Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: Y4lvqH8nDMhTqlTCL5UlLY56wiSAhIlQWuixyhSnxtE=
Subject key identifier: 7F:4C:E7:81:98:76:A5:98:B4:DF:87:2F:D7:21:EF:E1:79:A2:52:F5
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 01A11CE3DB0CB05CC1436CFC2953C1D9E8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 1A95
Signing time: Thu 08 Oct 2026 19:00:57 +0000
Manifest this update: Thu 08 Oct 2026 19:00:57 +0000
Manifest next update: Fri 09 Oct 2026 19:00:57 +0000
Files and hashes: 1: KUAPJbdgB7bFTMpgIeI0m91ZeU0.roa (hash: QW3H184Zc0T/jdKDA9ND/ZljCo0WBhJC9aqERQkXP2w=)
2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: zCqwVqIrWvUHGbch66OqMjB5pgnE7FXoTqwS/q+82C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:e3:db:0c:b0:5c:c1:43:6c:fc:29:53:c1:d9:e8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Oct 8 19:00:57 2026 GMT
Not After : Oct 9 19:00:57 2026 GMT
Subject: CN=7f4ce7819876a598b4df872fd721efe179a252f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:04:df:f3:00:39:da:8c:f7:f8:5d:54:07:bd:
1e:8b:38:98:d9:89:52:39:ed:fc:9a:5a:c0:9f:8e:
ee:5d:c7:b2:94:56:9c:5d:69:6f:24:3d:f6:5c:04:
78:93:e0:98:3f:24:95:62:c9:aa:80:bd:ff:3a:ab:
77:5a:e8:73:8a:9b:f2:02:06:eb:b4:14:74:a5:75:
a7:ba:09:9b:4e:29:60:21:8a:c9:ff:33:e9:de:72:
ad:c5:71:34:1d:95:0d:74:d2:b4:9b:16:b4:87:99:
4b:47:7d:31:fd:23:bc:17:b3:ab:88:14:0a:7e:a1:
e8:6f:f7:db:5f:c0:14:a6:6f:03:46:6b:4e:14:ed:
62:9c:13:47:21:b5:c2:e5:5d:f6:b4:c7:55:f0:bf:
69:84:a5:5a:25:a7:84:5f:a3:0d:1c:8d:9b:37:43:
b3:3e:ae:61:64:a6:dc:58:cb:a0:d4:44:1b:ae:db:
5e:f0:10:a2:a5:49:3f:d8:b0:c6:07:33:66:83:28:
e1:2a:77:1b:ee:67:6a:a5:a8:e9:51:40:43:84:f5:
3e:63:9d:5b:a8:f3:01:9d:db:13:07:8f:fe:b8:b0:
27:46:33:f8:fc:fb:b4:26:07:cd:d6:ae:e7:cd:b0:
ec:f8:98:fb:fa:44:ae:1c:81:88:61:37:5b:bf:7d:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4C:E7:81:98:76:A5:98:B4:DF:87:2F:D7:21:EF:E1:79:A2:52:F5
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ee:11:9e:17:7c:e3:0b:15:5f:93:77:07:3f:32:0a:20:41:
a6:e6:cc:f8:ba:48:69:c4:26:a8:c4:d2:66:f3:eb:ab:4b:a2:
5c:f0:78:9e:76:00:26:50:de:cc:71:d8:f0:03:cb:e2:00:71:
f1:86:b3:99:62:4f:1a:a7:8b:6c:08:0c:48:84:d8:63:e7:43:
17:4e:9e:24:7e:5c:77:cc:b4:c0:87:58:94:a7:3d:fc:c6:0b:
cc:ff:f1:9f:ce:46:e2:09:07:0e:35:90:12:22:f8:0f:69:9e:
da:eb:c3:50:c5:5e:3d:e4:76:79:fc:99:f8:e0:49:77:4d:2d:
75:a4:14:63:40:0c:e5:b9:52:9e:46:47:80:57:38:5b:89:c3:
d5:67:ce:b8:db:f0:4a:98:9d:79:20:c8:2b:42:48:bb:2a:36:
ff:54:19:b7:83:ed:bc:3b:a1:b3:38:bb:d8:9c:4d:3e:96:a0:
a6:62:79:dd:95:4b:cc:a1:40:d5:c3:50:4c:16:28:76:1a:92:
9f:f3:d1:89:c2:4f:b6:c5:37:db:5b:42:23:cb:57:ed:d4:15:
32:6c:99:13:ac:39:db:3f:90:8c:ae:8f:94:6b:e4:a7:06:9f:
37:6a:56:85:0e:bb:a1:7c:26:18:d6:ff:24:a3:cb:84:5b:36:
63:65:e7:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEc49sMsFzBQ2z8KVPB2ei5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZDg0NzNlM2Q5ZWQ0MjNjNDFlN2E4NThmNGMwZjBmYjgw
YzA3YmEwHhcNMjYxMDA4MTkwMDU3WhcNMjYxMDA5MTkwMDU3WjAzMTEwLwYDVQQD
Eyg3ZjRjZTc4MTk4NzZhNTk4YjRkZjg3MmZkNzIxZWZlMTc5YTI1MmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ATf8wA52oz3+F1UB70eiziY2YlS
Oe38mlrAn47uXceylFacXWlvJD32XAR4k+CYPySVYsmqgL3/Oqt3WuhzipvyAgbr
tBR0pXWnugmbTilgIYrJ/zPp3nKtxXE0HZUNdNK0mxa0h5lLR30x/SO8F7OriBQK
fqHob/fbX8AUpm8DRmtOFO1inBNHIbXC5V32tMdV8L9phKVaJaeEX6MNHI2bN0Oz
Pq5hZKbcWMug1EQbrtte8BCipUk/2LDGBzNmgyjhKncb7mdqpajpUUBDhPU+Y51b
qPMBndsTB4/+uLAnRjP4/Pu0JgfN1q7nzbDs+Jj7+kSuHIGIYTdbv33mGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9M54GYdqWYtN+HL9ch7+F5olL1MB8GA1UdIwQY
MBaAFHzYRz49ntQjxB56hY9MDw+4DAe6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODct
OTc1NzY5NGQyOTFkLzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODctOTc1NzY5NGQyOTFk
LzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+4Rnhd8
4wsVX5N3Bz8yCiBBpubM+LpIacQmqMTSZvPrq0uiXPB4nnYAJlDezHHY8APL4gBx
8YazmWJPGqeLbAgMSITYY+dDF06eJH5cd8y0wIdYlKc9/MYLzP/xn85G4gkHDjWQ
EiL4D2me2uvDUMVePeR2efyZ+OBJd00tdaQUY0AM5blSnkZHgFc4W4nD1WfOuNvw
SpideSDIK0JIuyo2/1QZt4PtvDuhszi72JxNPpagpmJ53ZVLzKFA1cNQTBYodhqS
n/PRicJPtsU321tCI8tX7dQVMmyZE6w52z+QjK6PlGvkpwafN2pWhQ67oXwmGNb/
JKPLhFs2Y2Xnwg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 03:22:50 2026 by rpki-client