Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: i1eUwGaE7zl0GVCjjNPzS7/h0bjUeTKTSe34VkQcLds=
Subject key identifier: 83:C5:C8:5E:BD:B8:17:8F:A9:28:E7:7B:1D:1F:A1:24:B2:F4:00:96
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 019DA48B269DC3C30FA477DDFE63F0597AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 07:01:15 +0000
Manifest this update: Sun 19 Apr 2026 07:01:15 +0000
Manifest next update: Mon 20 Apr 2026 07:01:15 +0000
Files and hashes: 1: KUAPJbdgB7bFTMpgIeI0m91ZeU0.roa (hash: QW3H184Zc0T/jdKDA9ND/ZljCo0WBhJC9aqERQkXP2w=)
2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: 1RgWJPI8mThpVk22dDxvHdROuVJ01ysqfxsVw0zzPTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:26:9d:c3:c3:0f:a4:77:dd:fe:63:f0:59:7a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Apr 19 07:01:15 2026 GMT
Not After : Apr 20 07:01:15 2026 GMT
Subject: CN=83c5c85ebdb8178fa928e77b1d1fa124b2f40096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:01:84:d4:7c:a8:29:cf:a9:fd:d4:72:7d:
a4:45:b6:b7:5c:93:de:44:c5:07:42:a3:9b:b0:a3:
f6:da:d3:70:a4:74:90:b6:07:4b:aa:b5:15:4a:eb:
97:47:e0:95:f4:c7:40:c3:10:97:56:5a:13:c5:0a:
2a:43:7b:f6:56:e1:91:43:e6:d7:e2:98:96:43:f4:
30:45:4b:86:e9:b5:9f:74:da:f5:03:5e:1d:26:a6:
2f:2a:61:64:0b:67:dd:e6:bb:c8:99:81:4b:65:9e:
8b:68:df:c9:b1:08:3d:3f:5f:b3:8d:23:cb:7c:5f:
5e:db:79:3d:f1:b4:2b:18:de:a2:7e:b9:c4:3e:65:
7d:f6:e2:fe:14:32:41:1a:10:9c:20:40:80:99:06:
63:e2:35:e6:2f:08:98:a3:79:ba:13:0f:ba:c6:df:
b8:89:91:2f:73:9a:a3:c2:b3:42:c7:ed:2a:8e:63:
59:ac:e3:8c:16:c0:7b:19:e4:cd:4d:c9:83:41:52:
b8:6b:c9:b0:8c:2f:b5:d9:4e:22:92:49:4f:cc:cb:
2b:6c:91:ff:bf:20:bd:fe:03:e1:60:2c:e2:24:84:
80:0e:a9:62:35:d4:70:a3:fd:cd:6c:aa:ff:09:fe:
9f:78:71:e7:0f:53:04:02:99:66:18:3f:92:be:d6:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:C8:5E:BD:B8:17:8F:A9:28:E7:7B:1D:1F:A1:24:B2:F4:00:96
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0b:44:e2:ca:d3:ec:a2:74:db:fb:df:48:0f:0f:dc:96:33:
72:0f:63:6c:85:cf:35:ea:fc:81:40:31:47:55:fe:3f:26:5a:
6b:77:82:62:e5:dd:af:39:20:42:38:12:c6:75:9c:fc:8b:a8:
94:94:df:56:64:f6:7c:b2:32:b7:da:29:c3:9b:a7:e2:4e:4b:
6a:f6:8a:cd:2a:8d:b8:dd:1e:1c:62:27:2f:6c:db:58:4a:71:
2f:3c:f3:41:c5:f8:da:9c:e8:42:37:79:57:1f:b5:c6:be:14:
40:5c:8b:22:5a:8b:4f:34:01:2b:c3:dd:77:68:76:fe:56:d3:
28:08:4f:41:26:c8:f8:19:9c:d4:6f:8c:b7:4c:51:b7:45:77:
44:bd:e3:c5:e8:92:3d:01:d9:46:d2:d5:bf:7e:66:b2:ec:64:
95:4c:4d:ae:59:a0:1b:f3:b1:c0:b5:97:af:95:6e:0a:e3:7d:
48:b9:76:97:2d:60:40:6d:63:00:15:30:8e:14:13:78:5b:90:
66:38:59:09:de:16:15:79:2e:c3:c5:c1:e8:90:d2:4b:73:cf:
2c:e1:91:23:b7:c9:bb:b0:ab:41:33:cf:5f:5b:ab:cd:47:ad:
d7:4c:c3:5c:0f:a1:f8:c4:79:cc:8d:78:46:e1:23:4d:ac:2f:
cf:c9:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:18:55 2026 by rpki-client