Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: 1rjeOgcsyEI/QeriLDXRlFctcd0pomwnpgo/C0/JpjU=
Subject key identifier: BD:B2:58:2F:E9:98:E5:2B:E4:F9:E2:49:77:23:E5:2B:94:F9:6D:E5
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 01A0C8FD5A700BFF68CC082F6E2354AD6832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0FDF
Signing time: Tue 22 Sep 2026 12:00:42 +0000
Manifest this update: Tue 22 Sep 2026 12:00:42 +0000
Manifest next update: Wed 23 Sep 2026 12:00:42 +0000
Files and hashes: 1: ILRt9LkKcLV8zTDhe4daBlelpbE.roa (hash: NtW+TS7Xs6SFuc4EVBUAJ27kGuxkzyU+HkBhm6grJWo=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: f9zPNQO0fqO47At1pEguRAWg9AVzLj9T1eHS46/QNPM=)
3: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (hash: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs=)
4: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (hash: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:5a:70:0b:ff:68:cc:08:2f:6e:23:54:ad:68:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Sep 22 12:00:42 2026 GMT
Not After : Sep 23 12:00:42 2026 GMT
Subject: CN=bdb2582fe998e52be4f9e2497723e52b94f96de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:38:7c:ac:8b:42:13:84:c2:5b:5e:ed:14:
3d:da:b9:76:ba:72:eb:d6:cd:b7:23:8d:b2:2d:18:
76:1f:ed:7b:bc:11:8e:7a:3f:2d:e2:5d:ec:86:08:
6e:34:16:78:f1:f3:b9:99:d4:76:ec:fa:47:41:37:
a7:aa:b8:fa:b7:c5:05:6d:9b:e8:85:dd:70:1e:df:
fa:4f:57:33:4a:35:4b:e1:97:f6:28:4d:e0:86:a3:
2d:e3:06:67:1f:58:82:cf:c5:3f:dc:4e:78:77:1f:
e0:2e:09:23:85:a9:92:39:ad:bd:03:15:d4:53:81:
b5:39:7c:cf:36:46:6e:96:f2:d9:46:d1:ad:38:d6:
78:77:b5:86:85:2b:6d:66:34:35:b9:ad:0f:20:99:
b2:88:01:1a:6b:54:2c:95:13:2e:b4:b2:41:e6:71:
b7:fd:2b:d8:4f:74:37:28:52:a2:aa:5f:0c:1c:93:
52:23:f2:89:4a:ec:b8:24:60:fb:de:35:9b:eb:45:
96:b5:9c:23:ee:c8:29:fa:d3:af:99:4c:f1:95:3b:
37:b8:1e:90:11:a8:37:a4:6a:02:02:40:9a:07:8b:
9c:4b:5c:64:d7:44:dd:4b:7b:7f:42:66:00:d8:91:
cd:6c:9c:eb:f5:73:77:fd:70:de:fe:4f:e6:8f:dc:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B2:58:2F:E9:98:E5:2B:E4:F9:E2:49:77:23:E5:2B:94:F9:6D:E5
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b5:b2:23:76:3d:55:70:bd:f3:8c:49:98:5f:8f:5d:1e:ca:
ba:1c:85:0a:6e:85:ca:1e:d3:d8:b2:fd:8d:48:c4:31:d7:2b:
db:08:af:fc:05:e1:76:7c:0d:00:a4:af:33:f6:a8:13:dd:42:
28:66:88:06:a2:24:a2:06:aa:a4:33:90:d4:6c:57:e1:87:90:
cf:37:ff:8b:0d:78:c6:22:22:2b:c0:92:ea:b6:bd:05:29:a2:
da:36:ba:7b:6d:33:e9:d4:60:fa:bb:8e:30:db:db:c3:bd:8f:
15:7c:37:85:a7:2e:62:ec:2c:65:3c:a6:92:c3:59:9e:9f:f9:
ca:a8:f2:81:18:3b:08:dd:3d:ae:b7:21:75:b5:0b:7a:cb:5d:
be:64:51:a1:8a:d9:e2:2b:98:4c:77:6d:91:b4:6c:af:37:c9:
8a:8b:52:0f:63:92:94:a8:b3:09:ba:7e:73:95:bb:c1:34:09:
22:b4:c5:fb:8d:6f:d1:13:26:02:2d:26:14:56:cf:32:3c:83:
80:b2:89:f2:46:8f:87:0e:0d:f9:3c:24:ef:d1:82:19:1a:fa:
95:ff:6b:8f:4a:a0:8a:d6:22:2c:9e:27:23:d4:23:09:f9:ce:
f9:bf:02:0f:ce:38:32:e0:7d:a4:bf:bf:bf:44:03:aa:f0:dc:
ac:86:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:16:14 2026 by rpki-client