Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: +aCuk80zzzP9gYNwvNCEA5pc9kWen5U5N4vIfQC0ulc=
Subject key identifier: 55:A5:7B:90:3E:95:09:A1:1C:3C:E1:A8:6D:EC:91:E7:FD:3B:3D:46
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 01A0EFD4DC19A1FFDCEE71DEA7C42977C392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 12F6
Signing time: Wed 30 Sep 2026 01:01:39 +0000
Manifest this update: Wed 30 Sep 2026 01:01:39 +0000
Manifest next update: Thu 01 Oct 2026 01:01:39 +0000
Files and hashes: 1: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
2: mijO3rBDux071bgVII2VGtelaWs.roa (hash: c57AFpXKCuOBDWXAgwOZwYrMLNV93F0DNDkv38YCADA=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: IxqsXBemUPPCj+Qh8c1Co5AqxA8Nb6wNq8a+B+rzn+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:d4:dc:19:a1:ff:dc:ee:71:de:a7:c4:29:77:c3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Sep 30 01:01:39 2026 GMT
Not After : Oct 1 01:01:39 2026 GMT
Subject: CN=55a57b903e9509a11c3ce1a86dec91e7fd3b3d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:44:49:96:80:0b:f9:4d:43:e7:22:50:48:
49:a3:6a:97:c2:87:36:06:7c:dc:7c:12:f0:69:5f:
41:c1:1d:aa:3d:1c:d6:bc:21:54:fc:5b:97:a9:f5:
f4:43:8e:0f:a6:98:a5:77:18:11:84:e1:b9:8c:91:
fd:c8:c8:d7:4b:10:51:36:e4:e7:ca:74:4e:96:cb:
c4:09:f9:70:97:99:08:0c:de:98:68:ba:bd:9c:48:
8e:ea:b9:64:80:0a:f1:52:36:da:43:97:ee:1c:c1:
86:83:67:ce:e9:29:ac:7b:56:dd:85:8d:e8:82:db:
f5:58:76:fe:6d:f2:32:0f:fb:6e:01:b5:8f:d0:63:
0a:86:5b:59:52:66:0b:ec:b4:2c:bd:d9:c1:84:ca:
df:89:c2:0d:57:77:c1:1b:84:e9:46:8e:15:b8:54:
22:90:f0:f1:dd:a7:9a:45:4c:06:91:93:fc:02:36:
6a:b3:72:21:81:d8:dc:c6:d2:c4:50:9d:a3:aa:d5:
fd:f6:a6:69:11:55:53:b7:b0:1f:e0:7e:1f:2e:96:
a7:2c:b5:20:92:da:99:0f:81:54:ee:2e:df:eb:a1:
d9:66:9f:f6:87:75:67:66:ef:8e:c9:bb:7e:49:97:
aa:61:09:67:2f:18:b8:0b:b2:cd:3c:ca:ee:ff:9c:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A5:7B:90:3E:95:09:A1:1C:3C:E1:A8:6D:EC:91:E7:FD:3B:3D:46
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2f:4c:8e:1a:66:fa:34:ca:71:6f:f9:44:db:65:d5:66:bc:
f0:ee:c6:45:89:bb:4e:cc:be:a9:e3:4a:2d:df:ac:2d:06:df:
55:d5:65:46:10:4d:1e:e3:3a:43:e7:15:1b:21:c5:5b:38:99:
05:08:db:b9:71:8e:ac:34:a4:ac:40:d6:41:3a:5f:46:2a:af:
e8:d2:33:2a:86:84:21:61:0f:66:94:20:ad:bb:c2:22:d6:96:
70:ea:9b:99:56:b3:f4:88:7d:e6:8e:9a:b5:44:e8:f9:82:74:
7f:af:0d:46:de:f8:30:47:18:00:27:8f:34:4d:04:7c:1f:cd:
bc:62:84:a1:dc:8a:b2:3d:c7:d3:a9:e3:cd:7a:b4:db:fe:6c:
4f:ec:e5:5a:f5:9c:64:cd:1d:49:75:94:ef:73:2d:cd:cc:97:
a4:00:8b:6d:ae:7e:e3:5e:7b:89:6a:4b:50:da:03:77:36:38:
c9:83:bd:b9:8c:e5:5f:91:90:76:80:b0:40:1c:b9:1c:cc:55:
7c:13:88:0d:a9:d7:bc:de:a4:ea:e8:4d:4f:9d:53:d2:4e:a8:
06:e2:ae:62:d8:15:0a:df:ec:04:ad:9e:7a:a0:f6:4b:2d:26:
df:ac:19:73:6c:ac:b0:d1:f0:3b:d1:cb:ee:65:26:7f:83:52:
57:52:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 10:27:50 2026 by rpki-client