Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: W/19h/u5MCMN/ez8ii1x8nJd1UxLx+Fqvxwjxp+fB4E=
Subject key identifier: 46:27:0E:B1:51:AB:A3:A4:3F:C5:2F:2E:15:0F:99:0C:C0:B7:B8:B8
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 01A0D3F0DEA9AC4272E6D2E7B9C34BEF7117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 1717
Signing time: Thu 24 Sep 2026 15:02:53 +0000
Manifest this update: Thu 24 Sep 2026 15:02:53 +0000
Manifest next update: Fri 25 Sep 2026 15:02:53 +0000
Files and hashes: 1: blJ-TZh-82zY8BmhlGXDYcWlXEM.roa (hash: Fd7qkgfgnAB5yGlcwTOLNMtcHfXu1EK11nyoGzaI4T8=)
2: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: dUjW6qr3i3BAjmIMAhRACFi3l26SuU3+9BfWdlHoK5Q=)
3: uGcdeOeH2FGE8oSm_emFftbBDBI.roa (hash: K6Jsrsz0fx7XMWqDVYW8cVOMG7U2AmGR+nHljnd4RYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:de:a9:ac:42:72:e6:d2:e7:b9:c3:4b:ef:71:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Sep 24 15:02:53 2026 GMT
Not After : Sep 25 15:02:53 2026 GMT
Subject: CN=46270eb151aba3a43fc52f2e150f990cc0b7b8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:0e:ba:70:70:60:84:ce:d5:75:ce:7d:93:
d2:73:39:12:2d:4b:c9:62:c6:59:2f:5e:79:08:97:
be:c4:ef:8d:d3:bc:63:fb:8c:7c:02:4c:44:aa:06:
b5:0d:05:1e:39:42:3e:00:28:5e:59:80:94:7e:cf:
cc:47:60:b3:17:7b:dd:76:8c:bf:fc:54:58:11:92:
29:4f:5e:a6:95:92:e8:81:27:49:52:69:54:e8:32:
85:c3:a3:72:28:36:91:d4:10:4a:9b:55:cf:a3:cd:
44:39:e1:9d:76:66:91:4a:e8:35:5c:15:c3:d2:9c:
50:63:58:16:4b:4b:33:b1:f1:b6:04:ef:4c:45:2b:
44:14:e3:b9:94:d0:28:fc:c2:94:a7:0b:0b:4b:07:
bf:72:a3:f0:75:54:49:06:8a:8a:25:86:fe:a8:23:
4c:6a:99:8a:14:25:74:4e:63:1d:c5:41:33:c3:8a:
90:72:2c:74:36:89:b3:cc:62:e1:9f:3d:1c:f0:ae:
01:91:49:31:32:60:b3:1e:b6:c1:a7:3e:bc:07:af:
54:c7:96:47:23:d4:a0:d1:cd:ce:46:71:a8:c8:e4:
17:92:aa:0b:42:1b:0e:1e:35:5e:ce:da:dc:05:63:
5a:e2:f5:59:8a:e2:ee:be:e1:3d:60:b0:01:4d:0d:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:27:0E:B1:51:AB:A3:A4:3F:C5:2F:2E:15:0F:99:0C:C0:B7:B8:B8
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cd:1f:db:00:43:ca:d5:b2:da:c3:cc:fe:8d:64:3c:23:b3:
d5:b1:02:4a:7e:a0:bc:62:3b:be:ba:3b:42:37:4e:09:ba:ce:
2f:c6:f3:19:73:54:60:ab:1d:94:4a:19:2a:d5:17:34:09:c0:
07:eb:9c:24:7e:59:8b:2a:6f:b9:f7:a2:c9:4f:c5:3c:bc:92:
93:05:dd:55:08:2a:c9:40:0c:59:79:08:6c:fd:11:c6:0b:79:
f0:2b:f4:59:26:50:21:f9:ad:d0:0a:66:26:c4:8b:96:14:53:
82:fc:f1:ab:0d:df:bf:7d:ea:64:33:30:58:11:43:38:8e:e2:
70:c5:20:9c:2b:0b:62:9d:0c:3e:ec:22:b1:07:b1:b2:fc:e0:
8a:0d:67:d2:30:18:e3:94:d4:ae:86:3b:c4:d4:e7:3b:be:47:
2d:2e:6b:2e:77:e7:1f:9e:6b:c2:34:e0:70:92:97:8e:bf:e6:
3a:cb:e5:2c:a6:1b:95:cc:65:83:cf:17:9f:19:00:9f:1c:d4:
5c:48:27:64:4e:32:17:49:02:33:2c:d2:bb:46:43:03:26:e5:
e0:df:0f:f4:fe:a8:62:e3:35:42:a0:cc:11:2e:c0:8b:c7:df:
eb:a5:c7:10:6c:82:10:41:c9:ac:fb:72:b0:dc:f9:ef:3f:70:
42:40:df:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:55:51 2026 by rpki-client