Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: PQqRJJEEmyr94Y2LQ729xoSfl8WMhbmAZiPjHsK3o74=
Subject key identifier: A3:37:3B:85:FF:BB:67:CE:E6:0F:87:0C:95:46:14:F3:60:BA:E9:12
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 01A0EDE6319D9BBC99C909CF35E78789FD81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 1A0D
Signing time: Tue 29 Sep 2026 16:01:21 +0000
Manifest this update: Tue 29 Sep 2026 16:01:21 +0000
Manifest next update: Wed 30 Sep 2026 16:01:21 +0000
Files and hashes: 1: EUQPSRByg2QMDNqMMHo2oQZNlbY.roa (hash: H+d5ds358KBr4HrcZ0lWa3uis3q9gOlPohiMxXosS7w=)
2: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: UMWrPd+V7Y+O/70QXZLCo3AZvxSi/5TDYgcxk4m/TQQ=)
3: zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa (hash: ctimHgQjwKly2d3TDS9AzpF0v6QUFIibm4H4p93sG5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:31:9d:9b:bc:99:c9:09:cf:35:e7:87:89:fd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Sep 29 16:01:21 2026 GMT
Not After : Sep 30 16:01:21 2026 GMT
Subject: CN=a3373b85ffbb67cee60f870c954614f360bae912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:13:f8:2b:4d:4c:54:d4:92:3e:27:56:76:
a6:c5:79:1e:60:97:01:5e:f9:27:54:c7:1a:4e:14:
ba:a9:47:9d:a5:ca:17:a9:9e:eb:de:7b:f1:08:40:
d0:77:93:f6:db:46:1d:54:cb:53:d5:4a:c7:58:db:
7e:d7:24:5a:6d:a9:b2:8a:4f:09:9a:ef:75:8d:d4:
ff:29:27:8a:95:0a:4b:75:c2:33:3d:46:70:ca:4a:
2d:67:4e:1d:31:47:d8:34:e7:64:7f:53:81:db:a8:
db:56:19:3b:1c:29:68:73:f8:62:74:c8:39:fd:2c:
78:eb:c1:06:be:a5:7b:d2:70:e8:f3:d7:d3:5d:42:
23:63:16:6b:5e:2e:e3:f4:1d:b9:0c:eb:bc:68:8b:
6c:cc:b8:23:c3:c0:3a:7c:2e:be:39:30:8b:ee:17:
2b:3f:1f:3d:69:c5:f5:e5:98:48:2d:28:e4:ac:e5:
0c:01:80:fb:fc:8c:18:90:c7:25:2f:f7:8c:25:af:
5c:07:c3:d4:7f:5c:72:e0:47:4a:49:03:14:59:53:
90:70:59:86:47:52:8d:53:8d:99:5e:65:78:9c:6a:
b1:eb:87:05:d2:d3:8a:e6:86:bf:5d:69:31:f2:d7:
52:9e:a4:5f:ab:94:14:e3:b6:ab:ec:d5:9f:99:d9:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:37:3B:85:FF:BB:67:CE:E6:0F:87:0C:95:46:14:F3:60:BA:E9:12
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:21:72:3e:51:c9:0a:92:0d:87:f2:43:4c:cd:ca:7e:d0:27:
72:c6:7f:cd:ee:ee:c2:a9:d0:dd:3f:12:25:38:6d:dd:34:60:
a7:18:a2:36:f6:92:36:84:88:37:cd:24:d9:1f:93:70:74:03:
24:27:ee:ed:f6:31:6f:5b:e9:3a:79:90:8a:d3:6d:7f:35:c8:
01:73:b2:93:67:1d:46:0c:6d:d8:71:c9:dc:e7:33:5b:c0:c5:
52:9b:cb:9a:31:bb:ab:d9:21:79:87:94:95:e8:ba:29:e7:6c:
78:5a:c0:6e:8d:b4:17:4c:25:c8:11:50:06:10:a0:be:85:dd:
9c:98:ab:10:68:25:ce:ce:86:00:af:ac:89:fd:9a:32:48:aa:
dc:40:f5:8d:9f:a8:49:de:2c:8a:75:1b:ab:7d:63:cc:df:f2:
8a:7f:58:9b:35:36:12:8d:4a:2c:c4:17:db:6d:de:26:0c:a3:
f7:83:b6:9b:2f:c2:8a:3f:68:0b:d6:2f:c6:d7:1a:24:5b:42:
13:13:18:6a:b3:86:6c:2f:35:96:e7:a6:95:ee:87:93:3c:65:
1e:a4:41:b7:4c:69:11:da:d1:8c:fe:e2:39:fd:d0:02:87:f3:
39:13:d3:94:3f:5d:95:20:5d:41:93:6e:bc:76:41:0a:f7:c7:
dc:9b:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:01:46 2026 by rpki-client