Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: HMuNeOUABw33NZ2MQzRAGYK43X53uNuIF2dEHydouMA=
Subject key identifier: CE:24:4F:5C:0A:FD:53:71:F3:0A:99:E8:2C:98:52:B9:F1:4A:1C:F4
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 01A0C3D6B96800BCAE9500BBC5A995DD18AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 0BF4
Signing time: Mon 21 Sep 2026 12:00:24 +0000
Manifest this update: Mon 21 Sep 2026 12:00:24 +0000
Manifest next update: Tue 22 Sep 2026 12:00:24 +0000
Files and hashes: 1: P0H9mn8azX8J6K-hdAfHiYeHr48.roa (hash: E4c9kuinUCaG0thWwOJajTUQL7VeKxkEvaLK1sfiV8U=)
2: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: PV9FeXh18brjF0R3GcRKOHnixegkWUKJhi2vL56uu2A=)
3: tdjIiHG6aRg6RaOSgsb_E64QRco.roa (hash: rpGb1Qz22L2bS8euMlwSPzOxpxsFd6dx18fW4QaBOow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:b9:68:00:bc:ae:95:00:bb:c5:a9:95:dd:18:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Sep 21 12:00:24 2026 GMT
Not After : Sep 22 12:00:24 2026 GMT
Subject: CN=ce244f5c0afd5371f30a99e82c9852b9f14a1cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:17:2a:2a:21:08:cd:1c:59:87:73:7d:3c:
f7:dd:ce:f3:50:ab:d2:d7:f4:e0:14:f3:c8:6d:2e:
8a:1f:b0:bf:14:91:24:cb:60:8c:a1:30:9f:d1:65:
da:fc:2e:0d:b4:f0:32:33:6c:43:fb:e5:a6:5d:ae:
1f:26:93:ee:c4:01:60:34:94:a9:1f:69:32:f7:8b:
e5:9d:b3:ca:88:af:8c:9f:27:ee:a4:e7:c5:b6:6d:
7d:c7:90:c6:b2:7d:32:d5:8e:17:56:01:d1:09:88:
9e:41:cc:8d:82:e3:08:96:70:34:d2:8a:f5:ef:fe:
ba:3c:5a:f7:63:44:f5:30:fc:ac:0b:ad:c4:65:83:
43:e0:dd:6c:89:a5:12:a8:48:a8:28:9a:63:5d:88:
65:b5:9d:ee:91:c8:c2:7d:c8:d3:44:ea:23:43:1a:
b0:d2:99:7e:81:51:5e:7e:34:52:37:aa:6f:2c:4f:
9b:04:15:c0:06:55:cc:b2:93:f0:c8:4f:e9:88:82:
0b:40:5c:19:ad:20:32:ff:1b:f1:a4:2d:91:00:f9:
14:b9:43:94:12:1f:d1:2d:76:05:02:7e:b9:9a:14:
3d:0c:ef:a2:c0:46:b7:43:93:58:e8:da:b1:c0:54:
b3:09:3e:d3:ce:2e:59:fb:85:4f:fb:e2:fa:f0:40:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:24:4F:5C:0A:FD:53:71:F3:0A:99:E8:2C:98:52:B9:F1:4A:1C:F4
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:af:cf:7e:88:f2:0a:8f:37:09:88:b4:ed:c5:55:af:30:cc:
46:9d:0a:8e:b4:5c:e4:bf:3d:fc:a3:92:ac:b8:ca:f4:5d:25:
ea:e4:c2:19:ed:4e:82:be:8b:c8:78:c1:41:56:39:14:ea:e3:
a7:bc:b6:ad:9e:7e:4e:bb:b4:7b:46:80:4a:19:98:a4:68:fe:
9f:63:2d:fd:d0:f7:b1:6e:a4:de:41:3d:ac:30:71:46:37:0e:
bc:5e:34:0b:9a:e5:b2:38:8e:ec:c4:0e:1d:08:68:cc:3a:a9:
7c:73:e9:1c:9f:d2:97:a6:9a:fb:5f:0f:b3:80:56:80:63:57:
cd:6d:85:df:45:2b:2d:c9:e9:3f:d2:87:91:a1:30:02:d7:8e:
96:49:b1:c8:17:99:8b:8d:df:aa:94:10:85:73:07:a6:28:33:
4e:7e:a4:d0:5a:58:bf:77:97:8b:ca:0e:84:66:56:46:76:e6:
4d:22:fc:12:3e:c5:20:68:5e:ed:da:41:f8:4b:59:45:b1:10:
2e:9f:84:fb:25:3b:cd:35:e7:27:30:63:0b:3b:ad:8e:99:d9:
22:98:f5:12:8e:43:9b:4f:df:9f:c4:0e:bf:dd:cc:72:9f:3c:
d9:a4:44:df:f5:db:37:96:a7:1d:42:df:2a:af:7d:ab:0e:60:
48:9a:3b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:52:42 2026 by rpki-client