Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: OewAnp8EB9ysU8yIoldR3O3ysB4VkkB8CwlEvDSEzfM=
Subject key identifier: 12:FB:70:C3:68:4E:3D:F8:BD:28:88:4A:9F:B7:D2:73:EE:63:F8:2E
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 01A0D4945D77240ED4B39382E461C724E55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0FE5
Signing time: Thu 24 Sep 2026 18:01:28 +0000
Manifest this update: Thu 24 Sep 2026 18:01:28 +0000
Manifest next update: Fri 25 Sep 2026 18:01:28 +0000
Files and hashes: 1: ILRt9LkKcLV8zTDhe4daBlelpbE.roa (hash: NtW+TS7Xs6SFuc4EVBUAJ27kGuxkzyU+HkBhm6grJWo=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: BYU38edoQbg5sRPFDTvgGWcV12/716YhWTvdBbde8DY=)
3: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (hash: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs=)
4: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (hash: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:5d:77:24:0e:d4:b3:93:82:e4:61:c7:24:e5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Sep 24 18:01:28 2026 GMT
Not After : Sep 25 18:01:28 2026 GMT
Subject: CN=12fb70c3684e3df8bd28884a9fb7d273ee63f82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:49:be:97:2e:c0:4a:79:d0:88:1d:94:df:
95:a2:78:80:f0:36:b6:27:fe:7f:69:b9:6b:29:73:
9d:36:7c:76:41:76:bf:5f:8c:89:a4:47:e5:da:51:
d5:08:d5:8f:d0:38:be:d7:ac:e1:71:5d:e9:c7:54:
13:da:64:78:02:48:77:ac:2a:d7:7a:67:47:76:d3:
e0:e9:39:84:fc:d8:f2:6f:12:c1:bb:d0:9f:b3:01:
33:46:8e:d3:6c:a6:51:37:b8:fc:e7:45:dd:0b:d9:
49:5f:61:d9:a9:d1:05:c3:f1:bb:d0:e3:82:4a:d1:
81:4b:12:10:d8:50:1b:e1:aa:60:46:98:6d:4f:d4:
da:04:2e:3e:9d:d8:c6:23:f2:6d:eb:82:c4:23:bd:
f1:5b:2c:5f:94:f8:3d:fd:10:b4:8a:7a:df:d4:86:
6c:ab:05:05:2e:8d:ee:6e:26:2f:e0:09:99:35:8a:
04:03:fe:dd:7f:52:01:2b:ac:2d:ac:44:db:e5:9e:
72:94:b9:09:39:89:4a:6a:29:29:1b:c3:c4:f5:47:
d9:c0:83:a7:12:8b:85:c4:9d:5f:f7:f6:b1:62:2b:
40:c7:97:3d:67:10:7a:9b:65:a8:1c:6a:28:bd:c8:
67:50:ae:99:16:b1:47:61:0e:7a:39:e4:2a:28:ee:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FB:70:C3:68:4E:3D:F8:BD:28:88:4A:9F:B7:D2:73:EE:63:F8:2E
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a7:e9:5a:6e:4d:73:08:ca:9f:24:7e:a5:dc:e2:92:a1:4b:
bb:9e:29:f1:ac:c4:87:92:ad:18:e0:ff:84:65:2b:49:0d:60:
1e:13:41:45:29:9f:ca:75:9f:cd:55:e8:fa:a1:aa:37:ec:0d:
d5:b9:15:fb:45:b6:d9:63:64:21:1c:5d:11:e3:bd:44:d6:71:
40:a4:5c:6f:52:f4:95:63:04:42:f6:7e:57:07:23:07:d4:e7:
f4:ea:25:19:d9:9e:32:ad:c7:53:92:e5:ad:02:61:85:d7:9c:
34:3d:c9:87:65:cb:10:d0:e7:5e:10:db:da:ae:e6:d3:11:60:
04:60:14:11:27:04:76:79:ed:75:ba:3f:82:b9:56:41:84:8d:
6b:e6:59:76:bb:aa:bf:54:10:f3:3d:16:e7:76:25:82:c7:25:
82:d0:85:47:98:9c:81:94:30:ce:e8:c5:40:8d:fb:31:eb:8e:
6e:ae:9e:92:b5:0b:05:46:19:48:b9:bd:27:3b:58:9a:69:7b:
e1:eb:5d:11:63:2a:07:72:12:a4:a5:ab:cc:3d:6b:fe:3f:97:
c0:b8:ed:d9:ed:c1:f6:42:3e:bf:8c:39:27:62:21:13:6c:52:
f7:b2:63:be:19:e6:8b:ce:17:ab:dd:a2:50:24:9b:6c:3a:f4:
a2:a9:b9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:41:29 2026 by rpki-client