Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: 5A3Z35R8dWofvzg5K7JVwHgtkuUGALQL5a7tTvRxj5s=
Subject key identifier: E3:AF:EB:EE:3C:52:F4:F5:D8:B2:DA:AF:49:89:38:4A:58:E5:7B:6A
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 019FADF66ACA6FE7DECC0D81C97A036FE224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 13:00:35 +0000
Manifest this update: Wed 29 Jul 2026 13:00:35 +0000
Manifest next update: Thu 30 Jul 2026 13:00:35 +0000
Files and hashes: 1: KUAPJbdgB7bFTMpgIeI0m91ZeU0.roa (hash: QW3H184Zc0T/jdKDA9ND/ZljCo0WBhJC9aqERQkXP2w=)
2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: Eh9uY8Dh4gKlHzXNbN4UhUH1jJmaf7dRzKUVp4mFod8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f6:6a:ca:6f:e7:de:cc:0d:81:c9:7a:03:6f:e2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Jul 29 13:00:35 2026 GMT
Not After : Jul 30 13:00:35 2026 GMT
Subject: CN=e3afebee3c52f4f5d8b2daaf4989384a58e57b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:9a:f4:d2:21:c4:56:61:ba:64:c4:3f:b0:
4c:8a:24:ce:82:2b:e8:ab:aa:36:1d:f1:7c:c4:06:
c7:de:04:43:85:51:8e:f5:67:e1:07:63:aa:5c:5a:
df:d5:8f:b8:da:4c:d8:4a:28:53:b4:84:14:23:ac:
a9:f8:aa:0a:68:6a:e2:86:82:dc:66:00:b4:05:4d:
da:12:64:03:91:d3:c5:6b:21:97:f9:1a:6a:2e:f4:
52:7e:2d:db:0a:79:8e:04:09:47:00:2f:00:8e:df:
ec:8c:ac:b5:52:85:5a:ab:e4:13:a5:e8:d6:9e:b1:
72:01:99:e8:27:16:59:96:29:36:e1:c6:fd:1f:3c:
8c:80:cd:a0:14:d7:93:65:cd:a9:7b:71:b5:14:a6:
b6:12:f3:2c:35:dc:37:72:3a:21:71:7b:5d:1d:1a:
e7:7c:15:60:2c:48:7d:c2:3a:9a:84:c3:b6:ed:cb:
ae:d6:19:19:25:eb:da:40:1b:cd:d7:6a:3f:7d:bb:
6e:f5:e4:a8:5b:17:9a:1b:df:d8:4b:85:ee:ff:ea:
b4:5b:a1:74:a3:38:d0:57:77:77:9b:fe:fe:7e:4e:
cd:76:94:d1:8c:74:0f:47:79:f9:b5:a8:a6:3c:37:
53:98:d7:24:40:54:b8:19:17:28:dc:9b:f7:74:6b:
fe:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:EB:EE:3C:52:F4:F5:D8:B2:DA:AF:49:89:38:4A:58:E5:7B:6A
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:19:eb:9b:dd:80:95:05:db:ac:98:b5:60:f7:a6:4b:ab:03:
df:36:a2:87:9d:d1:68:56:66:6a:4d:83:4d:42:d3:c8:66:92:
3d:16:04:87:d0:38:68:af:d7:ea:37:e1:d0:2a:d0:25:19:ac:
8d:40:d8:67:16:83:bf:3d:89:67:dc:24:4e:e9:c2:83:9e:e3:
cb:5f:65:87:da:21:9e:7f:40:2f:09:39:64:bb:a5:6e:b5:91:
16:89:0d:1e:64:b7:d0:79:cd:53:4c:87:c2:b4:d4:95:b5:a3:
ff:e7:62:70:35:73:98:71:ae:59:01:66:e4:87:c6:bd:48:62:
40:cb:b8:cb:f0:6f:37:e8:13:90:97:dd:f6:8a:d7:12:fd:8a:
f3:c6:88:8a:5f:dd:fd:35:8f:f8:49:15:e0:e0:1c:e4:91:cc:
22:9e:8e:60:72:ee:34:be:80:c3:9f:f7:54:d9:48:99:29:8a:
f1:bc:fe:a8:a2:1a:a5:bb:b0:f0:3c:f9:9b:f2:34:aa:37:8d:
bb:5c:14:25:64:d1:d1:1b:31:84:d1:8d:a1:9e:8a:12:24:9c:
7b:fa:87:01:22:10:05:cf:3c:52:a7:ee:31:ec:b2:f6:db:5d:
d2:5a:bd:5b:a9:c4:02:59:8a:2a:24:c3:7e:91:dd:3e:f2:d6:
e7:5f:e5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:10:01 2026 by rpki-client