
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json)
Hash identifier: Oguaa2/01gp76fu0dicdo3tyNxoWfFwhR3Z6HCu6rtU=
Subject key identifier: D8:92:BD:51:92:D5:20:20:1C:72:EE:87:CA:92:B5:E7:9D:E9:9E:71
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01A0D2DE0A3AF97A9DAF893EF8305803C4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
Manifest number: 14CC
Signing time: Thu 24 Sep 2026 10:02:41 +0000
Manifest this update: Thu 24 Sep 2026 10:02:41 +0000
Manifest next update: Fri 25 Sep 2026 10:02:41 +0000
Files and hashes: 1: 19E50qchIIRYPEcBaHq7sGG5wI0.roa (hash: eE5229153hExm9zLLNjIVvIWU28fOYiSgL3s6vOhycw=)
2: 97SNWyMUYRiDeG9n1N95AncRQnk.roa (hash: nI2lxusT43e2HGHQlJ+OS4ZlLDLuDOW3fSKQ9vYde5w=)
3: 9QcZs2zkek-gn2Ui4swbuoO2vr4.roa (hash: 6q/w90WCRN2heb1yDVdybCSeCfBGkK6uBIDIiKl07Rk=)
4: ARsNkmXZICw7mVOEEqaeLzW0NS8.roa (hash: HGEzOhh+K3s8r+6AsZZdfpNC/GqHLS7ExwsdeMVtoJI=)
5: Bl0qB9IHm1JVOHIHzIJOmcHHLGw.roa (hash: 5Sm32JyDwrhWc3vyfBWLEKgqGMIQn0oSGZgkbi9R4Ng=)
6: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: Y6D6YS5CyE9yQ/ckKRpdNu0xhStLkYR/K5ccwEHxpts=)
7: M4q9DG7_7tEtbxxsWBKXQtxGt7k.roa (hash: l1YoZfcF40wNjjNm0JW8TrQnl6c8teto/VumFdsbKYw=)
8: OdLu_HTcQvIodFBv5wrW_bitNt8.roa (hash: Lh3p2rmlivj/4TCynBLAARFyup/lYvxOvhDJIyFzt24=)
9: Wpllp8x3IPSIu2NKqMIsX4CqA-M.roa (hash: y6yVGF74iM63320M/aisDv7GfSSwpDKSPPaZofgGzow=)
10: ZLh5PnaXaFDa2H68oOQrm4QWzUc.roa (hash: n8EPYXHHmAj3BuzhP+7twXQ5g88qMPOrqw3/TWqaivg=)
11: axcATIOsEbV9qEHFR_BgJI8InRc.roa (hash: nhsbsi/hDL4AYgein99xctG644QzrEf5lgLkARRpWaU=)
12: ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa (hash: fcj6iTqUPy26aGGnXwajRdM6fbwzNnBSUbT+6zg93yE=)
13: kz59O-9rHRK3If4NGher4WpZjHE.roa (hash: AakaTSLsPxjlp4i8uprsoV1LtGwgVY7VSh5IFGItGZA=)
14: pmvx0wgSZ-e6Csxblz8UNG8GLh4.roa (hash: HlDfShnHsELTO0EoU+/TscI7vJQLc2cGhli7/Qj3Qo0=)
15: r3dW9lAqMZzJ4q1ECWLy0uvljys.roa (hash: Ydp4ZLQaFBxEhvTauDjxFwFAUVvVLiZ8FUXZtyhH9lE=)
16: rHkDmoeEUk_UKkDPiPl2ZLunlP8.roa (hash: N4gR2twlyF+k4BziCYf7gyFcmHQBn89bTMP/4cwgXIQ=)
17: rjyccDgFllWxfeQb355Lp_fLXxk.roa (hash: tQCLpc6R3fwHVeq06ryeCzjgqeU2l9Z+qX3z3qLohNI=)
18: xiXQ7Ju7uKPaOZAIfjnaz5WFcMU.roa (hash: iBuZkqTWmF5qEyHqfDnsRPYzPSipq5gF9EuzoGnhAUE=)
19: zpnZiHFwy0LGsQziGTNhSdlz9Es.roa (hash: xFQHjKoar8tgV6VJF9byW8WcGGZiORzqntKof2KtHCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:0a:3a:f9:7a:9d:af:89:3e:f8:30:58:03:c4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Sep 24 10:02:41 2026 GMT
Not After : Sep 25 10:02:41 2026 GMT
Subject: CN=d892bd5192d520201c72ee87ca92b5e79de99e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:e7:f9:b7:88:62:7f:53:d7:94:59:5b:ca:
df:12:84:91:28:1f:22:4b:0d:0f:44:35:50:bc:14:
22:16:73:2c:5f:6b:c6:53:a0:f8:ef:ed:8c:a8:3f:
80:48:bd:8a:ec:08:30:4e:c8:3d:fd:58:11:79:3d:
10:41:53:05:d1:2a:95:88:5a:2a:c9:22:cf:b8:f7:
e9:54:5b:15:c8:48:b2:2e:e0:48:76:34:ad:6b:55:
36:8f:ee:d0:68:07:94:1e:fa:54:55:6c:64:72:f7:
67:c2:9f:21:cd:73:62:c9:ca:84:fa:c8:9f:2b:bc:
ca:bb:17:77:e2:99:4c:55:68:ea:38:bc:67:77:32:
8f:5b:48:35:27:cd:33:4a:44:2f:72:52:3b:d3:f4:
9a:2d:89:73:f6:11:6b:51:d1:57:27:43:99:42:95:
14:9b:d8:fb:31:88:67:77:c1:cb:9f:f7:03:11:df:
7a:2e:fd:41:be:22:87:b8:b9:41:4a:ad:f1:e5:34:
fd:1d:6e:23:0c:c9:0c:f1:89:3d:ad:72:0f:ce:68:
bd:76:2e:4c:5d:ef:44:44:8a:29:cf:1b:8c:94:03:
36:c8:07:7b:0e:79:9a:2e:f4:ec:cf:80:ea:94:3b:
33:14:4c:6a:f0:f7:6b:b0:00:35:fe:d6:f1:87:f0:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:92:BD:51:92:D5:20:20:1C:72:EE:87:CA:92:B5:E7:9D:E9:9E:71
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b5:73:3c:92:74:b4:b4:3e:f6:42:1c:e6:0e:7f:f2:95:eb:
77:ec:68:9c:7c:49:b8:e2:a9:3e:df:cb:10:0a:59:e3:fd:f2:
1a:3e:88:e4:39:af:07:f9:a1:2d:8a:6e:2c:46:50:d6:9b:3b:
f5:9b:53:40:95:19:1b:58:80:c8:00:6b:e7:f1:1b:b6:c8:46:
2e:95:94:d3:dd:1e:22:e2:a5:91:f5:40:fa:e6:2a:47:70:dc:
88:40:73:04:13:ed:16:3e:f4:5a:01:6a:e8:4e:99:b0:5d:55:
fb:5a:82:23:2d:6f:1f:f3:13:cd:fb:74:69:18:ea:19:0b:7a:
e9:48:f0:f6:ac:ea:f1:88:ac:31:e6:ee:61:3f:bc:b0:27:96:
b0:c4:39:9f:e9:b1:43:19:a7:13:da:90:31:6f:e5:22:82:97:
37:ca:d1:d9:b6:2a:b5:cb:6e:9b:f9:50:27:00:b4:ea:ee:f6:
2d:c4:b9:97:49:dc:6b:6b:cb:4c:38:71:8f:19:a1:c2:2f:d1:
c4:49:a4:26:51:24:38:22:52:e4:ee:2b:d3:eb:87:ba:62:3f:
1b:9a:34:f7:0a:a2:92:5a:f7:a4:1a:8a:30:a7:67:52:f0:76:
91:e3:ea:d8:5e:0a:40:27:f8:6d:47:ce:e4:28:ef:fe:8a:9a:
25:8a:f2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:58:26 2026 by rpki-client