Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
File: aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json)
Hash identifier: A5jml60bV/Ik9FOogG+gaDqiprmLsAc3z92tJwzt/Wg=
Subject key identifier: 28:69:9D:03:6C:7C:5B:21:C1:2A:E1:D5:66:94:F9:5F:F2:5F:D7:C6
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial: 01A1DC140A107E3F1190245DB044DD70CE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
Manifest number: 1629
Signing time: Sat 14 Nov 2026 22:01:03 +0000
Manifest this update: Sat 14 Nov 2026 22:01:03 +0000
Manifest next update: Sun 15 Nov 2026 22:01:03 +0000
Files and hashes: 1: H3BcLlLdlK5OktIlKB08CLOJceQ.roa (hash: gCov3Lq4RydmSmoM9Ym4TkvogcYAidCIuxal3h4GAM8=)
2: K01hEvp_oFx3qc2-IUwd8VFE1hI.roa (hash: cm5jfcRdjk0yhdi3HnxUE7FN1POO9527wRj/2D2vjMs=)
3: P6dX7w5DhwlzNU979iFd9YDU0uI.roa (hash: UBskImMtpaHQaupcjp821thacxNepjpaa64/vY6YASM=)
4: UTSVX3B31qE6acA-2M3EInvqjqs.roa (hash: 2V2E0vmwbEv4vLiGDwB2fco3T0rwdLt7wl4GPwkBEC8=)
5: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: xdFpKlO5fk2FgrMfFeaxQbVVO5zwcEs1bYrNp8UxwHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:14:0a:10:7e:3f:11:90:24:5d:b0:44:dd:70:ce:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Validity
Not Before: Nov 14 22:01:03 2026 GMT
Not After : Nov 15 22:01:03 2026 GMT
Subject: CN=28699d036c7c5b21c12ae1d56694f95ff25fd7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7c:2b:d4:46:ab:c0:44:0f:9c:88:5e:64:c2:
d5:1b:a7:24:60:20:0f:bb:57:2c:a7:33:31:b4:56:
f2:96:40:c2:67:0f:2d:b2:81:24:44:f0:83:b6:4a:
a5:93:10:95:0f:f8:d7:37:95:19:d7:99:8c:cf:5b:
a3:93:50:82:90:28:76:f2:bd:fc:1b:8c:7f:e1:1f:
46:bf:1a:70:b5:11:7f:f6:e5:4a:13:ae:ad:bd:e9:
0b:63:92:72:15:29:21:b5:37:9d:c4:c1:3f:99:bf:
a7:c4:aa:d3:70:06:a3:41:b5:c9:c3:01:fd:94:b8:
98:67:b9:1d:fe:d1:2f:c0:ef:72:5e:66:02:19:2f:
90:78:5c:bf:0f:76:be:66:52:3c:18:9e:a7:e2:b2:
a5:47:e1:0a:4a:da:35:27:13:ed:85:d5:20:f3:25:
94:1a:f5:07:44:6c:34:f4:ad:4a:a8:7d:37:45:66:
9c:01:bc:5b:98:5a:41:6e:67:a4:e3:7b:f3:db:b2:
02:72:d0:a8:18:9d:29:64:0a:f7:30:7c:5d:86:71:
98:4c:53:b3:07:1e:6e:53:1e:4e:c6:d0:8f:d7:29:
bb:53:e2:89:db:66:8f:ee:2a:f8:98:5e:cd:fa:ac:
75:ff:02:bd:87:e8:f9:2e:d6:1c:a8:1a:1e:c0:26:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:9D:03:6C:7C:5B:21:C1:2A:E1:D5:66:94:F9:5F:F2:5F:D7:C6
X509v3 Authority Key Identifier:
keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6a:8b:50:cf:6b:2a:2a:15:f2:05:2c:8b:d4:b1:72:f4:d2:
90:19:2f:c8:47:07:05:7d:81:5e:34:1c:af:2f:c1:a2:d4:ac:
26:a4:4a:1c:70:84:ee:83:6b:f7:bf:a3:86:98:c2:35:ec:2c:
4a:39:c9:d3:26:3e:d2:74:88:fb:bc:dc:16:38:ff:9a:75:51:
af:53:0d:2f:70:45:fb:63:b3:9e:23:5c:b7:ea:31:c0:9d:06:
90:e9:7f:d0:fd:a8:e8:09:74:7c:5a:84:14:f9:5e:23:4e:14:
e3:f1:15:2d:4c:ee:cb:00:6e:7f:98:c2:78:a2:1c:38:c4:ff:
65:f5:e8:33:37:ad:6a:b6:3c:37:d9:61:a6:ad:b9:56:f3:d5:
2d:81:cf:c9:bd:d1:81:16:25:ad:fa:67:8e:60:87:93:c6:fe:
f2:ff:59:fd:05:6a:be:02:8b:0a:b9:1d:9e:38:59:03:f5:eb:
b3:82:1f:1a:51:5a:e5:53:37:18:2e:ed:d6:10:9a:cc:dc:39:
f0:ad:86:76:59:46:38:40:f0:82:f3:39:dc:22:8d:b9:6c:8b:
bc:e6:43:13:16:f8:cb:2a:fd:5e:d7:df:bd:ec:d6:c1:34:48:
cf:97:a5:1d:af:34:bb:b0:8f:b4:d3:85:2b:d7:a9:fc:1f:07:
d4:a4:34:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:54:36 2026 by rpki-client