Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: Vd1a+fggcIXTm0rAht/AJNIKV4I1yRT0515XQgZAn60=
Subject key identifier: 2A:6F:33:BB:72:E3:1B:FF:BB:3A:A6:BB:BC:2E:3C:73:19:F7:3B:C7
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 01A1DD94DE047D73BBD9078638530234A700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 1995
Signing time: Sun 15 Nov 2026 05:01:23 +0000
Manifest this update: Sun 15 Nov 2026 05:01:23 +0000
Manifest next update: Mon 16 Nov 2026 05:01:23 +0000
Files and hashes: 1: Fbp_lxqUHehCSWbyl7sXqy6NV7c.roa (hash: 2HfCb9kniGEaBDNnHz9GBiRgabhJI0HLcxsnmcMaKY8=)
2: Kw8ydkhlfzZHeJTkr7mnY0TC51Q.roa (hash: A/++N69JbstSCEAobrMDwfyAGtA60/N4ZLrwg/2X2ok=)
3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: Jty5uM+3dLUjlhEChX6k1z54iOW02y19DJq3HyyYDCQ=)
4: tTro6Q3OQALzLcA8FA4eU5RfBWA.roa (hash: jtcqT3NEeBB17kUbe2vD9a8c2cug0yjIQxz7WQqkvtg=)
5: vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa (hash: OIkOu0+4El6Pg/y3PaYXt7py5eZ3TqMx4VnZc06tByw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:de:04:7d:73:bb:d9:07:86:38:53:02:34:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Nov 15 05:01:23 2026 GMT
Not After : Nov 16 05:01:23 2026 GMT
Subject: CN=2a6f33bb72e31bffbb3aa6bbbc2e3c7319f73bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2c:20:73:90:c4:21:7d:5e:0b:c1:09:77:f1:
74:d9:c5:93:fd:b9:cf:ed:47:fb:04:ad:8d:6c:b0:
ab:39:67:58:b3:e0:d4:ba:22:2a:fb:f8:01:77:ed:
7d:29:6c:af:02:65:5c:11:a6:67:58:61:1c:ef:72:
4a:4e:9f:fc:17:5b:ed:cf:c7:c2:47:77:4b:17:4d:
27:b0:d3:84:07:d8:0f:3e:56:8c:4b:64:2f:e2:4c:
0c:7c:9f:07:d0:5e:45:36:68:ea:bf:57:92:fe:fc:
0c:26:e8:35:e6:38:f6:cc:d4:17:78:43:77:38:6f:
e3:c8:72:2a:5a:1d:46:ba:7e:f2:e5:1b:33:05:77:
56:0d:b6:00:c5:08:b2:26:61:dd:06:ee:58:24:79:
0a:ba:c6:cd:e4:07:ae:36:33:c4:3a:a9:5a:0b:bb:
f8:7f:ac:ce:89:f3:49:77:cf:31:73:12:d7:33:63:
8d:3f:af:4c:0c:86:ee:04:f3:be:17:07:6a:52:2a:
05:f1:25:b5:e2:89:75:82:e5:5a:1f:40:81:ab:58:
a0:4d:e8:e5:d0:2c:e4:bd:8b:c3:e3:20:dc:8a:9c:
17:b6:6b:f1:a4:d3:fa:2e:6d:e3:b4:ad:2d:ce:00:
3a:e1:68:a2:58:a1:05:84:24:01:79:e7:4b:90:cc:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6F:33:BB:72:E3:1B:FF:BB:3A:A6:BB:BC:2E:3C:73:19:F7:3B:C7
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:93:55:8e:65:9d:a1:83:ee:80:9e:42:43:31:56:8f:98:16:
e3:f5:67:77:84:d0:05:62:89:b5:10:ae:ff:9e:57:54:78:ea:
5a:a4:06:9e:e3:38:7b:90:2a:df:0c:26:ca:d9:d6:f5:d3:7b:
77:0c:9e:73:f5:27:70:aa:e8:e9:8f:9d:db:14:4e:ca:64:60:
88:06:0f:80:1b:44:24:93:45:de:ff:99:1a:9a:06:e8:f4:bc:
91:64:bc:87:10:9a:3f:04:44:4a:d4:a3:bc:fa:e1:14:58:ad:
74:65:cf:16:96:4c:6b:f8:54:62:7e:38:47:c4:27:c7:db:35:
6b:2f:5f:25:b4:22:8b:91:ae:d6:06:b8:d7:fb:0b:84:66:3a:
2d:10:b7:54:d4:2b:ba:12:e2:00:63:f8:4a:b0:fe:15:83:e6:
b6:83:9f:c4:a1:41:3a:3e:61:2d:4b:2c:6a:94:c2:f6:c2:61:
dc:f5:fb:85:b5:6c:37:e3:36:3b:92:34:d8:79:18:38:77:78:
36:0c:ff:ae:2d:f1:44:80:c8:cc:a4:f2:cb:81:38:06:e4:8b:
56:0f:88:19:6d:69:3a:40:0b:b3:1c:b1:88:a6:9b:46:0e:c6:
32:36:e4:1c:9c:11:a2:2c:1d:23:de:f9:e1:08:cb:44:e6:4d:
05:2a:dc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:31:39 2026 by rpki-client