Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: WJh1FH6xTphnzAPOu5gZIXZWVxGAzEYGReiqKyIPhl8=
Subject key identifier: 89:60:08:6C:89:96:18:43:1D:24:61:96:40:99:80:1C:8B:86:D1:47
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 01A0D5A7435EEEF4FD6478EE5310652108E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 0A41
Signing time: Thu 24 Sep 2026 23:01:43 +0000
Manifest this update: Thu 24 Sep 2026 23:01:43 +0000
Manifest next update: Fri 25 Sep 2026 23:01:43 +0000
Files and hashes: 1: Dz46KAYraGcTikQMGoMJVAAInHQ.roa (hash: NU2HWGZh7sQrY1k6J9xhsLm4R4NqLLcBXrqTHwrCQfs=)
2: FC-j2DCq34hCFuPalVqFP_Va_c4.roa (hash: jfYCQqEdA0WNXwP1ahEI1VJ/4GR5skI19EQziW64bRA=)
3: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: 8l2X7Xi+u/c3AvHRwLp5DwYJO2BB/WRpB0FjgscnANc=)
4: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
5: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:43:5e:ee:f4:fd:64:78:ee:53:10:65:21:08:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Sep 24 23:01:43 2026 GMT
Not After : Sep 25 23:01:43 2026 GMT
Subject: CN=8960086c899618431d2461964099801c8b86d147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f6:a8:4a:39:dc:b4:3d:b9:ef:7f:95:12:ce:
65:41:14:20:05:5d:f0:a8:9e:53:dc:ab:df:3c:d2:
2e:c0:68:66:1c:7d:7b:96:43:5c:b3:64:ee:64:1b:
05:cc:a0:cf:01:ee:71:2a:b2:b8:b1:39:bd:7d:46:
30:4c:b9:a3:51:c9:d6:1e:09:1e:c4:63:44:d9:ca:
ac:3b:ee:f8:1e:31:07:93:6c:9f:6a:6e:70:a0:86:
d7:5f:f3:c3:7a:17:b1:2f:c5:06:af:71:64:18:b9:
6d:5f:ba:7a:f3:c6:fe:5e:ae:0b:93:80:f8:3d:82:
cc:0a:cd:43:32:b7:fc:c9:7e:b6:4c:3e:f0:6a:db:
40:06:e6:1d:91:2b:7e:6b:2f:7b:3c:18:26:b9:50:
7f:84:38:db:a8:06:54:79:14:1e:85:a4:1b:ab:4e:
2c:0f:d2:40:5d:8f:88:57:75:73:a7:34:c1:46:6c:
80:f6:5c:e2:ad:00:33:e9:f5:2a:a5:8f:c4:83:0d:
f2:1e:59:69:12:14:35:42:9c:76:b1:3c:fe:5f:05:
4f:e4:a2:17:e9:6d:12:55:e5:f4:66:1e:b4:59:89:
66:71:8d:59:00:77:39:1d:69:e4:29:3d:5a:b3:58:
21:ba:bc:b2:f0:12:66:c6:db:53:da:24:42:ea:8f:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:60:08:6C:89:96:18:43:1D:24:61:96:40:99:80:1C:8B:86:D1:47
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cc:a2:fd:14:dd:b0:7a:37:0a:e6:ff:c9:b1:78:2f:f1:6f:
17:4b:7d:5b:a3:ee:a6:e1:db:61:97:10:ed:90:5e:ed:6e:aa:
04:ab:74:f6:bd:e2:26:8a:9e:3a:3f:44:6b:fc:4f:e4:d1:5c:
d9:e7:78:b8:1e:7c:35:c2:f8:7a:db:e1:82:61:42:dd:23:72:
aa:2e:1a:89:f2:76:68:88:d6:c9:51:ac:ba:b8:32:af:ed:2a:
40:51:e3:58:45:bb:8f:a0:fc:60:6f:8f:f1:8e:6d:71:f3:98:
e5:69:d0:e6:08:3c:ae:b9:a7:c5:02:c8:d8:af:1c:39:30:ba:
6c:6f:fb:c9:58:c2:2f:c6:02:8f:52:f4:09:ca:55:a4:a4:73:
c1:6f:58:10:93:17:bd:2a:e6:b3:d0:af:a3:ff:1e:96:9e:08:
f5:90:10:74:05:4b:73:f4:8b:1a:72:56:f8:c1:72:67:eb:3a:
c1:9b:d7:21:8b:7b:47:5b:c8:72:d7:54:02:5b:4f:c6:18:70:
6b:88:b5:75:18:dc:86:07:30:0f:f0:4a:96:2b:7b:6e:9a:71:
31:59:67:2c:fa:ab:09:0a:53:91:2f:86:45:31:6f:ce:3c:6e:
4e:d5:35:a8:46:71:68:58:05:32:a3:79:48:59:a3:4b:bc:a8:
9f:c6:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:07:18 2026 by rpki-client