Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
File: hFPR6GGO-ProB13dWCcNCUAGvpk.mft (raw, json)
Hash identifier: ZrkyH3sTHadmGKyJUB3Owo8leKQfQEwfMRujNwMkBB4=
Subject key identifier: 82:02:8E:09:DA:10:07:9C:59:A1:AE:FA:19:E4:1E:FC:FA:BE:F0:42
Authority key identifier: 84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
Certificate issuer: /CN=8453d1e8618ef8fae8075ddd58270d094006be99
Certificate serial: 01A0F60DEF5E6CE1284F9FFD0AD462258E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
Manifest number: 06FA
Signing time: Thu 01 Oct 2026 06:01:43 +0000
Manifest this update: Thu 01 Oct 2026 06:01:43 +0000
Manifest next update: Fri 02 Oct 2026 06:01:43 +0000
Files and hashes: 1: H6fEkqVKszpXDZG-GKB24yi6fGA.roa (hash: VZx0qzECb8pJ5sSNI4YrIdOddJh7Fq3Sv2eEUes2jOk=)
2: hFPR6GGO-ProB13dWCcNCUAGvpk.crl (hash: aoSB8F5HuWi34xvEiA4eArVfnWMgoX+klioUKaQ3Zh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:0d:ef:5e:6c:e1:28:4f:9f:fd:0a:d4:62:25:8e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8453d1e8618ef8fae8075ddd58270d094006be99
Validity
Not Before: Oct 1 06:01:43 2026 GMT
Not After : Oct 2 06:01:43 2026 GMT
Subject: CN=82028e09da10079c59a1aefa19e41efcfabef042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:fc:fa:29:9e:e4:51:c0:2b:ba:dd:81:64:
96:a6:d8:e3:ac:c0:49:d7:70:fd:79:22:53:cb:95:
81:a7:52:7d:99:6e:46:f3:f9:04:27:99:e8:5b:20:
3a:0f:ef:a7:a2:6c:57:76:b5:3a:e1:23:3f:c4:3f:
8f:a1:5c:d6:b6:24:04:6b:81:6a:80:b5:d6:93:17:
e2:fe:01:67:7d:93:52:e0:3c:f0:81:38:96:0e:c7:
7a:ab:47:e6:5e:f2:e1:5c:27:c8:69:ab:87:64:ec:
d7:47:bb:2e:0f:73:08:24:57:85:34:c0:44:57:45:
b0:3a:82:c2:71:cd:86:53:cb:c1:8b:86:9e:e9:1b:
54:e6:0f:db:5a:a8:76:c0:93:4c:93:9a:ae:d6:63:
86:c6:1d:d9:74:70:69:03:53:97:73:45:4e:47:67:
5c:4e:ed:b9:c8:3f:7a:1d:5a:41:84:70:ff:07:ef:
c2:72:c9:87:44:39:0a:2d:e8:cf:69:4a:1c:d3:27:
8f:57:b6:47:08:26:18:0c:55:56:cc:4d:fc:98:14:
c6:b5:74:f7:d7:fe:ca:fb:f3:42:f7:36:02:bd:b8:
22:e8:2e:78:04:67:38:c1:f5:6e:d3:6e:50:bf:38:
cb:de:32:5c:68:af:47:4c:28:4a:54:2f:0b:8e:e8:
f5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:02:8E:09:DA:10:07:9C:59:A1:AE:FA:19:E4:1E:FC:FA:BE:F0:42
X509v3 Authority Key Identifier:
keyid:84:53:D1:E8:61:8E:F8:FA:E8:07:5D:DD:58:27:0D:09:40:06:BE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFPR6GGO-ProB13dWCcNCUAGvpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/780c34-183b-46f4-b961-d4ae4071328f/1/hFPR6GGO-ProB13dWCcNCUAGvpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:97:d7:5b:36:d3:17:86:01:64:71:17:5c:93:40:16:aa:40:
8c:d3:5a:94:37:c8:24:f1:f2:26:cc:0a:1d:b2:af:64:78:fd:
3b:ec:b8:d2:cd:85:23:ae:a5:78:a7:5d:c8:7c:54:ad:2c:e3:
0b:5c:95:b2:f9:e6:bd:fb:7a:8f:75:98:b8:47:f2:26:06:97:
80:05:0e:dc:03:90:29:4e:eb:36:a3:d8:c2:c7:2d:81:de:bc:
76:cf:36:62:7a:18:fd:93:14:5c:8a:8a:a5:28:c4:0c:f6:c7:
14:71:87:c6:8e:56:1b:5b:4b:04:f2:96:ff:a8:37:13:e9:da:
61:ed:f9:95:94:94:fc:db:c7:c5:d3:bd:e2:20:55:f4:4d:5b:
80:b2:76:90:6b:22:85:49:c7:7c:b1:3e:1d:30:c6:56:b6:e0:
6d:a6:de:0d:c2:4c:25:79:d2:ae:c1:58:c5:0f:54:a2:a3:5f:
c3:a4:ed:76:47:63:a8:c6:df:4d:63:1d:6e:e9:5c:74:31:c1:
cf:f1:bd:fc:70:1b:53:4d:32:a9:58:d7:5e:44:12:b5:01:64:
91:ca:1f:4c:2c:9e:14:aa:88:00:82:b2:45:32:06:88:51:72:
90:3c:86:98:13:b3:35:a9:23:d9:58:86:c1:d7:ee:d5:4a:7f:
75:4f:fe:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:54:49 2026 by rpki-client