Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: E30ANNRCwWIr+j0V1CksxRlHJlxgj1x2srp98yFLXn4=
Subject key identifier: FB:11:7E:EA:41:F9:FC:76:B3:CA:47:C1:B4:8D:14:66:1D:F7:9B:F1
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 01A0D19226BC4EF4BC57596608B5984F1B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0F8F
Signing time: Thu 24 Sep 2026 04:00:11 +0000
Manifest this update: Thu 24 Sep 2026 04:00:11 +0000
Manifest next update: Fri 25 Sep 2026 04:00:11 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: yg9Oaok3n94WVuSaaPKrCVy3Gp6q89wSg79JrldAFiI=)
2: NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa (hash: P0xJoWIH1C9Cod99ksa8hxvCHok9B+UC8X73hnLeN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:26:bc:4e:f4:bc:57:59:66:08:b5:98:4f:1b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Sep 24 04:00:11 2026 GMT
Not After : Sep 25 04:00:11 2026 GMT
Subject: CN=fb117eea41f9fc76b3ca47c1b48d14661df79bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:0e:f4:c3:85:65:59:e2:3c:d5:b4:f1:b7:
bb:75:9f:a3:3b:9f:64:4f:bc:49:3d:28:50:f6:ca:
3e:13:ba:77:18:cd:95:8d:a1:66:db:ea:ce:9d:3f:
f6:67:a7:68:75:9c:1d:98:5d:d2:01:db:c9:9f:59:
86:84:6d:5d:1f:56:84:5a:05:7a:97:50:7f:1f:2a:
83:3f:e5:2e:af:0b:33:97:88:f4:79:6c:ff:9a:54:
de:5b:c6:2a:3c:c6:77:39:46:48:8f:a9:18:d1:6c:
de:1b:96:20:ab:e6:92:38:20:56:f3:ec:3b:93:0c:
a7:e3:66:22:38:d4:6d:bc:d6:1f:df:1c:95:f6:66:
26:c1:2b:65:fb:f4:57:ce:21:a9:55:11:74:0a:45:
91:30:9c:d4:83:c6:4c:94:a3:76:2f:32:5f:06:bb:
7c:3a:64:d1:ca:66:5b:93:fa:95:01:0e:50:9e:c9:
81:74:ea:b1:8e:1f:dc:09:37:1d:fa:86:0a:73:55:
4f:7e:3d:e7:52:75:99:14:41:95:93:a6:e5:51:36:
bf:ab:ca:ff:b6:cb:e5:25:5e:f0:75:00:39:46:48:
e5:5f:a8:66:a6:ab:67:e0:de:3c:d1:1f:90:f9:b5:
ae:12:01:7b:1a:b6:f5:f7:64:85:26:58:23:f2:08:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:11:7E:EA:41:F9:FC:76:B3:CA:47:C1:B4:8D:14:66:1D:F7:9B:F1
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7d:99:4d:6d:e2:33:bf:1a:2c:c7:4b:96:be:8d:fd:fe:71:
bf:5c:9a:c7:00:25:0d:b2:50:e8:ad:28:9c:09:1b:d9:ed:c4:
a6:44:5a:8d:1e:3f:fb:24:a7:93:fd:3d:99:11:67:67:5c:a4:
f2:35:8f:da:30:0a:06:a4:05:1f:e1:fb:4e:17:2d:da:8c:af:
29:89:07:fc:2f:af:92:99:ee:de:c8:c8:ba:75:50:dc:41:a1:
1c:ec:1a:2a:2a:81:49:a0:ef:26:64:9b:e5:3e:4b:69:96:fe:
41:a4:fb:72:cf:04:02:e7:96:fc:26:9e:8e:ab:4c:14:87:3a:
ad:a3:99:57:cd:25:b1:08:89:4b:20:a8:6b:28:f1:a0:dc:25:
45:d5:dc:a6:84:18:fd:95:19:b6:40:f3:8b:76:33:f9:63:4a:
3a:af:ef:05:f6:d0:d6:4b:29:00:76:22:4a:4c:bc:83:64:01:
f6:20:26:9c:08:6c:e0:d2:fb:1e:f6:af:c4:19:57:00:3e:0c:
f8:09:11:45:3e:9c:38:7f:0f:b6:05:b2:46:74:ec:43:c0:e9:
68:38:63:5a:b5:e3:30:b5:aa:97:32:34:0e:8a:aa:51:d5:c4:
3f:35:0d:f3:d9:0d:9d:4a:eb:56:49:37:b7:c5:b5:63:df:da:
09:94:4a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:23:12 2026 by rpki-client