Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
File: H_oFe7xNCbnGccQ_-W81wA3p-7s.mft (raw, json)
Hash identifier: yOtrznTW+6n/xv/P+HOOkbR/i0irLu2Psrd7yttHxr4=
Subject key identifier: D5:9D:0B:DB:41:C7:B6:AC:A2:CD:78:60:05:7F:D7:37:B9:E9:12:E9
Authority key identifier: 1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
Certificate issuer: /CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Certificate serial: 01A0F00B64F56A1A5B9A27961C8DD6AF0E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
Manifest number: 012C
Signing time: Wed 30 Sep 2026 02:01:13 +0000
Manifest this update: Wed 30 Sep 2026 02:01:13 +0000
Manifest next update: Thu 01 Oct 2026 02:01:13 +0000
Files and hashes: 1: H_oFe7xNCbnGccQ_-W81wA3p-7s.crl (hash: lYcbSQQG/45MERH1pLvKQ2Dx2luRrmteDzyZGlN4lH0=)
2: TvRQaRsziqrRJCQCiUQYjyKVrn0.roa (hash: mrwUynV6T3tedBWfd3iohzz+A8WkbO6ygpgXbd4vXq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:0b:64:f5:6a:1a:5b:9a:27:96:1c:8d:d6:af:0e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Validity
Not Before: Sep 30 02:01:13 2026 GMT
Not After : Oct 1 02:01:13 2026 GMT
Subject: CN=d59d0bdb41c7b6aca2cd7860057fd737b9e912e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:eb:e6:e1:c9:75:eb:96:a6:8f:f8:35:11:
8e:e5:16:ef:68:c0:c4:da:cc:99:ab:9b:9c:e6:26:
d7:d3:0f:51:ab:98:7c:1d:c1:10:a5:75:70:f0:29:
0f:7f:c2:41:98:54:1a:1b:7d:01:d5:58:d4:90:38:
a6:0c:f1:0b:a0:2e:c4:39:4f:cb:8b:07:75:24:24:
7b:04:7a:94:ab:42:e9:1d:81:28:a2:df:13:78:0b:
8e:22:c7:9a:63:e5:81:96:81:e7:88:74:bd:4d:b6:
36:03:84:82:51:ce:b6:7e:04:38:2d:95:ae:81:d9:
fc:75:eb:8d:78:35:96:fa:8e:48:d5:6d:4f:34:e8:
3f:45:30:aa:ba:87:0f:8e:1a:69:a0:a2:3b:d7:57:
96:3f:37:cd:f4:de:76:33:ca:0f:9c:7c:9a:47:38:
9f:87:92:74:b9:03:82:27:db:d3:d6:58:7c:ac:b2:
45:14:8c:60:33:3a:91:c6:c6:d1:cd:9c:7c:5b:53:
34:99:58:de:e2:38:d0:99:e0:77:3d:fd:71:e6:69:
86:18:51:81:38:a7:10:4e:05:5b:8f:19:a2:b5:c8:
82:64:cf:90:44:96:ec:96:c9:97:3f:53:bf:b7:78:
70:bd:33:05:72:c6:36:32:cf:51:22:a6:45:4b:cc:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:0B:DB:41:C7:B6:AC:A2:CD:78:60:05:7F:D7:37:B9:E9:12:E9
X509v3 Authority Key Identifier:
keyid:1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:7b:e8:64:2a:b5:43:c3:c8:d1:ee:24:ab:53:55:f4:42:51:
86:4e:ef:62:9c:a6:6c:9f:89:73:6a:4d:1f:c9:c9:b6:8b:83:
9f:58:28:79:74:1d:f5:a1:a6:e5:5c:60:a2:8b:4a:6c:33:51:
e4:20:de:20:af:fe:a4:f2:a5:f7:85:63:b0:7f:08:e2:60:7a:
72:ab:7c:d4:38:19:45:f1:5e:c7:7c:1b:47:a7:47:9b:ea:86:
60:ef:21:dd:1a:c4:71:48:0e:82:00:2b:b6:de:1c:35:01:e2:
98:17:6f:c9:27:c3:59:35:4b:b3:db:e4:b5:fe:e8:98:b2:4b:
8a:10:b5:41:a1:76:c5:e1:4a:ec:bc:85:27:f1:ce:fc:d4:d8:
c6:b4:8a:e6:70:7d:ac:64:8d:68:76:de:1c:cf:9c:38:cd:22:
8f:14:2f:ad:91:8f:5d:da:ba:47:19:2a:cf:01:cb:ab:b9:2c:
8b:8f:8e:fd:62:09:7a:d0:84:99:f2:c5:da:37:b3:da:73:6c:
46:96:9e:c1:6e:25:5e:c1:14:e9:11:1a:a7:26:d5:ea:cb:69:
21:05:d7:cf:d6:7f:9e:a3:f5:97:d4:cd:c8:db:f2:57:26:a2:
52:97:74:13:f6:28:4b:4d:78:18:e9:4c:79:7f:69:da:85:2c:
41:35:0e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 13:21:45 2026 by rpki-client