Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
File: hp2fc3396q0-lfhm6NMqZsT4oLI.mft (raw, json)
Hash identifier: LfxyQXOADk9mMtDgPoAu8A9kUstvP8QqDo960RDG9Vo=
Subject key identifier: C9:7D:D8:06:18:65:26:64:40:EC:29:4D:D6:74:45:03:8D:BB:9D:66
Authority key identifier: 86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
Certificate issuer: /CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Certificate serial: 01A0F6B2B8170490BD1392D1F127F414E0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
Manifest number: F9
Signing time: Thu 01 Oct 2026 09:01:42 +0000
Manifest this update: Thu 01 Oct 2026 09:01:42 +0000
Manifest next update: Fri 02 Oct 2026 09:01:42 +0000
Files and hashes: 1: 7Tyv75qflu1MI2EbiYIYOe-EMOs.roa (hash: VD2V/Wqx8qVUzX6JNvOF1zN+nPxKD5Y7QjXuUoG/ZVc=)
2: hp2fc3396q0-lfhm6NMqZsT4oLI.crl (hash: /kjwn/SJVE2WDRJ+tbphqzdrppj+4pipqpLBssZoOUY=)
3: ylnh5jHJGqU5w3NKWDSXLJQlbV8.asa (hash: DhXmkIGv0YJ5BrhiAQaTPI3U/c809JbcweCxcOd5t5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b2:b8:17:04:90:bd:13:92:d1:f1:27:f4:14:e0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Validity
Not Before: Oct 1 09:01:42 2026 GMT
Not After : Oct 2 09:01:42 2026 GMT
Subject: CN=c97dd8061865266440ec294dd67445038dbb9d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d8:18:53:fc:62:74:b7:2e:1e:dd:31:f2:17:
2f:49:61:c2:52:56:82:48:3f:68:94:c3:c7:37:b6:
e3:7a:f4:18:c3:10:4a:8a:de:4f:ad:c6:0a:9b:1f:
e2:23:b6:4d:4e:74:92:cd:d2:d9:da:1c:1f:c2:92:
38:bb:74:74:12:61:43:06:26:ff:43:da:b8:7e:6a:
7f:84:49:35:f6:e6:4d:9b:9f:15:48:b8:17:2a:79:
19:f1:b7:cc:ed:d6:30:c2:5b:0f:79:4d:6f:86:5c:
5b:99:0d:ba:2d:11:05:08:e7:c4:e3:bc:ca:56:66:
e1:8d:a7:44:18:c1:87:1d:df:53:0c:02:75:83:3f:
02:ef:e1:18:9f:87:5d:36:0d:c6:96:4f:53:e0:00:
9a:ff:87:39:3d:ac:81:70:7c:73:51:ea:4e:e1:82:
40:87:92:14:c1:02:f6:79:ac:a3:01:3e:70:10:3b:
00:0f:25:3b:f6:b2:1c:97:6d:75:56:bf:9e:d3:3e:
fe:6d:2a:26:45:0e:48:7b:cc:77:87:0a:ed:8a:34:
92:c9:f5:ab:ae:a1:3b:ea:c4:43:44:4a:73:a1:42:
42:fe:17:1d:b7:38:b2:89:6e:e5:fe:44:6f:51:25:
10:89:6d:76:38:b4:f5:d9:b6:e4:57:56:0f:f0:6e:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7D:D8:06:18:65:26:64:40:EC:29:4D:D6:74:45:03:8D:BB:9D:66
X509v3 Authority Key Identifier:
keyid:86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c6:09:f7:7e:dc:f4:0d:cb:41:e0:28:74:60:76:83:1b:fd:
58:1e:8a:57:54:aa:2b:2d:88:93:c7:a2:92:0e:f5:a0:84:3a:
1d:d5:ae:65:5b:50:f5:e7:8d:ec:dd:61:e4:39:b6:17:6c:af:
32:ee:80:01:ea:a4:f8:aa:50:87:b9:2b:2d:77:bd:8a:ed:e5:
ba:79:eb:12:30:7c:96:1f:4c:c7:cd:87:fe:d7:6e:ac:68:ab:
05:68:36:91:97:fe:f5:4c:50:fc:6e:05:fa:73:b3:91:99:e0:
ec:be:fd:c0:c9:6a:2b:d9:cb:4d:a6:5e:6c:94:a9:6a:72:f5:
23:e6:b8:e7:95:32:3e:48:9e:1d:ad:2e:42:01:1a:42:ad:20:
fc:ac:62:21:08:74:ea:d9:85:be:99:d1:5a:5f:c5:f3:1f:bb:
30:19:a7:8e:82:10:4e:8c:fe:0b:27:ca:44:90:05:d1:3b:ef:
f1:a2:44:4c:f7:68:6e:2c:4b:95:b4:7c:6a:15:26:04:a5:59:
48:26:b3:dc:65:3b:a2:63:77:9f:19:96:34:c6:53:08:cc:c7:
a2:4c:dc:65:d0:33:9d:0f:16:f1:f2:ae:26:c5:fa:c8:6e:a8:
82:02:69:0e:1d:c7:ae:d9:84:0a:ef:93:b1:bf:d8:5e:71:ac:
6d:26:60:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:14:55 2026 by rpki-client