Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
File: hFwjee_tEAVs-GXVLDLh4euowUA.mft (raw, json)
Hash identifier: C2DN8ln75y515+CmKVWhPytzci5pMAJ684HvWIGqeCw=
Subject key identifier: 90:BC:BA:D0:02:80:9F:A0:C5:8C:F7:B9:90:33:6B:3A:5F:E0:8E:76
Authority key identifier: 84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
Certificate issuer: /CN=845c2379efed10056cf865d52c32e1e1eba8c140
Certificate serial: 01A0C7B388B2174ABC8B7C82BED11107D2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
Manifest number: 1AA6
Signing time: Tue 22 Sep 2026 06:00:26 +0000
Manifest this update: Tue 22 Sep 2026 06:00:26 +0000
Manifest next update: Wed 23 Sep 2026 06:00:26 +0000
Files and hashes: 1: 1cB9lohxPvW0aZ8d9tUcZB_hbpA.roa (hash: ZGgmXtZjF6LTHZxN99Ge2atwtWdo2BL+hrKZeJQ6mA4=)
2: RX1r4Qs7sshSi_fFORl-RS8ke2U.roa (hash: 3LSqgK+dEpd1mR7mki06tDkI20cS2e3t1p5igEow5no=)
3: cl4xGAEEhr0atOkS-M875z9YeH4.roa (hash: KmImRnh0KgE+zH9nTs3NJvmrEfwkRWLYqjzje40ykHY=)
4: hFwjee_tEAVs-GXVLDLh4euowUA.crl (hash: jcXkrQnAHQxwfUD9JlppHWjhjlrJV+BO+WvKwm69bzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:88:b2:17:4a:bc:8b:7c:82:be:d1:11:07:d2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c2379efed10056cf865d52c32e1e1eba8c140
Validity
Not Before: Sep 22 06:00:26 2026 GMT
Not After : Sep 23 06:00:26 2026 GMT
Subject: CN=90bcbad002809fa0c58cf7b990336b3a5fe08e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:81:aa:12:28:e3:43:e9:a9:d2:21:8a:e0:
d1:5e:08:11:24:6a:8f:0d:81:b4:65:0b:47:34:65:
85:c7:ea:ac:6d:ca:af:93:f7:73:7a:5c:27:a6:7d:
11:b8:fa:4d:4c:c2:ae:7e:4a:de:cd:05:53:aa:f9:
30:f1:a5:8f:4a:6c:24:53:2d:94:ee:32:2d:d8:16:
25:a7:55:b1:27:db:a3:0b:da:f9:a7:e6:4e:a3:ab:
9b:20:b4:39:84:dd:4b:57:3d:02:e4:48:99:23:fe:
f8:a6:c2:b2:47:62:52:6e:a7:7d:8c:7d:7c:8b:4a:
13:52:8b:9c:85:30:a5:c5:05:d9:8e:00:ed:e2:f0:
e1:d4:65:be:61:a1:a8:5b:09:80:9a:e5:fd:44:e5:
8d:7f:a5:9d:34:ea:73:2f:0d:7b:59:d5:ef:ac:8d:
8e:91:08:2d:0f:0e:fd:07:c8:41:40:f3:e2:b4:85:
46:b3:c2:79:6c:5b:cf:a5:71:8e:3b:bd:4f:44:b7:
aa:aa:c6:f1:27:ac:3f:f8:53:29:85:8e:65:b7:84:
1e:2f:22:0f:41:69:fc:6d:4c:c2:7a:8e:1d:19:90:
75:2a:14:3a:cf:a1:96:64:05:c5:39:21:28:b8:13:
39:03:fc:bb:ed:44:d3:89:d2:d3:ec:8c:46:27:0d:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BC:BA:D0:02:80:9F:A0:C5:8C:F7:B9:90:33:6B:3A:5F:E0:8E:76
X509v3 Authority Key Identifier:
keyid:84:5C:23:79:EF:ED:10:05:6C:F8:65:D5:2C:32:E1:E1:EB:A8:C1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFwjee_tEAVs-GXVLDLh4euowUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/60e8fa-ec5c-4594-9ec4-be7a1a001ccf/1/hFwjee_tEAVs-GXVLDLh4euowUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6e:57:4b:c2:fa:dd:89:3d:dd:ea:fb:22:c3:9c:9a:7b:7e:
fd:6f:dc:69:23:c4:6b:00:4c:de:70:73:7d:f0:cc:c9:5b:07:
c9:6e:b9:fa:38:6a:a3:64:03:cd:ce:3b:79:ca:29:3e:78:dd:
68:39:98:08:88:46:ba:e8:8e:c1:66:76:97:21:02:80:69:0c:
36:b1:0c:e3:1a:d8:f8:86:5f:7c:0e:cb:85:34:3f:9f:73:de:
16:b8:b7:4e:ee:14:b3:ea:4c:8b:c5:b2:58:d5:c0:30:5b:ef:
97:81:86:8a:b3:23:8a:b9:8d:38:ca:b4:3a:0d:42:6d:1e:d3:
29:b1:15:b6:9b:4a:9c:63:e2:bd:af:37:9c:27:3c:6f:57:8f:
80:1b:88:e5:bf:1c:2d:38:dd:21:e7:7a:82:1f:3f:dc:12:26:
27:07:9f:d8:68:79:ba:3c:60:22:99:9f:c4:71:5c:cb:52:22:
7e:f4:53:86:ec:c9:c1:1d:6c:9f:e9:2f:10:b3:8b:c8:af:29:
cf:da:cf:d5:29:56:a9:eb:f1:a2:45:a3:8d:b4:fa:c2:d5:08:
6d:89:02:d7:2d:f0:08:ff:4f:72:ff:e8:67:57:03:67:be:f3:
6a:dc:67:bc:59:dc:75:c1:72:d1:78:88:4b:aa:7f:c6:79:4a:
e1:3f:2e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:19:46 2026 by rpki-client