Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: qHfqd9p5a444uw6b3XIdettBova0H1pfkb0ZjwNl9wQ=
Subject key identifier: F6:81:85:09:33:89:C0:43:1E:59:D8:E0:75:2B:4F:5B:2C:93:55:8C
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 01A1DDCBB285D96C3ECE7B6F62D08E6E8D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 0C86
Signing time: Sun 15 Nov 2026 06:01:16 +0000
Manifest this update: Sun 15 Nov 2026 06:01:16 +0000
Manifest next update: Mon 16 Nov 2026 06:01:16 +0000
Files and hashes: 1: P0H9mn8azX8J6K-hdAfHiYeHr48.roa (hash: E4c9kuinUCaG0thWwOJajTUQL7VeKxkEvaLK1sfiV8U=)
2: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: +aHqvNbfk+0xQyze01W6CJ8nzqkInI+Te657aYXDokU=)
3: tdjIiHG6aRg6RaOSgsb_E64QRco.roa (hash: rpGb1Qz22L2bS8euMlwSPzOxpxsFd6dx18fW4QaBOow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:b2:85:d9:6c:3e:ce:7b:6f:62:d0:8e:6e:8d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Nov 15 06:01:16 2026 GMT
Not After : Nov 16 06:01:16 2026 GMT
Subject: CN=f68185093389c0431e59d8e0752b4f5b2c93558c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:f6:db:a4:fa:2f:c7:15:13:b4:b3:62:25:
7e:e1:b6:3f:1f:e5:9c:95:c3:0f:e2:50:9b:d7:10:
9c:1a:b2:26:9c:54:52:0b:dc:d6:2e:1f:50:cd:f4:
7f:7d:bb:3b:96:a8:2e:15:64:b1:14:8d:1c:36:2a:
ac:a9:33:b0:f7:bf:ce:e2:e4:8b:82:bf:16:27:fd:
d0:78:dd:5e:1c:0a:f3:c0:ab:01:da:fe:c1:27:c7:
30:84:b2:e4:bf:02:f1:17:99:94:62:28:8f:87:13:
a4:5b:77:52:01:fa:27:75:6a:be:09:8b:eb:5e:15:
ff:a1:c8:2c:88:0e:68:ac:28:32:29:49:f7:76:4f:
90:ee:dd:8e:57:73:10:24:b5:ca:ba:0b:25:ba:2e:
93:f3:49:f6:82:86:bc:b4:50:3b:ed:92:82:30:7d:
2f:99:e2:96:2a:eb:64:b3:93:8b:21:a5:03:10:83:
65:d8:fb:c5:64:10:fd:e8:bc:72:77:3d:a0:69:02:
4e:6b:f3:1e:ba:ce:6e:53:45:6c:5a:1d:d2:48:03:
9f:18:68:52:24:49:a2:67:5f:b7:72:7c:b5:05:59:
74:11:74:60:df:67:bd:2e:68:ac:cd:07:36:59:58:
59:0d:28:9d:ac:26:14:18:83:1d:7b:cd:68:5b:61:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:85:09:33:89:C0:43:1E:59:D8:E0:75:2B:4F:5B:2C:93:55:8C
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:74:58:fc:7c:51:5a:4c:ff:08:d9:31:1f:ea:ff:10:3e:
3d:02:3e:31:6c:f1:e3:87:fc:83:45:f0:be:98:0e:06:32:3e:
a1:a9:44:9d:cf:9f:ba:b6:ce:9a:ba:21:da:d9:84:1c:9a:d5:
cb:32:04:32:ca:e3:69:64:62:d2:2e:99:8c:5a:5a:be:a0:97:
91:db:e9:59:b0:de:ac:86:24:c0:57:b4:88:2a:e3:ca:ab:ff:
fb:13:65:6a:b1:b5:91:3d:b0:70:4c:93:2b:43:3d:55:17:ba:
ea:c0:2b:79:ca:48:aa:9d:36:bd:5f:f9:c9:54:e1:24:45:da:
c3:d1:32:81:df:80:5b:4e:9c:d0:db:a5:d6:f3:98:9e:f9:f9:
ac:ee:60:7b:3a:51:a0:37:04:b7:5f:1d:00:5c:3d:3c:6f:0f:
34:d8:95:d8:c5:78:70:a7:07:a3:a0:62:1a:ac:14:a0:82:e4:
4f:21:23:0e:3a:e9:3b:2b:10:6e:b4:da:90:fe:1b:50:41:ef:
49:73:90:a8:af:5c:cb:9f:18:9c:ac:81:d3:07:ef:66:3b:20:
d4:64:b5:50:00:d3:70:a1:eb:53:fe:ba:27:1a:34:77:11:cd:
ba:26:4e:1b:8a:e2:e7:8d:c4:19:0d:15:4a:0a:c3:a7:7f:84:
50:62:6f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:18:38 2026 by rpki-client