Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: gwp2yammySCTHbRlcxwAYClVZKT3fum1JrTidel9ceM=
Subject key identifier: 0B:B6:95:E9:07:61:D7:3E:1D:1B:BC:96:B8:11:80:D7:6C:16:CF:E3
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 01A1E05FBACB6C215345DCD523BD3F12D853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 17A2
Signing time: Sun 15 Nov 2026 18:02:12 +0000
Manifest this update: Sun 15 Nov 2026 18:02:12 +0000
Manifest next update: Mon 16 Nov 2026 18:02:12 +0000
Files and hashes: 1: blJ-TZh-82zY8BmhlGXDYcWlXEM.roa (hash: Fd7qkgfgnAB5yGlcwTOLNMtcHfXu1EK11nyoGzaI4T8=)
2: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: Nsd1ALMfVHtDmScvEqbQzZAbc9zj8krjAzOlcs27j50=)
3: uGcdeOeH2FGE8oSm_emFftbBDBI.roa (hash: K6Jsrsz0fx7XMWqDVYW8cVOMG7U2AmGR+nHljnd4RYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:ba:cb:6c:21:53:45:dc:d5:23:bd:3f:12:d8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Nov 15 18:02:12 2026 GMT
Not After : Nov 16 18:02:12 2026 GMT
Subject: CN=0bb695e90761d73e1d1bbc96b81180d76c16cfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:06:16:b5:c6:6d:01:f9:f6:5e:11:a5:e4:
dd:af:12:02:70:2f:8a:8c:50:3a:57:98:66:02:b5:
77:14:0f:da:1b:80:a9:d3:5b:27:37:a8:e4:60:29:
cc:55:8b:91:d5:0d:9e:5e:2f:32:3d:db:ad:40:61:
0c:35:8b:e0:20:f3:e3:60:82:5f:b1:ff:f8:d6:41:
d7:00:42:0f:65:d0:ab:3c:a6:f5:6f:0b:1c:fa:c2:
9d:45:95:02:bf:aa:a4:91:24:0e:af:39:ea:92:02:
6e:c4:05:db:af:2d:99:40:72:ac:01:b3:15:28:65:
a0:e6:f3:7f:11:27:da:1d:36:b7:e9:96:2e:c0:0d:
5a:f0:65:17:05:d5:fe:eb:10:7a:65:2c:7e:aa:2c:
b5:dd:1a:56:29:b5:f8:92:ff:46:f6:11:ca:96:af:
ea:4e:d0:b4:a8:0a:18:00:c1:79:5f:c9:9e:5c:1c:
82:25:82:d1:db:00:a9:c2:3f:2e:ae:a6:4d:50:fb:
07:b5:43:8d:cb:b7:f6:27:38:a4:bd:e5:bd:72:b1:
50:ae:3d:93:41:cf:5b:10:c5:40:5b:67:74:3a:a1:
05:1d:1f:0c:5c:99:2f:03:05:09:3b:64:ca:1c:40:
31:46:96:35:a0:52:3b:30:78:71:c8:3c:71:94:ba:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B6:95:E9:07:61:D7:3E:1D:1B:BC:96:B8:11:80:D7:6C:16:CF:E3
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3f:cf:22:cb:b1:ba:59:76:7f:cc:7a:01:c4:4c:63:48:44:
18:b4:19:9a:dc:64:e8:31:3a:ae:78:00:3b:42:93:2d:74:44:
21:75:6d:bc:e4:75:e2:c8:60:bf:4a:2f:94:7d:8f:90:c5:a8:
1e:d6:18:f5:64:be:3f:3e:56:d5:c5:04:d6:6b:b1:d9:ae:3c:
80:5a:49:39:c3:b5:4c:1d:69:ae:e2:ed:a1:aa:c5:9a:06:32:
15:ac:79:64:e4:44:65:e7:dc:85:5b:98:af:99:38:55:15:f0:
a8:1d:9b:75:6f:0d:01:1d:0f:56:d4:91:33:ff:0b:76:e2:d9:
fb:9b:5a:1d:b2:bf:d9:4c:4a:96:37:d3:09:a8:8c:51:e0:2a:
28:5d:00:8a:26:db:92:3a:c3:47:26:77:b9:30:9e:a5:a9:06:
de:c3:d4:62:6f:be:c2:51:14:fe:71:60:1c:ee:42:81:ba:0e:
b5:9d:36:1d:fd:83:a7:07:2f:5a:e4:cb:a4:b3:1f:2d:57:5b:
9a:a1:d7:a6:41:14:d9:39:0a:89:de:f3:45:e3:0f:ac:bf:84:
e6:cd:bf:86:91:ef:7e:f9:11:be:0b:9a:dc:6d:ee:3f:97:d8:
05:3a:fc:c2:e0:f9:03:c4:ba:c2:9f:30:5f:79:fd:9e:dd:a4:
7d:3f:a8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:11:20 2026 by rpki-client