Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: NhfZOIMAYqLtYvZp8m0HAuxRkvEv+K70u2w4ho6RR+U=
Subject key identifier: 3E:91:FC:AE:FA:EF:08:7A:95:84:89:90:73:5E:59:F2:94:9F:B7:CD
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 019F90FF2F5EDC53A6D47E02C3602AE3519F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0EE9
Signing time: Thu 23 Jul 2026 22:01:10 +0000
Manifest this update: Thu 23 Jul 2026 22:01:10 +0000
Manifest next update: Fri 24 Jul 2026 22:01:10 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: 65Vf5gKoWMaAiP5ZE2PigvNsj1dPMzAljH7pODD1IGk=)
2: NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa (hash: P0xJoWIH1C9Cod99ksa8hxvCHok9B+UC8X73hnLeN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:2f:5e:dc:53:a6:d4:7e:02:c3:60:2a:e3:51:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Jul 23 22:01:10 2026 GMT
Not After : Jul 24 22:01:10 2026 GMT
Subject: CN=3e91fcaefaef087a95848990735e59f2949fb7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:c4:72:1a:0e:0b:71:0b:26:58:36:78:e1:
a2:51:b3:49:96:04:a1:da:77:cf:c5:89:99:7d:9c:
ac:1e:1f:99:eb:80:88:9f:8b:0c:13:e5:11:89:92:
54:9c:ac:67:c9:67:56:11:48:82:20:50:0f:c1:de:
4a:39:1b:a2:81:40:27:a7:15:cf:ad:7b:77:b8:01:
1f:bb:e0:e5:8b:79:42:f6:4e:2f:a6:b7:33:a4:14:
7e:41:96:7f:44:22:7a:e4:d2:0b:58:aa:97:f4:d0:
0a:8e:e3:12:d1:e7:c7:87:8c:06:df:33:8e:ec:0b:
45:67:aa:35:e0:7e:ad:7a:eb:33:4b:19:0c:88:0a:
fd:b2:aa:ee:47:dc:61:d5:2f:d5:79:dd:67:4d:9c:
5f:8f:79:f0:e2:00:77:4f:69:0b:b0:35:7e:f4:26:
0a:c0:24:3e:c2:f6:46:13:eb:ac:b5:91:f5:89:87:
f5:eb:6d:f5:9f:ef:c2:be:26:c8:0d:f2:79:6b:f3:
d6:8d:38:39:01:a2:7c:a5:6d:4e:ba:bf:f4:fe:cf:
a6:b9:30:ea:2f:5f:ef:88:2e:13:84:2b:b2:0e:89:
09:08:29:52:06:e7:b9:a2:76:5d:ab:b7:cd:81:53:
4d:82:df:01:61:eb:aa:3f:0e:52:be:59:f0:a9:cd:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:91:FC:AE:FA:EF:08:7A:95:84:89:90:73:5E:59:F2:94:9F:B7:CD
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:34:ef:10:ce:ef:42:ef:1e:ff:e0:19:ef:76:88:a0:cd:53:
f1:d4:40:c6:b9:c3:c4:84:33:ee:00:08:68:9f:e8:1c:6f:15:
13:36:fe:f2:90:b2:d0:07:eb:d4:13:40:15:05:8c:52:05:f5:
a5:0f:78:d4:86:5a:c6:ad:1b:44:00:3c:70:a6:d3:ff:75:88:
1c:94:06:27:e2:81:57:59:da:c1:79:a0:57:7a:ec:4f:2f:ce:
05:86:2d:67:b4:4d:65:0f:ed:a2:c7:e2:16:d7:4a:7f:59:d0:
29:a5:d7:70:5f:55:68:21:8b:e6:2f:dd:ad:a4:6c:80:18:93:
9d:c5:d4:92:e7:7e:04:ec:71:46:22:75:e2:fb:67:e8:ad:31:
24:8f:e2:8e:b4:62:11:e0:86:f2:f9:d9:82:ba:76:99:98:f1:
37:9e:84:3d:61:d7:52:79:bc:c4:1f:01:18:03:60:b3:d3:c6:
31:9e:7b:88:5e:59:5f:de:6f:7f:93:49:1f:4f:95:0a:d4:f2:
6f:3b:f6:f2:20:13:58:94:5f:c5:20:1f:36:ec:e8:5b:80:df:
8b:6f:e7:46:63:b9:6f:41:36:58:65:3f:fe:aa:3e:58:64:fa:
d2:3b:d8:b3:18:6b:dd:e6:df:ee:93:6d:09:6e:8a:0c:ed:e5:
3e:81:ad:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:39:58 2026 by rpki-client