Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
File: hESS25y7Cg62v2nCXIaWH0kYPJs.mft (raw, json)
Hash identifier: PBR0m1fOqZUFugH7mh8fZQRoV9/gYZux51EvMfFwZjU=
Subject key identifier: F1:97:59:11:51:1B:39:67:8C:32:09:D4:51:AF:9A:17:DA:D2:9F:2F
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 01A0D94CAECA3284949EF742F0308135E00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
Manifest number: 0AF5
Signing time: Fri 25 Sep 2026 16:01:16 +0000
Manifest this update: Fri 25 Sep 2026 16:01:16 +0000
Manifest next update: Sat 26 Sep 2026 16:01:16 +0000
Files and hashes: 1: LXqYHZ-ZPGUTxzVaTVtl0COHTWo.roa (hash: 5NQrQW9N3IgSM0PQCJC1g2KETpNZ4HSxzHK048rjxU8=)
2: VMwkQbgZsaD1modLD1OCZoOdaP0.roa (hash: hFT/2DxMA5YwrG6LBI7zWfiz+2OyUaLWWeHm7RJ0nXg=)
3: cPKzl4MAM1VPvGgqdoHotmjF_TQ.roa (hash: Kwq91RaELM7PU5xhh1ZgTtP0NFXJmqvp86LKfBSRLfM=)
4: hESS25y7Cg62v2nCXIaWH0kYPJs.crl (hash: fbJfZeCaq9Wfu/dLdZv6DesfSHmcChatpreBlkL2y/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:ae:ca:32:84:94:9e:f7:42:f0:30:81:35:e0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Sep 25 16:01:16 2026 GMT
Not After : Sep 26 16:01:16 2026 GMT
Subject: CN=f1975911511b39678c3209d451af9a17dad29f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:26:54:7b:92:7e:63:e6:ab:ff:b4:14:ca:
56:99:01:d4:a5:3e:ce:83:62:fc:bd:7c:f0:a5:39:
7f:0f:98:46:ac:24:8b:e7:d1:0d:f6:da:fa:93:d2:
ff:3b:95:f9:5c:21:3f:25:6b:35:42:c8:5e:61:53:
78:f3:24:f6:d7:9d:48:c4:a0:35:97:e3:14:ef:38:
0f:e7:49:9a:99:4b:f2:b0:87:ac:01:0a:c3:ef:96:
62:e1:94:bc:a1:91:3b:2d:b8:24:74:bc:67:98:34:
48:55:13:da:17:87:95:30:2a:38:87:c9:90:3c:05:
7c:7c:ae:62:8d:95:ec:cf:41:59:54:97:ee:b8:f3:
20:b1:ad:4d:37:60:4d:25:2b:01:d3:da:33:c0:ee:
e8:ea:e7:69:58:13:dd:a3:e4:47:bc:7e:87:47:8d:
00:86:47:83:91:2f:90:ef:30:69:62:ce:be:c2:d4:
a5:b6:97:fa:a2:b5:56:93:44:28:9c:d2:7d:78:90:
e4:3d:36:0e:1c:ad:f9:90:dc:be:a9:7d:c2:40:09:
56:4a:46:9d:ea:36:20:65:6c:4e:97:d0:30:a3:4c:
16:64:80:53:16:4f:9c:dd:fb:ca:a3:ac:d3:19:26:
58:c4:48:ee:8f:91:3e:21:f4:a3:90:03:fe:ba:36:
e7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:97:59:11:51:1B:39:67:8C:32:09:D4:51:AF:9A:17:DA:D2:9F:2F
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:83:ab:29:59:5d:81:67:7c:44:2b:c9:34:06:01:81:4e:89:
1c:43:48:66:63:c8:88:9f:57:8a:de:68:e4:b8:ed:2e:bf:54:
09:c0:4d:13:d3:a7:64:a8:a0:5f:a6:f1:46:3b:a4:53:7f:21:
c0:c5:c3:4a:21:7f:e9:19:5b:5e:ac:97:47:e3:29:f7:e8:16:
0c:5e:27:ec:de:2f:fe:ca:75:23:0d:6c:ab:e3:77:a3:14:9d:
11:58:14:5e:7d:36:23:71:8f:1e:83:47:78:d6:ae:f4:b7:94:
bc:09:36:db:02:1a:50:98:78:7c:99:cf:34:9e:93:99:18:4b:
b5:01:d4:72:3e:40:6d:e9:a5:b5:4f:d1:2a:b1:ce:b1:6a:f6:
41:0a:49:cf:21:cb:39:66:7c:09:b5:d4:d9:2c:6c:7b:3e:03:
b5:4d:78:86:72:1e:83:80:cd:b0:3a:4c:5d:ba:0f:19:97:43:
e7:ee:33:f5:18:07:ee:fe:1a:41:f4:11:e3:47:64:e2:20:c0:
29:9b:81:8c:a8:9f:c6:4d:dd:1d:b9:4e:2b:d4:c1:b4:06:7d:
c8:5b:97:5b:ed:4b:29:2b:33:4e:8b:b5:59:23:43:2a:d1:49:
12:f2:f7:32:a7:9e:b1:1f:6c:7e:10:cb:11:99:2f:be:8d:c1:
3a:ec:75:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:31:33 2026 by rpki-client