Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: iUWeuTEzrixg9MfR5iDtkBrNJIEXuj6Y52yVRjh5M1M=
Subject key identifier: 17:79:B5:E7:D1:82:27:2B:18:2A:B0:39:58:D6:27:83:95:E6:D3:57
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 01A0CDECD77A5EDE8C8942A1C533ACF4411B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 1A72
Signing time: Wed 23 Sep 2026 11:00:45 +0000
Manifest this update: Wed 23 Sep 2026 11:00:45 +0000
Manifest next update: Thu 24 Sep 2026 11:00:45 +0000
Files and hashes: 1: 867F4OQuQLWhRY4aKxKeoxD01B4.asa (hash: +fRCR0HY7fbE+pyBbt7W5yHcfIjIo6aJjDfzPZQv280=)
2: au_k5KTkHwmYgyGwQL9kaGDMGdc.roa (hash: TQ4e7aFpXjYOcX/z8GmwxlZOtaffODMat2Hj3Al3L2Y=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: syzPgVEUAFHC6BsmlV876v1nG3ny0ZM4F408vkdnJ2w=)
4: iqLo87tMFOB-XBrWIzdU46MRBuE.roa (hash: IzYBLEWXA56LUWCfb8F/l/nPeES5nSXV/ENxm4IRlhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:d7:7a:5e:de:8c:89:42:a1:c5:33:ac:f4:41:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Sep 23 11:00:45 2026 GMT
Not After : Sep 24 11:00:45 2026 GMT
Subject: CN=1779b5e7d182272b182ab03958d6278395e6d357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fe:8e:db:f8:5a:f8:c5:52:0d:27:70:cd:83:
37:f1:d2:7f:6f:0f:5a:ea:f4:3a:f4:52:34:f0:86:
3b:cd:fa:3d:8f:15:66:81:e4:68:13:97:9b:58:8a:
88:d1:81:dd:6c:e2:cf:91:0e:de:db:be:2b:25:2d:
3f:5a:bd:41:f1:d5:0e:b2:2d:51:87:13:74:fa:33:
f0:32:16:94:8c:dd:2c:82:df:3e:c4:8a:1b:19:8e:
4d:28:b4:98:3a:02:b0:b9:db:f9:52:9d:ad:30:b5:
a9:6e:1a:13:f4:5c:c6:be:22:1e:e9:82:76:83:69:
49:ae:9d:28:48:ba:2f:45:74:fd:9e:a6:40:aa:b4:
4b:d5:0c:ee:d6:20:a5:12:79:06:ea:8c:36:94:7e:
06:1e:e2:cb:dd:d7:2e:53:7c:f6:a3:5d:c6:d2:ca:
77:cd:2c:c2:6f:72:b4:72:96:56:63:25:af:e3:b3:
9c:2e:65:29:48:35:5f:6b:97:28:d0:74:e3:3b:da:
96:12:b5:93:92:bc:c4:73:23:1d:29:8f:3a:6d:40:
62:60:6d:cf:0d:2d:d3:ba:f1:f8:3b:e0:e2:f9:ef:
8e:2c:a7:2e:70:da:4f:c3:90:1e:9e:5f:16:98:b3:
06:76:46:42:77:94:33:63:8f:94:e5:a6:cf:46:bd:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:79:B5:E7:D1:82:27:2B:18:2A:B0:39:58:D6:27:83:95:E6:D3:57
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d1:ba:4d:b7:fb:11:67:bf:a8:56:e1:9c:ec:ab:c0:3c:a8:
00:68:b5:fd:d8:a0:0c:c0:d0:b0:dd:a6:26:4e:7e:aa:be:83:
63:fa:37:2a:4a:6a:5d:b9:b8:7c:65:ce:84:39:c3:78:87:77:
a2:6f:41:53:00:3b:c6:bd:03:19:cb:d5:12:4a:93:f2:4c:08:
5f:eb:46:b5:41:39:4a:4d:29:da:67:7b:a8:fd:2d:27:fe:a0:
33:31:ab:1d:82:1b:05:02:00:b2:af:8a:c1:ee:9a:6a:61:fe:
a0:ba:cf:9e:49:42:27:07:07:ea:45:cb:17:32:71:c0:53:37:
c3:49:1a:6b:41:d8:6b:ac:0f:c1:03:e6:68:96:29:8d:49:77:
2b:77:1c:31:70:01:1d:67:01:b3:4c:90:dc:40:d7:9d:d0:a5:
83:6a:05:61:98:ef:54:4d:70:14:52:c1:4f:4c:e7:1e:0d:05:
e6:8a:85:55:e5:a2:33:e4:66:ef:90:75:ac:44:ce:3e:5f:93:
0a:9d:4c:2a:fe:94:1a:32:6a:1c:75:3e:80:60:81:a3:3a:e5:
72:80:9d:5a:31:d3:0a:47:7f:8c:ab:26:e4:05:35:33:b6:c4:
ca:e0:94:be:67:16:e6:5c:2c:47:0a:5e:bc:fc:17:4d:ea:28:
01:6c:b6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:51:12 2026 by rpki-client