Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
File: D_HA6RHM5MRT_sKxaPbBPTbg34U.mft (raw, json)
Hash identifier: vOmXZc8t09GLnE1oAHereTmFc8q0Z3YblW5DE66C+K8=
Subject key identifier: 60:72:56:E0:AD:D6:56:0E:14:E5:72:CF:10:37:68:40:EF:A4:48:8D
Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Certificate serial: 019FA899D8108E4B9758AC18D56CC36CDB2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
Manifest number: 01EA
Signing time: Tue 28 Jul 2026 12:01:22 +0000
Manifest this update: Tue 28 Jul 2026 12:01:22 +0000
Manifest next update: Wed 29 Jul 2026 12:01:22 +0000
Files and hashes: 1: A2gg-MX124Lpmk4q6amGH364pI8.roa (hash: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4=)
2: D_HA6RHM5MRT_sKxaPbBPTbg34U.crl (hash: 5cioA8628m27SfTPRMBBettE615jTROIuLSeO7l75YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:d8:10:8e:4b:97:58:ac:18:d5:6c:c3:6c:db:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Validity
Not Before: Jul 28 12:01:22 2026 GMT
Not After : Jul 29 12:01:22 2026 GMT
Subject: CN=607256e0add6560e14e572cf10376840efa4488d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:1b:64:7a:df:8e:81:23:1c:f4:ba:3b:3b:
95:74:36:29:09:f3:0b:79:7e:49:1d:59:0b:ea:73:
93:1e:93:ab:68:24:83:a7:ad:c7:16:4c:c3:15:df:
7f:84:41:a1:c8:ea:71:25:e1:57:4e:54:9c:8b:7f:
0a:f6:27:ff:d7:86:96:7b:43:6d:19:ee:89:8f:70:
e4:6f:d5:78:97:47:72:4b:d8:69:81:b1:cc:64:2f:
ac:9e:a4:85:f7:7d:62:bd:da:3d:8c:b6:24:d2:15:
00:1d:1b:ad:fb:1a:8b:84:5a:e2:a7:51:99:35:bf:
5d:c6:16:1b:97:dc:f2:fa:28:b4:86:de:b7:8d:e2:
05:cb:e1:8a:58:66:a9:9d:54:07:90:8d:eb:08:bb:
0c:d7:a3:7a:c6:31:e5:b0:18:fa:3e:14:54:ac:35:
58:9c:99:f5:2d:8d:51:f2:dc:46:cb:c8:19:e3:00:
67:6b:d1:f1:86:3c:d5:72:66:fa:06:b2:5f:60:ba:
a5:5e:33:b4:b3:0c:d2:0b:63:cf:02:99:85:83:b4:
30:6a:84:e0:c4:60:24:d2:e3:50:df:55:f9:c6:37:
f5:20:a9:f6:49:a7:e5:90:c7:a2:ce:86:32:71:3b:
83:2f:39:3a:e5:ff:85:c7:00:fe:4c:82:21:f9:5c:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:72:56:E0:AD:D6:56:0E:14:E5:72:CF:10:37:68:40:EF:A4:48:8D
X509v3 Authority Key Identifier:
keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:12:1b:65:72:55:38:e3:dd:6b:4c:2e:3c:2e:7a:9d:ca:ce:
f0:61:72:8d:a0:68:f8:6c:f8:9f:39:09:66:13:e4:e7:62:b3:
41:f8:08:db:e9:87:7b:94:64:13:d5:57:1c:99:17:62:40:88:
12:9b:da:91:e8:cc:76:f8:62:4f:f5:76:2f:db:c6:a8:4f:92:
00:57:e0:71:bd:36:26:77:79:4a:82:8e:18:52:d5:5e:b8:e1:
aa:f3:97:ed:46:3d:8f:8b:b7:f7:48:dc:21:b0:2c:14:e9:ff:
7f:13:ef:26:da:0b:b3:1e:03:bf:ee:12:28:07:6d:e0:24:6f:
48:a0:8c:60:bd:de:4e:1e:fb:f6:8f:23:b9:ac:0f:cb:10:3b:
ba:fa:10:c3:26:83:9f:34:ed:ff:9d:86:04:1e:de:fa:8d:00:
e3:b0:b8:68:c0:3b:43:1f:b9:fc:55:49:55:4a:5d:66:a3:e9:
d6:98:53:a0:8e:d1:a5:63:9c:98:ba:c9:1d:28:69:cc:fe:0f:
93:2a:fa:7a:ac:b4:f7:e4:77:f3:f5:08:0b:ed:8c:3d:e4:50:
49:a7:83:03:fa:11:a8:85:30:58:f7:a0:32:57:7f:53:e4:8d:
ef:9e:4c:21:cd:35:a4:7c:a5:17:63:0c:a4:f1:f5:1e:62:ff:
20:84:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:06:30 2026 by rpki-client