
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File: 0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier: ruvvlwX7IC7x9Xaj2GuzYeRvHRjVal9maI0y2zXx4tU=
Subject key identifier: 46:FE:DD:9A:55:D6:2E:FF:49:12:89:14:A9:BB:16:0A:65:67:B7:57
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer: /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial: 01A130A241637F92A9BB810069D90B8F78FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number: 1AA7
Signing time: Mon 12 Oct 2026 15:01:42 +0000
Manifest this update: Mon 12 Oct 2026 15:01:42 +0000
Manifest next update: Tue 13 Oct 2026 15:01:42 +0000
Files and hashes: 1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: wiavFTU7N51al5Y/FS6drQ3pYyKE4WlYNspTMlLcA+A=)
2: fBAOzxis5zFocT70Z97qbse-bDQ.roa (hash: VdDmUIYDxdhSfqEfsTGgmGBNLV3h2tDEtcnlVnKzLfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:41:63:7f:92:a9:bb:81:00:69:d9:0b:8f:78:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Validity
Not Before: Oct 12 15:01:42 2026 GMT
Not After : Oct 13 15:01:42 2026 GMT
Subject: CN=46fedd9a55d62eff49128914a9bb160a6567b757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:97:9c:d6:60:f5:59:cc:29:53:60:2f:7e:
1b:8a:76:b9:dd:f1:79:54:9f:e2:3f:28:a4:53:bf:
aa:a8:18:4b:ee:ac:97:09:ed:78:fc:14:58:55:a5:
4b:27:4c:3d:89:84:d5:36:9a:67:6f:ab:24:4b:46:
be:bf:2b:9f:af:d5:fa:36:28:a5:33:bf:49:12:00:
49:19:c2:11:3a:fd:3a:06:9e:df:e1:bf:4a:99:00:
66:b6:39:46:b2:84:0a:c7:88:20:3b:f5:df:41:8b:
d9:eb:be:ea:f5:ba:dc:36:7d:df:78:67:2a:7a:72:
db:3a:bc:3d:d7:0f:47:cc:31:d8:ad:01:87:df:68:
90:95:f9:02:8e:bd:a8:47:db:38:ed:1e:bd:80:f0:
31:e1:8e:3f:29:e5:0c:28:0a:c4:be:d8:82:a6:87:
7c:38:be:74:d7:09:f1:50:55:3c:7b:5c:e3:93:7a:
b3:d6:9c:1c:31:a7:f6:4d:04:f5:52:ef:bd:74:b8:
e7:b4:ed:07:7b:e8:ec:b5:fd:f2:d4:14:24:61:c7:
06:55:9e:14:f0:32:a6:99:95:c0:2c:ac:ab:bb:52:
45:01:6f:00:2d:61:0f:2b:f9:11:f6:38:2a:e7:52:
89:48:56:78:59:5a:5c:3b:23:83:bc:0e:b0:00:f4:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FE:DD:9A:55:D6:2E:FF:49:12:89:14:A9:BB:16:0A:65:67:B7:57
X509v3 Authority Key Identifier:
keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9a:d7:f4:4c:9f:7c:df:34:0e:55:28:28:96:70:f5:dd:79:
7e:07:82:9f:7f:7c:de:25:59:e9:8e:1e:85:a2:96:53:97:e8:
c0:36:b0:f0:b1:25:cc:6d:8a:ca:11:42:93:64:bf:93:48:cb:
97:b5:68:e1:2d:f0:1b:d3:db:07:d2:e4:57:b7:e7:9c:15:fa:
23:fd:d6:2f:28:77:a9:23:af:bb:17:03:ba:c6:33:0d:31:ec:
8d:a6:53:ad:f6:62:6c:19:8a:31:0b:8c:fc:a9:51:3d:60:8f:
e7:4d:66:fa:4b:79:38:31:0e:a3:4f:e7:d2:d8:da:2a:8b:54:
08:84:67:8d:81:15:aa:ba:12:99:72:ab:ef:bd:d2:fb:87:d6:
29:87:5d:a7:c5:6c:ba:47:72:02:99:cd:f8:b0:88:b4:92:b8:
61:17:75:5c:9e:a8:1d:07:44:1b:9c:93:90:da:82:1e:1c:f8:
80:18:48:b4:a7:1c:7f:45:23:3a:5e:31:55:3b:ae:6f:31:a2:
ca:3d:fb:ff:f6:76:ff:4d:45:4f:c0:01:13:c9:db:a7:38:77:
a5:58:d2:b5:a0:0d:21:c8:6c:9a:f9:0c:fd:5a:e6:7f:31:4f:
12:1c:e1:68:b5:58:97:b3:de:8c:7d:9f:2d:fd:b9:b7:f8:13:
44:8b:5d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:38:13 2026 by rpki-client