Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
File: H9nOye0f1PQcCx4w77lshhVTvjY.mft (raw, json)
Hash identifier: 6ghXxHPANIXlts+1GxqdIXB6a1qlCIvK/eNd76uP2YQ=
Subject key identifier: 2C:32:03:17:38:41:2E:8F:3B:7D:D0:B6:3C:C2:BB:C6:07:37:40:80
Authority key identifier: 1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
Certificate issuer: /CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Certificate serial: 01A1A8952845933D3601ACD8093F5185D49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
Manifest number: 06BE
Signing time: Wed 04 Nov 2026 22:01:49 +0000
Manifest this update: Wed 04 Nov 2026 22:01:49 +0000
Manifest next update: Thu 05 Nov 2026 22:01:49 +0000
Files and hashes: 1: AGVrI7h1W1sZnmEHrQIXxLRxF1Q.roa (hash: K1nbjcJomqgMcH/NVsTCJWhMoSmEDtw4c8u/MMrHlso=)
2: H9nOye0f1PQcCx4w77lshhVTvjY.crl (hash: 0OERZXQO1ZFvVQ+ebzGLK8dSuB7eNdEwppfF6tN3se8=)
3: fnZsGtHZZ57ibD1bgR7D-kx03A8.asa (hash: gnq6h8vpZgrDrbXWUtlG5+lFKokphaSsAqWL7zsvVig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:95:28:45:93:3d:36:01:ac:d8:09:3f:51:85:d4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Validity
Not Before: Nov 4 22:01:49 2026 GMT
Not After : Nov 5 22:01:49 2026 GMT
Subject: CN=2c32031738412e8f3b7dd0b63cc2bbc607374080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:02:b2:d9:36:94:5e:59:cd:0c:ee:19:2b:
d4:b6:69:09:0c:0f:37:c5:d4:82:fb:1c:b7:c6:b0:
5d:cb:46:0d:d2:74:9d:b8:c3:71:b0:a2:ff:e7:cd:
50:9d:ba:60:a6:86:ed:e7:51:84:47:5b:28:98:5c:
2a:97:c8:f6:f9:96:18:85:7a:03:8d:f1:22:68:25:
2a:0f:51:0b:22:da:67:54:78:99:a3:03:e0:fd:44:
48:62:f1:89:3c:d2:28:fe:60:b9:7e:02:85:aa:6f:
82:5a:54:18:67:22:d9:14:ec:21:0a:5e:21:a6:d2:
7f:52:21:2f:f2:28:c8:3c:bd:20:50:e9:7f:90:1a:
29:91:4c:86:e8:50:9a:da:65:2e:34:32:f5:59:41:
03:b1:60:ca:31:87:ab:49:ac:9d:b9:c9:a8:ac:15:
1f:5f:2d:42:02:9b:7d:cd:f3:da:46:6d:32:66:bc:
48:46:b1:04:38:25:0d:af:26:fb:81:ee:87:7a:74:
81:74:c6:66:f0:d4:95:bd:ea:88:bd:0f:1f:00:4e:
54:50:83:3a:6d:95:c2:58:be:3b:53:7e:09:61:95:
03:41:6b:43:d8:a0:65:64:a5:c7:ba:e1:28:5a:3c:
bb:89:a5:f5:ec:d6:72:cc:09:3e:fc:4d:6d:13:aa:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:32:03:17:38:41:2E:8F:3B:7D:D0:B6:3C:C2:BB:C6:07:37:40:80
X509v3 Authority Key Identifier:
keyid:1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fe:ac:6f:c2:82:f9:ae:d2:f9:29:9c:84:ff:1a:26:58:61:
4b:10:1a:b4:4a:24:bf:fc:ab:49:01:15:b5:95:c7:f2:10:90:
1a:30:29:f2:a9:19:9b:27:30:79:17:56:ac:59:8b:56:66:56:
16:d0:df:aa:38:47:cb:b2:70:49:76:9b:3e:92:42:69:4d:ab:
80:3a:24:f8:08:5f:8e:5c:14:cf:60:25:04:be:1f:15:49:dc:
e0:2a:7f:29:d0:49:6d:32:b9:82:1b:87:74:8a:0a:25:1a:59:
0b:dc:2c:a6:d1:5b:65:cb:97:41:33:46:62:ce:d4:38:a7:dc:
c1:24:ea:8b:7f:51:a1:56:34:ca:ac:5a:1e:12:bb:a4:d9:e2:
b9:b3:e0:06:0f:b6:b7:b5:85:31:47:1c:2b:c7:d8:8b:98:c3:
8a:50:bf:cb:0b:17:65:bd:29:ca:02:ca:31:58:ac:38:62:f4:
d3:b4:9d:02:b9:90:74:a2:bd:88:04:d1:b8:53:5c:22:ba:12:
4e:2a:84:86:9c:95:7d:e6:c7:1d:90:18:d8:23:cc:02:96:a3:
41:c3:f5:d2:ea:53:0a:d0:03:a0:17:d8:6e:bc:16:4b:91:71:
9b:82:db:76:a3:16:bd:92:7b:e2:2d:26:ac:1a:7a:fe:49:5d:
8d:f8:84:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:11:51 2026 by rpki-client