Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
File: hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft (raw, json)
Hash identifier: pt9qUlfEZwQ4d26f2HcA7Cg8S1UNqreMAdh3Eomrxh0=
Subject key identifier: 42:9E:BD:4B:1D:7A:DA:7E:37:43:83:2B:D2:83:59:BA:BF:EE:81:40
Authority key identifier: 86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
Certificate issuer: /CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Certificate serial: 01A1212F95AD3AE9886869E35FDC9A37B0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
Manifest number: 010F
Signing time: Fri 09 Oct 2026 15:02:08 +0000
Manifest this update: Fri 09 Oct 2026 15:02:08 +0000
Manifest next update: Sat 10 Oct 2026 15:02:08 +0000
Files and hashes: 1: 1-KU3PGZxoqz7bmdb8n8zsPdaZ9M.roa (hash: nSK3MR0nKS3ZWnxeaioA0vYNesL1Z7ExVBEXWs1Aous=)
2: 1fFVsYcVAFE1N-aOz9LEMseJXuY.roa (hash: HOFFlz4KmOgHVJgVvTynlqcaj5gxbBYnLRmD8llTlRw=)
3: The51JB1jk7iu3SgU3iebbViaAo.roa (hash: IgvjzXkDcI1pUGZYnrs8Dyz1K9/Iv3JYSfz6oucCdSI=)
4: aoK4O5p5TThsIV3yaJN8jIRv9XE.roa (hash: nmrjfUmKSW8e+KfYJ4nX5j5UtlDSvUEZyvXS5XHSEm0=)
5: hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl (hash: uX+fd4VtgSPxaD8Y473uUXs0Z6WEBrDY5Yge7dD/ayw=)
6: tu5qw7pN2svVw6an55fp6xEDFXU.roa (hash: gsnHeRbF1wOKHvFgVL5LAFlPqq/3yDJyXu+yPQETjmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:95:ad:3a:e9:88:68:69:e3:5f:dc:9a:37:b0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Validity
Not Before: Oct 9 15:02:08 2026 GMT
Not After : Oct 10 15:02:08 2026 GMT
Subject: CN=429ebd4b1d7ada7e3743832bd28359babfee8140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5b:1a:65:fa:16:30:c8:b1:27:d6:59:88:56:
8c:35:73:ca:67:bf:a5:df:1a:e2:c6:ca:77:d9:c2:
7f:0a:3b:34:a4:9e:95:de:41:41:08:cc:ce:6f:da:
81:28:6c:7d:28:41:0c:a5:cc:63:3e:6e:a5:c2:96:
9f:a8:1a:27:8e:c0:da:ed:27:0c:38:0f:f7:4c:a1:
8f:3d:a6:7a:6d:1d:6c:d9:42:4e:c2:8a:bc:a1:3c:
66:a5:c6:d5:71:91:c3:5e:78:5b:2d:0a:3b:1b:2f:
c4:cf:65:4a:06:2a:2b:a4:f0:81:34:24:c2:00:e9:
b7:86:54:70:ed:c8:f7:b9:5f:6d:f8:42:21:b2:75:
33:60:72:06:b7:48:21:b7:63:a7:dd:83:51:1e:2d:
c2:a9:d8:78:36:08:c0:b6:d8:64:02:24:8b:2d:b2:
58:c2:c3:9a:0c:21:8c:6e:8a:34:eb:28:cc:a0:3d:
56:5a:67:c1:a7:14:43:4d:e8:5b:2b:a7:a2:0b:b2:
7c:a3:df:58:36:0b:c5:4d:b3:c8:da:a7:15:a4:c3:
37:17:7b:7f:1a:dc:7c:93:42:50:f7:89:8e:d8:19:
5a:a0:8d:51:e2:10:e0:c1:56:dc:ea:a7:5a:5e:f8:
df:5a:3d:e3:ad:85:23:c1:35:c2:59:6b:10:79:ab:
58:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:BD:4B:1D:7A:DA:7E:37:43:83:2B:D2:83:59:BA:BF:EE:81:40
X509v3 Authority Key Identifier:
keyid:86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7c:69:dd:50:80:a4:78:cf:4f:a6:ab:9c:d0:ef:47:df:4d:
e9:c5:d8:29:1a:dd:40:af:14:ff:93:8e:fc:5c:10:be:e2:f0:
04:77:9d:b3:e9:1a:98:a2:99:4c:ba:4d:05:d5:e4:cd:05:8b:
cf:27:73:ca:d1:d4:e5:93:72:d6:2e:c4:5f:87:28:8e:d6:7e:
49:a0:31:bc:56:c0:52:e4:16:68:11:c0:03:3a:b5:48:34:98:
11:af:57:ac:15:41:df:a8:29:44:fa:b5:f1:e8:6a:a8:29:61:
dc:53:34:78:c2:25:08:99:b0:bf:70:2b:98:8a:f4:9a:f0:68:
83:16:7d:ba:4c:61:1c:93:b0:1d:3c:64:36:46:4a:7b:87:cd:
a9:6b:33:b1:b2:d1:9e:f7:a0:c3:09:ba:a9:ce:3c:21:66:47:
f9:c9:22:3b:6f:14:69:63:6f:b9:ec:25:0d:6c:b4:29:85:7c:
fa:f7:c7:4f:d7:2f:92:73:07:fb:4e:da:26:d3:1e:30:54:e4:
17:57:b8:82:56:29:2b:e9:e5:d0:04:c8:8e:35:fa:ee:3c:07:
68:02:41:bc:78:43:99:44:f1:83:4b:a6:b7:b7:a8:06:ce:4f:
e6:e7:57:c8:8f:6d:f9:78:80:09:4e:66:62:80:86:01:53:8b:
85:4b:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:48:31 2026 by rpki-client