
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json)
Hash identifier: XnxwueOsiw5A2a65r3EfINNR0keIdYfpz9/aBikbTgI=
Subject key identifier: 99:53:3F:B7:ED:1A:40:94:3C:07:40:BE:0B:FC:BB:EC:CA:1F:0E:69
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01A0EC2F34BA50199C7B9BA97859DDC98FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
Manifest number: 178F
Signing time: Tue 29 Sep 2026 08:01:51 +0000
Manifest this update: Tue 29 Sep 2026 08:01:51 +0000
Manifest next update: Wed 30 Sep 2026 08:01:51 +0000
Files and hashes: 1: 4cLeBIUzolxvixomGkjZcKiBte8.roa (hash: N/jmOnjqMHqyGA9wdQXttd0JDYddztlZ/3k1FyNVxQU=)
2: 746QFPJyT0Rq24L0EZYCq84Zm3c.roa (hash: AeIcxvfsKv+u4oYl0aaRx7pmRMFAkAPk+AYZdKgn4Uk=)
3: 8Gbdi7IUMhZxUxQuZhGJDiVa0LQ.roa (hash: /DvGyvGrOeXCAY+suzbyYJaZlIPzhL5zJA/RiuGPNH0=)
4: CjPEg_1_YC8pnKYDbVJlTX6LL9M.roa (hash: zyX+uPItpF4LWUTzRFEpi3sBDAJ/wqUUHQFbPwYtfPk=)
5: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: EBMH+i0oudWvr5p4ep66EBP07YxnnYJlAWLvrHmL7kU=)
6: RMb8Tr40WGqktnRvQ9k7HNh5paw.roa (hash: QKnRrBqaLeAjI9PH/jR6hgz76ZPuClSBgTtF3GK+KSI=)
7: VOEqbHkGWWPCfYghmq_qCzJyCks.roa (hash: DW2E3Bv+Uu/QtgNYK+Kni5CDezUiIfsMXJ3wb8ndf9s=)
8: _4Dr609YNOhUDKTHQ0TUGo3pIWU.roa (hash: vQ7QP60bTAcq9tzfKC7074Bvhn9+y8dlcR2Sih4FuxU=)
9: _SvrltKT2d95s4aJXfwotwRjxTs.roa (hash: x78Dq5GqOFiqHEpOdeEmGfWK4U05pqaKZhv6jrrmznc=)
10: f9jkPBByxWpkqaavwL8qGLxgr5Q.roa (hash: SPZe+PWRSrXFLEuZHJmbPAOdsKTcAWkqgps/fPGP+cE=)
11: pxPPJn_U4Vz4mZrrRcMDpeAkFOU.roa (hash: eCE3WajmYZ6Pqwt3eSv6POPsJiPisCy+Hx33j9Wd8VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:34:ba:50:19:9c:7b:9b:a9:78:59:dd:c9:8f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Sep 29 08:01:51 2026 GMT
Not After : Sep 30 08:01:51 2026 GMT
Subject: CN=99533fb7ed1a40943c0740be0bfcbbecca1f0e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:31:e0:37:9c:84:3d:20:04:5e:d7:62:ed:
c0:37:f3:23:bd:18:f7:06:50:ef:62:91:6a:22:45:
f3:9f:78:bd:81:46:bb:0b:c7:33:61:ce:cf:57:89:
e8:27:8c:e9:fe:46:2f:b5:a6:a7:20:c0:8a:6e:4c:
c6:20:b4:d4:ec:80:03:92:77:11:e3:b8:47:81:bb:
6b:e1:a2:b9:86:7f:70:d9:7d:1c:c6:10:63:47:a8:
c3:c5:4b:d6:e2:84:51:a9:bd:4e:ee:99:c9:68:7a:
48:b3:ca:42:e6:2a:11:04:73:9e:86:e4:5d:27:d5:
e1:6d:40:8a:09:7f:57:b3:07:a4:2b:3c:16:58:93:
4b:ae:c3:43:40:5a:aa:db:f1:06:02:b3:87:45:18:
63:fe:89:72:3f:4e:73:85:2f:57:d1:d8:d1:cb:45:
67:03:de:8f:ac:fb:1c:1c:c4:95:2f:33:6f:7d:8b:
14:b7:c7:02:45:82:f5:8b:f4:40:b7:11:61:87:aa:
d0:7a:33:8d:78:0e:af:4e:88:f4:01:87:d5:23:dd:
70:f0:8c:6d:41:ce:97:9a:84:9b:8a:e5:1a:fd:67:
f7:2f:f4:41:a3:c3:d9:ed:86:36:f5:22:58:cc:b8:
ca:d8:4b:1f:89:e5:cb:c2:2a:eb:cc:64:f1:2e:ab:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:53:3F:B7:ED:1A:40:94:3C:07:40:BE:0B:FC:BB:EC:CA:1F:0E:69
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:91:4e:00:d5:a3:05:9b:15:33:42:90:a0:33:89:47:d7:b7:
a3:53:e7:ea:fc:7c:48:85:f3:44:eb:8e:ce:7d:9d:4b:35:7c:
46:42:8d:d8:96:b0:a5:0c:07:93:ce:1d:62:58:df:61:2a:72:
8d:73:e3:e8:98:20:31:4f:9a:45:1f:bc:40:81:57:16:43:55:
8d:73:ed:24:1a:26:f0:a8:0a:1a:aa:5a:09:cd:30:83:58:ef:
d1:71:41:f1:36:43:f2:54:38:77:92:05:26:bc:7d:a3:fe:65:
4c:9f:90:46:c7:81:11:26:32:ec:be:bd:54:32:22:31:b4:83:
3f:cf:99:d1:1c:c4:d5:16:b7:23:ce:bf:d5:da:5f:0f:78:54:
00:1f:b7:06:64:89:10:f2:55:fd:cd:6c:ba:d2:b0:e6:8c:63:
a9:44:5c:84:f3:5e:95:63:3e:a3:48:12:7d:77:76:8f:92:ca:
1d:d0:8f:1a:2f:68:20:2b:b2:cb:3b:c2:97:db:2a:c3:fd:4e:
c7:12:89:07:8b:68:f3:31:a9:57:e0:75:8e:d3:a0:e2:f0:31:
a5:e8:e8:90:fc:64:2a:77:04:0b:ca:73:af:d3:c3:e7:30:4e:
55:38:e8:d4:b6:60:9a:0c:c0:46:97:88:6e:ac:2d:a6:d3:09:
0e:fd:78:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:23:47 2026 by rpki-client