Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: b/B6HEZdCEDyjfR045E+X/uNlrXSJxvXZPzPNJBCynE=
Subject key identifier: F5:E4:9A:87:C7:62:A1:6D:6D:D7:C6:DD:56:94:D4:C0:EB:D0:D7:A3
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 01A0F1C2BE0474E6C059B5ABF5067FABE4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 12F7
Signing time: Wed 30 Sep 2026 10:01:06 +0000
Manifest this update: Wed 30 Sep 2026 10:01:06 +0000
Manifest next update: Thu 01 Oct 2026 10:01:06 +0000
Files and hashes: 1: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
2: mijO3rBDux071bgVII2VGtelaWs.roa (hash: c57AFpXKCuOBDWXAgwOZwYrMLNV93F0DNDkv38YCADA=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: 1liqHw3hfAcw+Nf/FhxZmTZorPuG26EI53pZkjODtSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c2:be:04:74:e6:c0:59:b5:ab:f5:06:7f:ab:e4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Sep 30 10:01:06 2026 GMT
Not After : Oct 1 10:01:06 2026 GMT
Subject: CN=f5e49a87c762a16d6dd7c6dd5694d4c0ebd0d7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:33:31:61:83:aa:cb:3b:46:f8:96:b5:a7:
28:28:94:e0:6a:95:e8:03:be:0d:05:83:1e:a5:4f:
06:f2:2a:38:f5:7c:1c:df:13:cf:d7:03:8d:ce:87:
88:fa:4c:46:27:5b:7d:33:e1:2d:b3:b0:ff:7c:24:
05:85:6c:17:39:05:e6:6e:ab:d4:9a:a7:9a:0d:5c:
fa:3c:f4:84:68:a5:58:a4:6b:26:ae:90:fd:de:e0:
f4:22:1d:3c:3c:b3:2a:33:55:9a:3d:6e:06:68:88:
25:db:9a:ca:95:3d:0b:d3:96:2b:21:dc:6c:6b:4c:
e9:18:7e:90:bf:c4:3c:46:6b:9a:76:29:9b:95:99:
16:06:f9:17:ee:b0:9e:9e:05:e2:ad:6c:97:66:72:
51:ba:a2:eb:a7:db:5a:e0:47:d7:39:76:75:fc:80:
d8:3f:a4:7c:d0:87:61:9d:bf:86:0e:51:eb:08:1c:
19:a1:46:c6:2d:f4:82:42:ec:66:53:55:1a:6a:94:
a5:6c:de:5c:5e:40:fd:04:bc:f5:4d:5e:a7:59:c3:
80:c6:3d:36:98:8f:95:d2:7a:2f:2f:a4:09:6f:05:
5d:36:74:31:fe:4a:5d:1c:dc:ae:8d:79:b8:fc:a6:
c9:7a:0d:46:c1:27:56:00:d3:f9:97:79:c6:55:6d:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E4:9A:87:C7:62:A1:6D:6D:D7:C6:DD:56:94:D4:C0:EB:D0:D7:A3
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:80:72:d3:7b:e8:70:75:06:4c:c5:cf:a2:77:6d:04:37:10:
2f:40:30:f3:ee:30:9e:75:22:30:56:6d:24:84:2d:0d:85:d2:
18:d8:86:c8:b9:41:6f:b3:e9:0d:18:2f:d3:fb:4c:24:ed:d4:
5a:9f:30:01:89:10:c8:bf:76:4b:68:4a:13:85:43:a5:e5:62:
bf:15:76:14:0a:8f:0c:03:e6:ce:58:bb:b0:4d:ae:e9:6c:2a:
5a:15:41:ad:ec:3c:1f:02:27:72:1d:f7:da:c9:ff:83:48:de:
e4:73:13:35:56:4e:42:87:34:40:43:a6:7e:0a:5f:86:98:33:
8d:7c:9a:8a:23:f6:08:f0:7d:22:6d:1d:ad:dc:f5:a3:c2:1c:
09:23:1b:9f:cb:28:56:1d:46:18:43:84:46:b0:c6:85:30:6d:
a3:7e:0f:15:48:d0:fb:a0:13:19:3a:71:ef:80:b9:36:77:15:
16:99:d1:73:90:c7:cf:f3:a6:9a:a4:6e:9b:8c:9a:15:ed:fc:
74:bb:9f:a8:5c:7f:d2:b0:02:d7:ac:51:be:ca:a5:88:5f:e0:
89:7b:3d:ed:0c:67:27:68:83:46:b4:31:5a:c2:0c:ab:9e:3d:
d7:2c:4a:56:ed:b8:dc:99:84:71:f4:46:cb:5e:d3:fe:f5:26:
55:22:d8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 13:37:44 2026 by rpki-client