Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
File: D_HA6RHM5MRT_sKxaPbBPTbg34U.mft (raw, json)
Hash identifier: +37k9ISW7CUY7UFMDaUB6mzRpJa3AJGhDnQ0mJRaOz8=
Subject key identifier: C6:97:69:08:08:0B:04:06:99:ED:3B:4C:40:96:F5:89:D8:8F:69:6F
Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Certificate serial: 01A0C66A6D8B5D8B9D8936DCEDB49DC2E7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
Manifest number: 027E
Signing time: Tue 22 Sep 2026 00:00:58 +0000
Manifest this update: Tue 22 Sep 2026 00:00:58 +0000
Manifest next update: Wed 23 Sep 2026 00:00:58 +0000
Files and hashes: 1: A2gg-MX124Lpmk4q6amGH364pI8.roa (hash: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4=)
2: D_HA6RHM5MRT_sKxaPbBPTbg34U.crl (hash: jTAAxS8JD867xoLj069ikm/qIecnojZgM9OsS6ap+rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:6d:8b:5d:8b:9d:89:36:dc:ed:b4:9d:c2:e7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Validity
Not Before: Sep 22 00:00:58 2026 GMT
Not After : Sep 23 00:00:58 2026 GMT
Subject: CN=c6976908080b040699ed3b4c4096f589d88f696f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:df:38:9f:f2:db:e8:f8:79:81:0a:47:6c:
ef:91:70:bd:12:6e:49:f8:99:13:a5:2d:fc:87:b8:
c7:54:a3:08:fd:45:a2:38:9b:87:2b:35:94:f3:73:
0f:bb:1c:a8:dd:8e:96:6d:5f:db:2d:50:81:ec:04:
95:21:ef:d0:2e:90:0e:16:33:a3:2c:ed:b2:5f:15:
bd:e7:9f:7f:33:a1:f0:aa:92:e7:d0:4f:48:8d:04:
e0:24:67:7e:f3:63:85:0a:0d:7f:02:89:b1:b0:40:
8c:cb:ec:33:1a:e1:36:54:42:9e:b3:7d:85:ab:05:
65:26:2e:de:2b:0b:46:05:07:46:d1:ad:ba:e1:0a:
50:16:bb:20:1f:3c:83:e1:ab:5a:2d:72:bd:08:ef:
c0:ff:45:81:62:a9:79:3a:cb:fb:bf:c0:b1:d3:f8:
ae:28:51:e7:54:e0:46:40:9b:53:9a:de:80:3c:2e:
48:7c:b7:be:a9:dd:88:b1:47:5b:52:29:fe:dc:82:
08:40:80:58:3e:40:ed:73:4e:1a:78:af:58:27:40:
9f:bb:2c:53:bb:04:22:df:15:7a:41:46:59:45:99:
1e:a7:97:3d:38:e4:db:56:25:7d:f0:06:58:74:52:
52:d2:dd:57:6c:52:6b:a8:38:50:f4:2e:69:b4:14:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:97:69:08:08:0B:04:06:99:ED:3B:4C:40:96:F5:89:D8:8F:69:6F
X509v3 Authority Key Identifier:
keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cc:34:13:f3:38:13:30:f3:8b:14:fc:8d:3f:f0:92:7f:10:
a1:e9:96:ca:2d:84:c7:25:f5:da:bf:7f:7b:cd:78:92:a4:b6:
96:cb:8c:28:23:d7:68:5f:09:52:4b:53:cc:1e:ca:89:5e:da:
23:a2:01:0b:5b:76:be:e2:21:c0:38:58:d8:f6:48:f2:a0:33:
a6:0f:00:ec:19:57:5b:32:e4:35:7b:89:4a:49:42:01:29:99:
f1:94:45:5c:99:c1:9d:3d:2b:72:bc:54:72:0d:e2:0d:65:52:
b8:bc:ec:1e:8f:0b:e2:17:eb:5f:8c:2e:64:37:86:7f:85:4f:
c6:a4:ea:39:3f:bd:14:47:37:0a:26:72:de:a2:13:36:1f:54:
32:18:fc:a3:89:c3:fd:f1:85:d4:6b:c3:50:54:a4:da:99:71:
f8:31:0e:fb:47:41:76:3d:b2:a9:45:e6:02:04:b0:b9:ea:f5:
49:24:29:80:38:a9:53:3d:9e:be:9d:00:ad:8c:75:cc:56:9e:
25:8f:44:32:e4:7c:b2:4c:40:82:1d:3f:3d:2e:84:c4:2f:25:
7c:cc:c0:e1:ae:8f:0d:07:9c:52:ad:98:5b:77:b7:60:cf:cc:
7c:6c:44:7a:18:42:8c:32:d5:72:18:9c:98:84:1c:3b:46:62:
86:c7:d1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:35:27 2026 by rpki-client