Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: QrpoNSGCd/kiOmZuknJZMQV2nx2X/h9SQE++vV1h9Ps=
Subject key identifier: E8:43:10:F2:1B:1E:B3:16:26:69:A2:81:CD:04:BC:B3:3B:56:4F:38
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 019CAB6B1F10477E8CD4AF9AC66460A26C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 0AA9
Signing time: Sun 01 Mar 2026 22:00:50 +0000
Manifest this update: Sun 01 Mar 2026 22:00:50 +0000
Manifest next update: Mon 02 Mar 2026 22:00:50 +0000
Files and hashes: 1: 7hkN41FQK4rNVtwj2BraoZnJuqg.roa (hash: 5m1MRTp35SIueLauNwTAW0LsW5mYAj38kHx8oT3d5Os=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: lTTeguIHkgDZWbNaeKo1gtKR01QfoWa7QAM8MpoyMJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:1f:10:47:7e:8c:d4:af:9a:c6:64:60:a2:6c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Mar 1 22:00:50 2026 GMT
Not After : Mar 2 22:00:50 2026 GMT
Subject: CN=e84310f21b1eb3162669a281cd04bcb33b564f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:28:c9:53:7c:f6:f3:f1:e5:be:ec:42:1c:
61:f1:e9:be:6f:8e:5f:d7:b9:ce:14:0e:56:df:68:
4c:9e:84:15:62:77:3d:68:13:d3:79:0d:0c:ac:ae:
1f:95:02:22:9d:b0:eb:31:04:7c:bf:f5:03:32:5a:
8e:78:e9:9a:f7:75:c1:9d:38:16:35:fd:19:9f:9e:
c2:03:92:5c:b2:b0:da:e2:07:32:2b:b3:9e:47:e2:
28:9c:60:05:a9:6f:64:00:f9:80:88:cb:4e:5f:02:
9a:57:bf:eb:03:f3:cb:1e:37:f5:0b:6c:ba:c6:8f:
35:10:05:f3:61:58:7d:51:3f:05:dd:52:6c:3c:3a:
07:73:44:00:87:54:b2:4d:d8:c6:78:5f:ab:b6:6a:
9a:4d:1f:b9:a4:dc:18:d8:25:1c:04:56:ed:bf:6f:
f3:8a:15:97:50:e0:22:80:30:54:0d:21:d8:1c:ca:
c0:12:d3:05:aa:20:80:11:bc:bf:e5:e3:64:27:84:
b7:74:a8:f6:b3:e9:00:d4:ff:f1:27:78:9d:12:2d:
64:87:3e:60:05:2f:a2:99:e7:27:26:ad:91:3f:58:
94:78:f1:44:bb:49:04:9f:c0:27:64:c1:3a:56:b4:
33:19:1a:cb:c9:36:3b:99:52:7e:26:6b:c2:74:c4:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:10:F2:1B:1E:B3:16:26:69:A2:81:CD:04:BC:B3:3B:56:4F:38
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b5:38:2c:33:f6:e9:d6:76:5a:6f:22:9b:3b:cd:77:2c:44:
86:3a:8a:95:14:cf:9f:72:4d:b2:93:ba:8b:85:8c:25:eb:76:
d8:0a:ab:ff:a6:5a:c3:7f:1a:0b:7e:2d:e7:75:ce:5c:41:37:
d9:fd:0d:38:41:fc:17:83:f2:67:ad:aa:7f:15:7d:7c:4a:21:
d3:a3:01:16:e0:1c:2b:35:60:aa:6f:9a:42:0b:50:34:53:74:
3d:39:81:58:36:7f:0d:56:dc:d6:ef:bd:81:a2:83:d3:22:f4:
91:16:89:63:fe:d4:8c:fb:69:31:31:6f:4a:1f:6b:10:67:ff:
d2:8d:42:34:4b:5f:01:1d:5b:e4:27:0e:d1:1e:fb:0b:b6:22:
c0:c5:71:d7:6c:db:92:32:79:a1:78:f9:dc:db:3e:45:58:24:
67:65:ef:e8:75:fb:64:9e:d7:1a:2e:4d:4e:e6:68:ef:8c:83:
1e:a1:11:16:9e:3f:55:c1:91:6c:ea:cc:1a:4b:2a:8c:08:99:
cf:ac:ac:fe:6a:c3:10:95:e4:63:96:5d:a1:e2:20:da:b9:1e:
8c:3a:4b:a5:8c:c9:41:12:1b:b3:7a:18:d6:eb:78:08:79:8d:
14:e3:28:6d:ea:0d:6b:c7:04:fc:02:a3:d9:9a:e2:6d:7c:08:
f6:55:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:39 2026 by rpki-client