Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: amMU+xEtb5fKAK11SVOQBVI4rHuALDNACSMH3VYtX4s=
Subject key identifier: 25:CC:AA:EB:5C:93:B6:23:B5:A3:D2:79:2B:73:CE:B6:D6:69:90:12
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 01A0E061A588E335D718146B92F0C0D2E160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 12EE
Signing time: Sun 27 Sep 2026 01:01:30 +0000
Manifest this update: Sun 27 Sep 2026 01:01:30 +0000
Manifest next update: Mon 28 Sep 2026 01:01:30 +0000
Files and hashes: 1: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
2: mijO3rBDux071bgVII2VGtelaWs.roa (hash: c57AFpXKCuOBDWXAgwOZwYrMLNV93F0DNDkv38YCADA=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: HrZtpLoNgoScBQ2BopZY9nGlP0RS1vfUmD+AB/J9Gh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:a5:88:e3:35:d7:18:14:6b:92:f0:c0:d2:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Sep 27 01:01:30 2026 GMT
Not After : Sep 28 01:01:30 2026 GMT
Subject: CN=25ccaaeb5c93b623b5a3d2792b73ceb6d6699012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:70:8d:8d:c2:c9:bc:42:e0:18:87:05:fd:
e9:42:b8:99:aa:49:63:fe:94:29:6f:39:67:ac:28:
91:70:ec:7e:3c:b7:53:f4:82:2a:53:02:df:4e:c1:
c0:52:55:c7:a1:2f:ad:b8:0a:15:29:d3:9e:ab:e9:
d6:ea:48:c8:84:e2:ec:62:c7:05:7f:26:24:fb:a2:
18:71:f6:c1:2f:02:e7:f2:15:97:d7:8c:a8:d6:6b:
2f:d7:6a:ff:d8:5c:93:20:6e:e9:0a:9e:88:65:7a:
45:2e:85:b5:ec:cb:9d:0e:01:14:24:b0:23:25:4b:
e3:a3:e1:39:37:38:56:0a:cf:41:4b:f1:81:de:a4:
99:58:6e:bb:f0:58:fc:31:31:0e:35:b3:da:74:d0:
f5:99:73:90:5d:b5:8e:0d:93:45:bd:18:f0:94:51:
a9:e4:3a:a7:6b:8a:bf:b2:06:43:31:20:8e:48:48:
ad:eb:e7:0e:83:4d:31:ad:df:7b:06:7f:48:d9:ae:
39:d9:f9:f2:1f:99:ac:90:3d:60:cb:49:4e:11:94:
ef:eb:59:1c:c0:47:c6:59:e8:6a:55:b3:75:58:c9:
27:49:34:9f:0a:6c:38:6c:98:1e:14:0f:6f:b7:e0:
d8:37:ea:7a:a3:38:e4:bc:ea:d2:09:67:00:6b:72:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CC:AA:EB:5C:93:B6:23:B5:A3:D2:79:2B:73:CE:B6:D6:69:90:12
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:02:a7:87:29:7f:63:20:74:46:c8:ee:1b:62:af:b8:fe:53:
8d:cb:5e:f6:1d:34:6f:37:50:61:0b:06:d3:0d:e5:ff:c1:83:
c7:42:71:3b:d5:a9:42:d7:48:31:f7:92:1d:60:c2:82:24:6b:
4c:4a:8b:68:ef:83:12:7a:99:d9:54:97:47:e9:97:81:d2:2c:
2b:14:e9:e0:e4:d1:2d:4d:cc:28:a2:fe:69:1e:1f:b7:c2:e0:
3e:b7:eb:95:df:0e:84:15:a8:b0:67:b7:6a:59:76:9b:2f:1e:
a1:f0:03:e7:57:e4:02:62:d3:58:f7:03:62:1b:e9:99:39:3b:
ba:f0:41:34:6c:8f:59:cc:07:d2:d4:ef:bc:95:c4:76:c7:3d:
b8:8a:9e:45:3a:1a:36:53:13:b0:68:14:8d:23:84:b6:71:8f:
5e:a3:53:76:3c:a2:01:c7:c4:ec:6a:3f:97:b7:51:16:62:70:
47:19:91:91:8e:df:61:20:29:77:2e:57:19:48:3c:31:ce:93:
8f:a7:87:55:0a:b7:88:b6:ca:f6:85:74:20:d9:4b:7e:44:c1:
fc:44:4f:83:6b:31:12:1c:75:a8:1f:67:83:46:df:5c:c5:8b:
9e:87:35:03:e3:50:a9:32:72:64:eb:a3:ed:c1:30:2c:91:27:
58:cc:e7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:31 2026 by rpki-client