Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
File: aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json)
Hash identifier: kG5HJoDjsehKBQ83M0IuxzkKm5Pi9Oh636kuo84JSTc=
Subject key identifier: 09:F4:74:FF:01:B4:68:39:89:62:A6:F8:BF:27:8E:AC:70:8B:A4:1C
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial: 01A0C21F299882CC6A54D6D47009ED9716E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
Manifest number: 1597
Signing time: Mon 21 Sep 2026 04:00:17 +0000
Manifest this update: Mon 21 Sep 2026 04:00:17 +0000
Manifest next update: Tue 22 Sep 2026 04:00:17 +0000
Files and hashes: 1: H3BcLlLdlK5OktIlKB08CLOJceQ.roa (hash: gCov3Lq4RydmSmoM9Ym4TkvogcYAidCIuxal3h4GAM8=)
2: K01hEvp_oFx3qc2-IUwd8VFE1hI.roa (hash: cm5jfcRdjk0yhdi3HnxUE7FN1POO9527wRj/2D2vjMs=)
3: P6dX7w5DhwlzNU979iFd9YDU0uI.roa (hash: UBskImMtpaHQaupcjp821thacxNepjpaa64/vY6YASM=)
4: UTSVX3B31qE6acA-2M3EInvqjqs.roa (hash: 2V2E0vmwbEv4vLiGDwB2fco3T0rwdLt7wl4GPwkBEC8=)
5: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: fb4EXiJA2EJBnq4XIMQQGyvugJXwt6FjudpJWWiO/j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:29:98:82:cc:6a:54:d6:d4:70:09:ed:97:16:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Validity
Not Before: Sep 21 04:00:17 2026 GMT
Not After : Sep 22 04:00:17 2026 GMT
Subject: CN=09f474ff01b468398962a6f8bf278eac708ba41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cb:f4:d2:05:f3:bf:27:51:87:eb:fc:ed:01:
e9:a5:cc:c5:9d:85:f2:3a:92:c1:94:1c:c9:bd:56:
ac:a8:3d:90:71:d8:d7:61:38:18:65:30:6c:ff:79:
2f:7d:cf:7b:a6:f9:8e:21:7f:31:d8:55:0a:95:e7:
a3:e8:a6:ca:c9:de:c2:84:e6:e0:86:99:45:39:83:
65:47:65:61:c1:17:ba:f2:1e:5a:2f:72:30:39:5c:
e7:41:50:1f:34:97:82:38:92:0b:74:d9:80:b4:2a:
40:7a:01:e7:93:44:fc:07:de:4a:76:a5:80:da:eb:
a2:64:d5:92:e2:6e:cd:53:fd:f5:74:10:9c:9a:17:
4f:30:cd:61:58:60:33:a2:ab:bd:e8:20:ad:fd:b6:
97:4c:a7:f5:21:d5:c3:e7:78:91:c3:c1:5e:51:b5:
28:a4:27:1c:96:42:3c:86:6c:c3:eb:07:e9:bc:b0:
d4:67:99:48:a4:8d:70:69:a9:e1:50:e9:63:0c:15:
89:85:6b:3d:98:7b:ec:e7:6e:b3:9e:a5:fe:ab:70:
e3:d9:4c:2b:e8:ad:80:fc:ee:cb:21:c2:2d:cd:96:
b3:40:64:a8:72:85:64:26:ae:d3:db:69:3e:2d:ae:
9a:78:26:5a:35:54:86:3e:b1:28:dc:8d:e0:a4:4a:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F4:74:FF:01:B4:68:39:89:62:A6:F8:BF:27:8E:AC:70:8B:A4:1C
X509v3 Authority Key Identifier:
keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4e:a5:be:a1:02:c2:62:c6:88:06:f8:52:0c:1a:23:c8:d0:
a7:d3:04:68:95:5f:c6:86:8c:bb:56:34:a6:f3:29:61:a4:d1:
09:7f:80:38:65:0e:df:07:e3:86:df:32:f3:8f:35:84:28:b0:
8a:ef:27:26:09:20:3d:18:a7:89:9a:fd:b0:23:6a:79:03:38:
13:e4:ea:d3:b8:18:52:ce:e5:21:61:b5:2b:ec:a8:ea:f4:70:
fa:35:f8:56:a1:e6:52:ac:c6:3a:23:e8:ff:20:45:4e:30:63:
86:8e:3c:68:02:ec:75:65:c5:bc:34:72:f3:59:81:5a:73:f8:
9f:f3:ee:a0:a5:43:a8:ee:7b:e3:56:7e:ab:70:a5:ce:04:36:
6a:e5:8b:42:e2:94:27:22:d6:e2:85:a0:4a:f7:0c:b9:f6:24:
13:96:cd:be:32:92:fc:1a:a2:c2:c4:7d:80:5e:fc:9b:fd:45:
29:12:39:1b:f6:f8:35:05:e7:ee:7c:a0:87:7d:c6:a7:2d:47:
de:78:77:28:fd:66:3e:6e:41:d4:5c:17:e3:7c:41:40:40:d0:
dd:4e:5f:6b:3f:8f:94:fa:44:b2:6a:4e:31:2b:52:d6:a1:fd:
e9:91:62:32:ca:b7:b8:2c:04:4d:96:83:cc:05:7c:49:2b:7f:
5e:f4:20:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:20 2026 by rpki-client