b6:
73:3c:e1:43:b6:3f:a3:a0:b2:00:07:6e:95:87:29:
82:86:76:de:37:ec:6a:d6:04:d8:1f:45:b3:3f:93:
6b:c9:09:40:2d:08:39:8a:62:6d:4d:06:6e:26:71:
b7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7D:41:CC:A5:7C:51:E0:D0:85:46:3F:0B:6E:FE:46:9F:8D:6F:7D
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6e:60:a9:ef:5c:88:8c:40:71:ad:b5:1b:81:99:f7:e6:da:
d7:70:b8:ff:2a:ff:20:92:5c:75:4f:d9:61:ef:9c:df:94:03:
33:bc:dd:ca:06:d1:6c:b5:d6:c9:fe:1d:21:b2:89:32:86:fc:
64:9b:1c:71:bb:a8:71:1a:27:0d:69:c0:bf:71:8a:72:40:23:
1b:51:0a:b5:f7:bd:6e:11:2b:a6:bc:9e:3b:4d:eb:cc:eb:2d:
6b:d9:5a:c1:fc:9a:3b:18:9d:7e:62:20:12:a6:cf:b6:fa:64:
63:72:4b:7b:e6:e4:86:92:03:f0:66:3b:bf:38:89:5f:5d:74:
d0:4d:69:b8:f7:59:8a:e7:6c:b0:9c:7e:03:e5:be:af:7a:c2:
2a:a8:21:8c:5c:f6:7f:c2:1c:83:e8:3d:7f:f8:3f:af:d4:47:
48:05:8a:fd:94:c7:c9:15:ee:21:c7:12:f8:bc:e0:f4:a7:6d:
a1:44:09:e4:24:05:94:9b:8d:6a:d8:8a:57:76:9f:d3:82:f9:
b3:22:ab:92:6a:d0:ad:dd:6c:e8:08:6e:63:94:fd:f9:b5:2e:
8a:17:9c:b4:ef:e2:1a:39:36:d1:6f:05:fa:7b:87:28:16:be:
32:73:81:14:b8:53:71:fe:24:b0:7f:14:07:cf:35:44:12:5b:
1f:f1:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:31 2026 by rpki-client