Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: nGNPL37Lt1t8agYDOdla5ChdBzRu2ds9LSRlzE1gcHs=
Subject key identifier: 85:E1:99:47:B5:04:1E:02:23:BF:97:42:41:F3:60:9A:8D:51:21:0C
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 01A0C40E90E0A3E081431B19A6B852A2CE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0F88
Signing time: Mon 21 Sep 2026 13:01:23 +0000
Manifest this update: Mon 21 Sep 2026 13:01:23 +0000
Manifest next update: Tue 22 Sep 2026 13:01:23 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: vMbRdBzOEa7lK1jM1kwtt8pBkOjDGxlClJApB7uDnN4=)
2: NiVW-1DlGr5hCTPyCnLWhfcQSJ0.roa (hash: P0xJoWIH1C9Cod99ksa8hxvCHok9B+UC8X73hnLeN0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:90:e0:a3:e0:81:43:1b:19:a6:b8:52:a2:ce:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Sep 21 13:01:23 2026 GMT
Not After : Sep 22 13:01:23 2026 GMT
Subject: CN=85e19947b5041e0223bf974241f3609a8d51210c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:75:b1:a9:3a:6e:73:40:fb:25:4a:33:52:
04:09:1c:7f:cd:99:c3:d6:00:f8:42:78:60:32:aa:
34:e4:c2:e0:dc:c3:d8:0c:aa:ec:40:d0:8f:2e:10:
ab:34:67:8b:56:55:3f:2c:88:2a:5f:1f:9d:82:f7:
a9:9a:3d:d8:cf:01:2a:88:e2:bc:5a:0b:e6:78:75:
ce:79:0d:88:62:79:85:c5:29:fe:e2:68:10:89:fe:
70:3b:d3:4e:ae:8f:26:8d:b5:46:f4:99:4c:05:7f:
84:9c:44:1c:4d:8e:37:0e:30:f6:2c:f4:ce:3d:69:
d0:53:f3:10:45:fb:fa:a7:1a:b6:f7:bf:c9:c9:bc:
2c:a1:6e:da:8f:6b:af:b4:f3:3d:d0:c5:7b:03:11:
6a:70:08:d8:bb:66:da:52:5b:5f:f6:3f:e1:52:62:
49:3b:b3:df:8b:5e:90:c5:21:5f:53:18:ac:6f:19:
3b:b3:58:a5:7d:08:e6:a3:cb:b1:44:f4:4c:b0:58:
42:73:26:09:4e:d7:bb:d7:81:aa:4e:9f:5c:17:1d:
15:98:ae:0d:51:d2:0a:a4:27:9c:30:5a:6f:a1:4d:
97:b7:bc:17:2a:31:60:8b:51:db:50:78:b9:d9:fa:
2a:65:03:05:8c:b7:97:14:b0:37:b4:d1:86:b5:ac:
f6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E1:99:47:B5:04:1E:02:23:BF:97:42:41:F3:60:9A:8D:51:21:0C
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:07:30:2e:6a:08:f3:c0:e7:3c:34:6a:a4:b4:b7:2c:d9:e6:
8e:a9:5b:fc:8d:78:6a:b4:a4:31:60:64:e3:6c:fc:6a:7b:a7:
8d:85:1d:0a:e0:57:6f:8c:bf:79:13:e4:53:72:9e:a1:59:17:
61:00:c6:0d:df:42:76:89:3d:8e:f3:ae:e4:80:c3:4f:36:47:
29:dc:41:35:b2:5e:f2:53:72:9d:96:64:9d:1b:93:1a:fb:a5:
a4:34:11:53:ed:23:06:72:15:1f:df:5b:a1:d6:c5:b6:92:86:
21:0b:8f:f3:c4:73:d4:ba:db:e2:22:97:82:90:fc:5a:24:c9:
61:20:07:3b:79:e6:0d:1a:e8:1a:c7:c2:f4:54:55:91:3d:9a:
dc:41:35:ec:33:5b:73:12:da:1f:4c:2c:3c:eb:03:db:76:0d:
51:2b:24:07:70:2c:27:8b:73:04:7a:78:34:0a:c8:66:9a:8f:
59:41:39:38:fb:72:17:be:a3:6d:1b:d1:a6:bc:03:6d:91:f1:
f6:65:90:89:f1:bc:6c:90:6c:a9:93:ec:87:c4:48:e5:73:ba:
ca:79:2d:f4:8d:00:5a:c9:03:66:01:3f:3e:e4:26:35:55:9b:
0a:c4:f3:f5:4b:b0:71:3d:71:9e:fa:3a:08:7e:04:83:c4:ec:
42:c9:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:05:54 2026 by rpki-client