Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
File: D_HA6RHM5MRT_sKxaPbBPTbg34U.mft (raw, json)
Hash identifier: tx+TedkVsENl3Pktg9tZAm4TvPmPMKWtkXnLuTlS/Bs=
Subject key identifier: D0:C0:92:08:72:CD:02:0F:05:BF:CE:B6:30:16:1B:92:4A:2E:A0:AE
Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Certificate serial: 01A0D200D98D47DAF756443B844B6AC1D3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
Manifest number: 0284
Signing time: Thu 24 Sep 2026 06:01:06 +0000
Manifest this update: Thu 24 Sep 2026 06:01:06 +0000
Manifest next update: Fri 25 Sep 2026 06:01:06 +0000
Files and hashes: 1: A2gg-MX124Lpmk4q6amGH364pI8.roa (hash: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4=)
2: D_HA6RHM5MRT_sKxaPbBPTbg34U.crl (hash: aAF5mch4wScScnUwZWX2OC/wketcQ5va64R1Sv0QdVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:d9:8d:47:da:f7:56:44:3b:84:4b:6a:c1:d3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Validity
Not Before: Sep 24 06:01:06 2026 GMT
Not After : Sep 25 06:01:06 2026 GMT
Subject: CN=d0c0920872cd020f05bfceb630161b924a2ea0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:bf:90:3e:7b:ca:d0:4f:9b:0f:08:71:b5:
bd:cb:f5:42:22:2d:50:c3:82:45:37:f8:bb:54:af:
6c:0d:1f:f0:dc:a1:60:bd:20:18:a0:68:c4:a2:ca:
ba:95:ea:5d:fd:f6:1f:96:1d:fc:36:dd:b4:6e:e9:
ca:16:73:93:23:87:7c:bc:c1:80:d9:b3:96:62:e7:
51:e2:7d:e5:64:d1:02:17:e1:9c:2c:b1:ee:cf:89:
fa:01:9c:74:70:78:85:5e:23:c7:cd:fb:a4:d4:48:
cf:f1:50:25:dd:b6:1b:b1:69:6d:e1:2d:23:01:a5:
60:cb:d4:8d:4a:a2:4b:54:13:fd:d7:86:f7:99:03:
b9:a6:a9:50:5f:fe:1c:60:24:32:87:6c:bf:7e:95:
c3:7f:e5:42:3b:de:46:92:21:38:f7:12:ab:06:31:
2f:ce:26:55:75:62:01:26:b7:c8:7c:73:88:47:f1:
e9:d3:59:fa:cf:e7:06:3f:08:fc:ed:19:e3:01:bf:
47:34:c7:fc:27:d0:a6:fc:30:98:99:62:bc:10:f8:
d5:cf:e9:6c:9d:cd:cc:0d:c5:df:10:7e:66:6b:15:
3c:87:44:ff:c1:37:6c:fd:83:67:3c:36:67:ae:19:
1f:f5:95:c5:49:51:ea:ac:c1:71:3f:8a:b0:44:06:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:92:08:72:CD:02:0F:05:BF:CE:B6:30:16:1B:92:4A:2E:A0:AE
X509v3 Authority Key Identifier:
keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8a:e8:b6:9b:07:db:ad:ad:3d:e9:65:54:9b:40:fb:2c:26:
e7:c3:0a:0a:da:9e:d4:08:3e:11:75:ac:c7:af:1d:2e:0f:fe:
48:c6:94:e0:2c:6e:0e:b9:a9:fe:2c:c1:cb:37:58:e2:2d:a3:
a1:65:d6:b8:bd:f0:48:7b:df:15:3f:c7:ee:49:33:5d:fd:4c:
32:b1:e4:21:f5:7b:06:29:3c:99:cc:a0:93:74:7d:0c:01:d7:
80:a3:a6:46:00:f3:2b:ff:38:2d:dd:22:ea:a7:58:1c:ea:33:
c8:c3:77:00:cf:b9:9a:17:9e:48:02:5c:53:1d:cf:19:41:ff:
ad:1e:90:76:79:5b:1b:60:a2:48:2a:73:4f:81:c5:cc:95:84:
82:3a:b5:79:1c:da:dc:bb:41:78:a5:8b:cb:54:52:23:bb:d1:
f5:28:e1:0a:09:34:b6:a6:10:7d:4e:bf:98:fe:0a:7c:79:47:
af:36:47:65:b4:87:2b:15:b3:54:15:d7:69:56:0a:3c:4d:83:
70:33:00:00:4e:c0:4d:fb:04:d8:7d:7b:38:78:9a:c8:8e:04:
4c:17:2d:ee:f2:78:34:35:ef:c9:82:3d:70:72:1e:78:00:a0:
10:f0:f9:3b:b9:f3:86:b6:b5:b8:8e:a0:d3:ba:1a:5b:63:e0:
a1:87:89:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:29:31 2026 by rpki-client