Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: +8KeEqCEDKgFyQEC7i91TSHS5vnB3cY9roLzc4nivpk=
Subject key identifier: 3A:59:5A:6C:25:E3:CD:07:60:F1:31:5B:22:EF:9E:A0:C9:45:E6:D8
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 01A0DF860ECD626E6C10B6AF31AB35DFE279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 107C
Signing time: Sat 26 Sep 2026 21:01:39 +0000
Manifest this update: Sat 26 Sep 2026 21:01:39 +0000
Manifest next update: Sun 27 Sep 2026 21:01:39 +0000
Files and hashes: 1: 4n7f8hSe_-4Wy2bDVW-WXjUIx0g.roa (hash: 5C3gCij/JOO8iJfKMKfHtP05aLMSh42RFLgeNEwUl6g=)
2: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: zIVZDR/VKRCib5P3dM0GsBuZM7z9dO4P+I5kJnzKjtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:0e:cd:62:6e:6c:10:b6:af:31:ab:35:df:e2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Sep 26 21:01:39 2026 GMT
Not After : Sep 27 21:01:39 2026 GMT
Subject: CN=3a595a6c25e3cd0760f1315b22ef9ea0c945e6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:b2:4b:0b:20:39:aa:b1:04:62:f7:bb:36:
be:98:75:b9:3a:a2:4d:a6:b7:97:71:ff:51:32:b5:
29:cf:42:38:68:9d:f2:b0:76:1a:83:d0:8a:54:3f:
8e:4c:11:66:a0:d5:47:c0:17:f2:83:0a:4f:26:85:
f3:03:c4:8f:09:df:6c:72:23:13:6c:8c:d7:ca:8d:
80:ff:cc:54:e8:d6:3e:02:b3:8d:6e:dd:3b:fb:5c:
47:9d:48:a1:76:66:24:5f:32:7b:b8:34:b1:fc:72:
be:a8:a6:82:91:ce:66:72:21:9a:ce:10:a3:9d:fd:
8c:c4:91:9a:23:6f:4f:2a:2a:83:da:b5:15:f3:50:
e1:13:cb:44:8b:c9:c3:26:e2:29:34:eb:1a:a4:f2:
b0:77:d9:03:55:51:85:7c:61:f8:b7:8c:a7:70:89:
1a:86:5d:c6:fc:7b:c1:4e:17:eb:07:0f:ed:2f:c4:
78:8c:58:0d:5b:45:a6:06:15:ce:71:d5:82:8f:34:
96:6d:7a:1e:45:b3:19:f9:4c:ad:14:b0:cd:39:da:
03:26:66:60:bc:77:b1:62:b4:7c:f6:b6:00:57:21:
e0:d8:a2:e1:bf:3a:8e:33:14:c5:54:ea:44:a0:6d:
66:ed:b9:5e:be:e5:09:7c:2b:06:2a:e8:15:d2:9e:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:59:5A:6C:25:E3:CD:07:60:F1:31:5B:22:EF:9E:A0:C9:45:E6:D8
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:a1:43:a4:43:9e:65:77:c8:33:54:e9:67:34:4e:28:2e:db:
14:e0:2b:8f:36:40:9c:7f:e0:12:ea:a4:36:5c:71:c7:23:33:
66:74:e1:7d:bc:1c:f4:a5:4e:51:69:a3:7c:92:b5:c4:57:34:
57:cd:69:05:4b:e7:51:b6:86:a2:b9:67:df:c8:e5:48:ca:29:
40:3a:33:df:0e:d9:19:b1:ee:5b:48:a7:cc:27:78:93:58:cf:
44:e3:4c:dc:f5:48:27:cd:54:43:bf:8b:56:50:08:01:f2:ea:
a9:ab:d4:ad:48:88:2b:c1:84:59:b1:11:b6:57:ea:4e:68:79:
69:0d:e8:fd:6e:88:43:c6:56:64:02:a4:cf:4d:cc:2a:dd:87:
0d:48:59:8b:f9:ed:f3:2d:9a:86:84:0a:2d:c4:60:42:6a:a3:
65:72:54:94:70:34:6e:73:52:f4:7e:f4:7d:a6:c6:95:b4:52:
e5:bd:4f:0b:5d:19:09:3a:62:d1:b1:56:35:1c:aa:ec:1b:8e:
64:78:95:47:be:2c:89:1f:15:0f:b6:76:07:2b:94:e4:aa:c4:
73:cc:95:37:5f:8c:e7:aa:88:e9:cb:bc:e1:5e:ec:7f:37:0b:
0a:0f:e6:83:ce:51:f7:a1:a0:d2:6d:a1:38:d5:76:2a:0a:06:
b3:aa:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:07:34 2026 by rpki-client