Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File: fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier: JFdrJWFgvwb18UcM3gpyivZBK7/KqEJDrp+WYncpdLM=
Subject key identifier: 59:09:0C:D8:0F:C7:1D:45:54:41:35:FC:DE:EF:46:54:32:41:90:FD
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer: /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial: 019CAAC6C1DE9411032FB9E7EEA9B31E24D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:18 +0000
Manifest this update: Sun 01 Mar 2026 19:01:18 +0000
Manifest next update: Mon 02 Mar 2026 19:01:18 +0000
Files and hashes: 1: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: 087VKkTZmyD3Y4fDM11uQoagDobLflSw+AEgjP20fkA=)
2: vypF4u6T8pornEd354CldlnvJ5Q.roa (hash: X/qPs2fMpklVg8cmNTWhzWpJY0nHbNqBSCIvT5rmL0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c1:de:94:11:03:2f:b9:e7:ee:a9:b3:1e:24:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Validity
Not Before: Mar 1 19:01:18 2026 GMT
Not After : Mar 2 19:01:18 2026 GMT
Subject: CN=59090cd80fc71d45544135fcdeef4654324190fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:a3:51:5f:29:d8:92:8c:c9:1f:c8:24:48:
75:da:79:9e:7c:14:99:5e:ed:1a:54:13:77:bc:b4:
36:88:25:1d:d5:f2:a7:f5:bc:94:79:b4:d3:a6:f8:
e6:6d:ee:ec:d7:fd:9d:c6:ee:d4:18:89:4b:fc:e3:
78:f8:1f:d8:a5:2d:2c:3b:18:75:10:b0:f9:5d:b7:
c7:97:05:22:bd:09:d1:32:35:bc:9c:26:a2:62:24:
1d:73:bc:48:6f:5d:ff:0f:8d:f8:8c:be:5c:49:9a:
03:a4:f3:62:e1:4a:ab:a7:75:d6:af:01:4b:2b:a4:
81:ec:7f:fc:63:1d:6a:01:93:e8:60:43:d6:b1:9b:
cd:68:08:d8:d0:b4:5a:72:b6:22:ad:e6:56:a5:d8:
d1:a0:18:dc:20:5a:1d:9b:7e:9f:b8:9b:e0:92:de:
28:2c:c4:e5:95:1b:64:8a:4d:29:cb:3c:90:6a:58:
80:ed:83:34:88:5b:8a:d0:84:da:24:80:21:c8:c6:
e2:5c:11:77:1c:c0:2b:72:30:90:d5:0a:57:16:35:
8a:0d:14:c4:0f:a5:90:87:4b:68:5d:ec:05:6d:b3:
61:96:01:ed:d7:b8:81:14:b3:aa:54:56:19:f8:38:
1d:de:0a:ce:02:d9:21:c7:21:76:f6:d2:62:15:f6:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:09:0C:D8:0F:C7:1D:45:54:41:35:FC:DE:EF:46:54:32:41:90:FD
X509v3 Authority Key Identifier:
keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b6:c8:35:27:a8:a7:8a:ae:60:55:48:dd:89:45:5c:89:f0:
86:72:7f:8e:b5:e8:47:51:65:04:30:ad:d7:e1:28:07:41:78:
bd:bf:08:f3:60:b5:67:0b:33:cf:c1:6e:6a:86:09:e6:eb:4c:
cf:98:df:77:d1:8d:5f:86:8e:35:3d:b3:67:3e:d0:c8:de:71:
d2:98:61:a1:ef:55:05:a9:4a:77:48:3e:19:29:29:fa:6d:67:
86:8d:b5:50:21:64:a6:0b:9b:79:c6:45:e9:98:30:c1:84:c3:
0b:e9:88:01:e6:13:18:3c:f6:e5:24:e3:a1:c1:db:eb:43:23:
b9:aa:e9:86:e7:bb:50:f0:a4:9b:b1:0b:f5:e9:d7:dd:e6:6d:
da:44:e3:af:27:bc:99:35:d9:1d:e5:9e:96:b1:c0:81:9f:a7:
e7:8d:a8:e4:24:5c:91:5e:2d:02:36:48:d4:8c:6d:59:b8:70:
7b:a1:92:ab:72:ec:44:68:59:89:a8:e8:3f:f6:06:00:02:6a:
7c:90:ab:c2:2c:f0:b5:ac:10:23:ca:83:7c:64:b6:c2:33:56:
ba:f2:de:06:80:75:1e:8b:f3:98:e4:d6:2a:2e:10:8a:9e:c9:
2d:7a:dc:bf:63:86:de:4a:cd:f0:97:1b:ea:20:f4:91:a2:12:
15:a2:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:28 2026 by rpki-client