Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: 2jqwUe7or90XfDOkgZ8ddXWKCHr7pwvlw3HEotD0BlY=
Subject key identifier: 0A:BB:F3:1D:F8:17:3E:B7:4E:6E:6A:E2:FD:E5:24:56:D9:80:55:86
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 01A0CEC8BA28B9C31F671D37E8EA092A01A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 0772
Signing time: Wed 23 Sep 2026 15:00:56 +0000
Manifest this update: Wed 23 Sep 2026 15:00:56 +0000
Manifest next update: Thu 24 Sep 2026 15:00:56 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: wa5CypSyn74rhwvhFGvXgnU27MNU3MDDzYaLJA5fnDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:ba:28:b9:c3:1f:67:1d:37:e8:ea:09:2a:01:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Sep 23 15:00:56 2026 GMT
Not After : Sep 24 15:00:56 2026 GMT
Subject: CN=0abbf31df8173eb74e6e6ae2fde52456d9805586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:64:d8:02:6a:b5:46:0e:85:6d:1d:ce:fe:
3a:fc:8b:97:56:9c:17:1e:06:b4:28:33:32:dd:4b:
0c:34:c0:0b:95:a9:8c:a4:46:44:40:4e:ff:8d:b2:
c3:a4:76:0c:40:1b:ce:d9:4e:92:d1:50:61:8e:7a:
fd:40:69:f4:f4:3a:6f:ee:45:67:36:7b:f7:cc:19:
84:5b:f8:92:ee:d5:7e:d7:b3:da:0e:95:e3:87:f1:
a3:82:da:da:45:3e:77:5e:29:d0:47:c6:49:fb:7c:
2f:1b:55:ea:9c:17:77:1a:04:d7:2c:ab:84:34:22:
8f:38:58:f8:c8:ac:a6:e0:98:8b:8c:43:64:4c:60:
e1:67:44:35:08:79:1d:b8:ac:35:f5:1f:ab:15:f1:
4f:1d:2d:85:db:0b:bf:79:4d:ec:a0:aa:34:87:db:
a3:75:54:94:31:0d:ff:1b:d6:20:bc:51:8e:d3:ef:
25:8e:78:b4:ff:4d:9d:a6:c5:a0:f6:48:07:44:c6:
e1:09:ba:73:c6:16:2c:a3:3b:c5:89:86:27:17:19:
41:be:80:dd:ed:75:3d:30:3f:7d:f3:0b:f6:18:24:
c2:8e:7a:1e:9b:64:0c:9f:d4:4e:ef:f2:0d:53:0b:
cb:37:6b:ab:a5:ea:62:11:d9:4d:b4:98:de:31:80:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BB:F3:1D:F8:17:3E:B7:4E:6E:6A:E2:FD:E5:24:56:D9:80:55:86
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:37:95:6b:af:e5:d7:b0:05:33:92:0e:fd:ee:1f:62:09:55:
35:e6:70:e4:87:25:6e:51:d4:14:88:88:df:b4:8f:66:99:95:
39:ff:07:46:25:1a:b0:51:c4:80:a0:b5:08:18:8e:94:b5:d2:
fc:07:d4:97:f3:70:60:a5:83:08:68:9d:91:c9:20:11:4a:13:
32:27:00:e8:a9:7d:f3:67:12:6b:8d:df:0e:76:ae:e7:1c:9e:
d1:fc:b7:b0:55:0c:90:27:82:c0:6c:39:64:23:49:25:c7:a8:
95:fa:14:ad:5b:ed:49:bf:64:3b:3d:f3:e0:ca:86:ff:d7:77:
79:0a:9c:70:73:40:64:98:bd:ad:2b:a8:c4:53:97:85:10:84:
6b:58:f1:0b:2b:aa:d7:20:c3:ca:c1:1b:02:3b:bd:e4:23:44:
2a:07:72:7d:77:f9:45:a7:58:e6:7e:04:c0:d3:6e:3c:28:14:
e4:f1:e3:c7:67:19:06:cf:0a:ba:23:03:33:9b:0c:7b:19:5e:
7f:a3:40:60:c4:0a:3c:34:cb:a5:2d:dc:8e:6a:79:29:69:6e:
73:16:c9:e1:2b:63:af:f2:c4:cf:30:25:45:53:23:5a:32:38:
b4:aa:7e:67:b7:5e:f1:da:64:b8:1b:49:60:ed:78:f6:a3:69:
22:d7:2c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:48:06 2026 by rpki-client