Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft (raw, json)
Hash identifier: U0GFlikMdBIOLqcgv+/QcE+pVRwSwzwA69UiwPKPNNE=
Subject key identifier: 77:41:73:2B:DD:A7:D5:5B:C0:21:AF:AB:22:13:19:4B:D4:C2:5D:FB
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 01A0CCA383BC8A2E279966CD3787DBC91FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
Manifest number: 0CFA
Signing time: Wed 23 Sep 2026 05:01:03 +0000
Manifest this update: Wed 23 Sep 2026 05:01:03 +0000
Manifest next update: Thu 24 Sep 2026 05:01:03 +0000
Files and hashes: 1: U967gx6zU2ewhEleCWFHT_7A_9o.roa (hash: rEcp4qFupVQgVYmsA8hG1Q/G6+z2CIRB0Mx5vxsYxf0=)
2: h-KmrUFQix2mPVIgPxijrxKClGw.roa (hash: fc8hHRpimWi4M001kIYlHNuSFZw5gckGt8QS97+VBbM=)
3: hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl (hash: enB2cw/9hRQhiiHYkBmvjToytX3pf6k8d1vNLQicnzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:83:bc:8a:2e:27:99:66:cd:37:87:db:c9:1f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Sep 23 05:01:03 2026 GMT
Not After : Sep 24 05:01:03 2026 GMT
Subject: CN=7741732bdda7d55bc021afab2213194bd4c25dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:c7:e7:aa:c1:ab:56:b4:b9:1d:f3:c6:2f:
7b:d2:da:d7:19:cf:39:d9:aa:e6:8b:64:37:0f:f7:
fe:f5:34:d2:f2:95:dd:a0:b4:1b:bb:11:5f:4d:1a:
9c:ec:9e:76:e7:20:9e:88:16:fc:75:b5:85:55:5f:
2c:58:38:2d:34:61:40:2c:b9:c0:46:33:fa:e5:6e:
f8:f0:05:39:46:22:76:34:e7:ac:09:ac:7a:83:6b:
17:ac:23:71:50:09:3d:24:ff:0b:5c:37:5c:01:2b:
6b:93:c9:5a:8d:2a:fc:be:74:4d:d2:0d:f9:90:28:
2d:85:da:ad:12:e2:98:2d:00:4a:d1:2f:6f:61:88:
0e:5c:9d:59:19:b8:8e:75:32:8e:71:7d:b4:29:e5:
24:e8:95:63:fa:00:e8:89:88:b3:d9:96:4a:82:67:
78:ed:81:2a:f6:0e:94:83:0f:1d:8a:4d:ac:37:7c:
8c:26:21:f4:c7:b6:22:1b:65:40:50:3b:2e:f1:5b:
ed:17:36:49:af:82:d2:02:9f:d6:35:cc:08:d0:80:
58:2c:01:c4:62:33:c1:28:98:ef:b5:37:f1:c1:08:
cc:8c:2d:3d:15:aa:15:79:93:18:eb:cf:b1:a6:7a:
0a:e7:b2:e4:2b:5e:27:db:93:2e:86:de:04:7a:2b:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:41:73:2B:DD:A7:D5:5B:C0:21:AF:AB:22:13:19:4B:D4:C2:5D:FB
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:80:ba:61:8a:ab:71:e0:da:2a:66:bb:b9:a7:68:d9:ab:b6:
3f:88:60:c7:34:3b:c0:41:05:08:e2:fd:14:c6:20:44:54:84:
21:1e:c4:60:d9:6d:59:7f:10:d4:82:a4:c4:52:58:d3:bc:2b:
4a:8d:56:2c:4d:ba:ad:84:9d:d3:52:29:13:9a:d5:e8:73:8a:
38:f6:74:ac:1a:d0:93:47:ff:bf:b6:1f:83:74:98:14:47:39:
35:00:e5:40:18:d0:65:21:b2:9a:7f:cb:04:8f:3b:9f:af:f1:
6c:56:31:f9:36:b4:f7:49:cc:2f:f6:97:bf:56:d3:6c:52:0b:
ec:52:ba:3e:3b:1d:ff:a5:83:d3:77:84:cb:93:f1:51:cd:57:
78:6a:30:3d:a7:5b:e6:06:19:50:c0:20:0f:1f:59:c5:e4:20:
f8:3d:67:73:88:b5:ec:09:31:13:84:bc:20:24:ad:93:7d:a9:
58:40:02:bf:79:0e:52:a6:e3:cc:df:ec:78:81:35:35:e0:9a:
97:7a:a8:8c:39:35:5b:d8:6f:8e:78:f8:fa:83:9d:7c:d3:d9:
81:7e:4c:10:d7:08:79:4b:17:65:d0:5c:bf:7b:c5:ee:b1:47:
b2:7b:25:c2:48:f8:b8:b0:19:47:8f:8f:f4:45:06:55:9d:4d:
5e:65:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:23:23 2026 by rpki-client