Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: CQ9wYYdMjZd39N50r6U4nblSC64aNzHKpvNTlMS9R50=
Subject key identifier: 42:2D:4E:A4:3A:76:26:F0:14:71:B1:F7:7B:43:12:1F:A6:11:F9:46
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01A0D494355654356E426BAE5672C74B25F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 0B2A
Signing time: Thu 24 Sep 2026 18:01:17 +0000
Manifest this update: Thu 24 Sep 2026 18:01:17 +0000
Manifest next update: Fri 25 Sep 2026 18:01:17 +0000
Files and hashes: 1: 1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa (hash: He4PUZhKvLvJbADEv84xs1x0RYoT7WY7P6/fpECXwDc=)
2: 8CXXxXOl_TgN0Sp_A7Pbzfq6fKY.roa (hash: x6lpEzFYhwFVijSBlfFL06mSEvzg6Wxii04ehpDZw4U=)
3: GUhp8Wvci_j7T4kmVTXcfm-wQGw.roa (hash: sCSjIJ+mAkndBqHerekCSW8OY51YrH4HeTZcaJ0ddlk=)
4: GW4dInsub7k2BztNc9KO0RXqd4A.roa (hash: IMiWrs6n4JNtZ7SiOWqNyYDbPpDBAplDzPrQ8pcJs/g=)
5: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: Ygo/+7BjBvU1TrUIoQvKAtt2MKyz1hHuSHehIn09i5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:35:56:54:35:6e:42:6b:ae:56:72:c7:4b:25:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Sep 24 18:01:17 2026 GMT
Not After : Sep 25 18:01:17 2026 GMT
Subject: CN=422d4ea43a7626f01471b1f77b43121fa611f946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:00:e9:45:91:a3:cd:eb:ad:13:51:c5:11:
ed:9d:c2:09:34:7c:e7:b3:28:03:81:a8:2c:2c:6e:
34:6e:80:fa:cb:59:48:eb:57:28:38:69:4b:80:ea:
8a:0d:50:a9:be:9c:14:3f:aa:dc:9a:b1:09:18:74:
e6:79:5e:49:2e:1e:27:b5:55:e8:95:25:2f:e7:14:
1e:0d:42:b4:83:b2:8f:40:10:79:f3:ca:34:8f:4e:
e8:9d:54:c4:05:43:d2:5b:ad:9d:1b:75:c1:9c:50:
62:70:cb:ff:3b:8b:59:b5:c6:3f:30:de:23:27:d5:
02:63:7a:b1:e2:ad:f6:07:4e:bc:95:2e:06:0a:f1:
23:10:ab:c8:b9:bf:98:b4:4e:aa:8e:25:9e:b5:e9:
3b:04:73:2b:19:9e:0e:c5:6a:e8:fa:b1:c7:99:19:
61:e7:c5:29:68:d1:46:31:5b:73:14:17:f4:f8:a0:
82:49:b4:0e:bd:be:79:fa:03:c1:ad:0b:a2:0c:f6:
08:97:2d:49:0b:6c:42:2d:d4:c6:e4:ca:0b:51:8d:
8b:34:c6:34:5d:38:49:76:d7:2a:44:5a:96:c3:8e:
d7:1e:e5:b8:45:77:f7:97:49:df:0a:c6:62:af:e9:
6c:35:ff:1f:2a:7a:1e:e6:d4:8f:01:f8:5b:60:04:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:4E:A4:3A:76:26:F0:14:71:B1:F7:7B:43:12:1F:A6:11:F9:46
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:71:1c:0b:21:0f:3e:5c:79:1b:ef:95:d0:6f:06:54:27:12:
43:c6:79:2e:5e:02:70:d3:91:cf:df:21:44:59:22:96:76:6d:
13:e4:59:ff:0a:18:f9:78:bb:eb:f2:22:07:79:13:fd:d6:83:
a6:3f:8f:3f:57:ea:70:73:de:02:63:dd:be:7d:08:e8:e9:b6:
59:fa:95:cb:64:0a:94:93:6e:57:47:2f:a2:5e:50:d0:ff:5c:
fd:34:6e:e5:22:b1:26:27:52:fe:9d:a2:36:e2:dd:87:dd:81:
ae:3d:e6:d8:95:d0:fd:2d:b2:3c:4a:14:8d:e1:45:af:73:31:
e2:0b:97:71:01:53:38:e3:b4:eb:81:f8:b6:63:e4:86:1e:f5:
94:d3:87:54:fd:9a:9d:eb:0b:a3:b1:c0:1a:6a:13:82:38:a3:
e9:74:6e:c8:fb:06:2e:05:9d:a1:95:ec:be:52:f0:42:26:3e:
e0:4a:1b:03:88:4b:7d:c0:aa:72:fe:78:29:04:e0:11:05:7e:
d5:aa:39:eb:34:2e:4f:3d:ff:36:65:09:4e:a8:13:81:b8:25:
a1:32:3f:89:23:5d:4b:8c:af:a7:b6:05:f0:d9:f2:d1:91:33:
37:3e:96:aa:d3:8b:a2:28:11:26:bf:c3:76:98:3b:21:cd:26:
83:48:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:50:28 2026 by rpki-client