Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
File: H9nOye0f1PQcCx4w77lshhVTvjY.mft (raw, json)
Hash identifier: wUvONQWZZOZVqjrwNG/NZnuxSQa1emZRmw2x8gOx4eA=
Subject key identifier: 13:36:9E:65:3F:14:2F:EB:87:18:BD:AB:58:99:36:DE:3F:70:37:8E
Authority key identifier: 1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
Certificate issuer: /CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Certificate serial: 01A0D8043ED958124109AF3BE0E43B67B213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
Manifest number: 0652
Signing time: Fri 25 Sep 2026 10:02:31 +0000
Manifest this update: Fri 25 Sep 2026 10:02:31 +0000
Manifest next update: Sat 26 Sep 2026 10:02:31 +0000
Files and hashes: 1: AGVrI7h1W1sZnmEHrQIXxLRxF1Q.roa (hash: K1nbjcJomqgMcH/NVsTCJWhMoSmEDtw4c8u/MMrHlso=)
2: H9nOye0f1PQcCx4w77lshhVTvjY.crl (hash: Fdcsn++CpaAlS9LnRRacba3mTISNOPTSVUAlTsRPQEM=)
3: fnZsGtHZZ57ibD1bgR7D-kx03A8.asa (hash: gnq6h8vpZgrDrbXWUtlG5+lFKokphaSsAqWL7zsvVig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:3e:d9:58:12:41:09:af:3b:e0:e4:3b:67:b2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Validity
Not Before: Sep 25 10:02:31 2026 GMT
Not After : Sep 26 10:02:31 2026 GMT
Subject: CN=13369e653f142feb8718bdab589936de3f70378e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:89:69:c6:27:0f:a4:2e:1f:bb:2a:82:59:
cc:20:5f:b2:3d:81:05:b0:2d:a8:ec:af:ee:8b:93:
08:98:f4:39:58:a5:56:72:8c:7b:47:9e:8c:b6:27:
73:40:ed:fb:3d:b2:91:17:b0:f5:ea:61:ab:09:87:
fb:7f:62:bc:f6:79:d6:07:08:77:90:a9:bc:b6:5a:
bc:63:27:9b:d3:4e:97:5d:2e:3f:ef:b7:87:42:41:
ea:a8:4c:98:80:0c:bc:e5:94:17:92:95:9b:66:df:
af:5d:d8:55:f3:38:97:c6:b7:34:05:62:3e:3b:33:
6d:b7:ca:9f:f9:1d:e2:45:6b:42:f4:57:d2:7f:a2:
36:6c:78:53:54:94:de:de:da:0d:29:c2:43:58:23:
67:b1:20:22:ee:56:df:7b:98:fc:a2:f1:2d:c9:da:
68:76:36:df:f9:fd:16:28:90:21:4d:34:db:cd:51:
e6:94:5f:9c:53:1d:ab:34:86:f4:e6:46:b9:c3:06:
21:73:4f:28:a0:4b:89:45:91:1d:96:1e:27:6d:f9:
ee:91:9a:50:66:40:6e:77:93:d9:27:7a:01:d8:5d:
be:0c:00:c8:42:0c:93:05:f5:1f:8c:c3:9e:8c:de:
01:f3:c4:05:93:df:c4:5e:ab:48:e1:85:4e:23:7f:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:36:9E:65:3F:14:2F:EB:87:18:BD:AB:58:99:36:DE:3F:70:37:8E
X509v3 Authority Key Identifier:
keyid:1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8a:56:b4:8b:19:8e:46:39:7f:a3:a8:d9:e3:6b:5a:17:4f:
df:bc:4a:be:73:a4:27:54:20:5a:4b:ab:df:b1:48:2a:46:c0:
03:67:81:c6:7a:43:2e:d8:a5:c7:d1:1d:d8:ea:6b:c4:79:66:
15:86:b8:09:48:62:56:73:6d:72:66:18:dc:2a:6d:c9:81:91:
33:05:04:c9:e8:f8:8a:0f:32:ea:f6:12:c2:71:fd:ad:83:3a:
78:78:fa:a7:fb:a1:76:d2:41:cc:b4:da:f2:f0:28:65:5c:6d:
e3:cc:c8:40:18:e3:cf:a1:c6:d0:ea:aa:da:6c:88:5b:88:5a:
c6:2e:80:8f:f4:1a:aa:1a:51:7f:06:1d:ca:5e:72:1e:4c:69:
83:90:a6:70:5a:59:a0:1f:6f:1a:19:e3:44:de:5c:8a:9f:f7:
bf:86:74:bf:c7:f1:c9:4f:3e:c4:51:d8:d3:03:50:6d:25:2c:
e0:7e:f8:b5:98:15:7d:00:46:fc:9b:4b:4f:cb:87:d2:7b:3e:
9e:f3:27:55:ac:ef:d8:3f:99:8a:ad:97:5f:7c:f2:ac:b9:cc:
cb:fd:c5:5c:a1:a4:fe:97:b5:e7:eb:a1:bd:e0:17:14:74:ee:
96:89:2b:bd:a4:5f:d0:d0:a6:62:33:2f:89:e0:0b:16:80:d9:
9b:50:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:06:36 2026 by rpki-client