Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File: fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier: dwcbOmuks/YRDJEbMwf5gQi574FO1pMcuKMUDhzeWgU=
Subject key identifier: 6C:F8:F2:AC:A4:67:88:45:3F:2A:9E:CA:69:31:B3:EF:6B:DB:29:CC
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer: /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial: 01A0D6BA3B942089CFC8C1ABAFE253AF0344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 04:02:04 +0000
Manifest this update: Fri 25 Sep 2026 04:02:04 +0000
Manifest next update: Sat 26 Sep 2026 04:02:04 +0000
Files and hashes: 1: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: CEoAmSFxW0xppUHtVWuxQ8YRcRir9oJuUyIMe8dRGKQ=)
2: vypF4u6T8pornEd354CldlnvJ5Q.roa (hash: X/qPs2fMpklVg8cmNTWhzWpJY0nHbNqBSCIvT5rmL0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:ba:3b:94:20:89:cf:c8:c1:ab:af:e2:53:af:03:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Validity
Not Before: Sep 25 04:02:04 2026 GMT
Not After : Sep 26 04:02:04 2026 GMT
Subject: CN=6cf8f2aca46788453f2a9eca6931b3ef6bdb29cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:69:41:dd:9e:24:aa:e1:fe:19:05:e1:3c:
25:c2:7c:37:9f:22:19:5e:a6:b0:51:f7:d8:42:4c:
7b:4c:1a:92:b7:e1:b4:48:f5:74:57:90:11:d1:6d:
8c:e3:ab:ff:aa:9a:19:15:ea:a0:2b:55:45:f7:23:
0b:5c:6b:6c:7a:c4:44:f1:f6:eb:82:75:73:55:8a:
b1:5f:24:98:c4:c7:30:53:22:f9:d0:fe:db:62:7f:
20:78:ef:a4:08:a3:f8:d8:e2:29:24:3d:a4:b4:97:
4a:1c:26:41:99:82:b7:96:38:3a:08:90:2c:77:c0:
1c:1a:04:06:ed:41:3c:c1:15:c0:e1:c0:29:cd:77:
e7:a7:27:42:37:03:a0:a7:27:3b:f1:df:69:51:27:
68:d9:ac:91:ae:0f:f5:96:f2:03:80:c3:83:a6:45:
a1:94:b8:2b:0e:08:e2:ca:bf:21:04:b7:66:3b:6e:
22:a8:b1:0f:8f:76:d3:15:7d:da:7e:18:11:4a:9b:
d2:e4:d8:4c:21:0c:36:5c:02:8f:90:03:0b:1e:08:
e3:9e:9b:f6:80:67:44:ab:3e:30:f2:dd:46:b9:9d:
50:03:e9:3b:66:71:5b:c7:ce:58:4e:4b:78:22:67:
88:c8:86:dd:a9:67:fb:84:a4:7d:07:42:e5:1d:8d:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F8:F2:AC:A4:67:88:45:3F:2A:9E:CA:69:31:B3:EF:6B:DB:29:CC
X509v3 Authority Key Identifier:
keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fc:32:21:a9:12:e5:08:66:06:0e:8b:33:0b:14:33:15:e1:
00:98:be:36:2a:12:69:e2:c1:bf:32:3d:bd:c7:f9:ec:53:bc:
d7:2f:1d:47:8f:54:e6:8c:0b:66:5d:6e:2d:29:38:2a:18:8b:
0d:63:36:8e:6d:05:74:d7:8d:95:fd:70:19:09:7e:3f:80:23:
b4:3a:04:c1:9f:d4:05:1c:46:1a:a2:15:91:37:7c:80:10:fa:
75:84:e0:c6:49:93:c2:72:06:36:13:a6:61:ee:0e:d5:4e:89:
20:c3:b3:15:9a:e4:5d:71:aa:6e:3a:a8:ca:4c:67:4b:5d:4a:
99:05:df:10:a3:ce:a3:ca:99:45:0f:92:68:2e:6b:45:e8:30:
d3:f3:6b:80:29:04:ca:78:7a:72:b8:e5:ad:2d:76:e9:88:13:
68:8e:ea:e9:c6:f4:1e:34:d4:a3:a9:a6:af:06:42:33:39:9d:
45:18:0c:55:d6:5e:26:1e:6a:04:f4:11:19:6f:1a:66:17:18:
1f:41:07:b5:c9:86:b0:5a:5b:77:9e:2c:0e:79:66:e5:71:fa:
56:63:e2:b1:dd:cf:74:64:a6:f9:6c:7c:09:a5:0f:31:37:ee:
a7:fb:2f:46:9d:b7:a6:86:84:bc:38:d8:90:05:18:3a:1f:52:
2c:85:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:52:52 2026 by rpki-client