Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: bRTLufKbK5zlEzOXRJceHkgyNU+ty1KLrWt9b9Q9KL4=
Subject key identifier: A8:BD:13:B1:31:F1:62:4F:84:96:0E:B1:FC:34:D0:B0:91:69:64:E6
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 01A0C33228B024134E662841E4FC5149D87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 076C
Signing time: Mon 21 Sep 2026 09:00:39 +0000
Manifest this update: Mon 21 Sep 2026 09:00:39 +0000
Manifest next update: Tue 22 Sep 2026 09:00:39 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: UJWyZG18JXP6lFe3OTEN+D4j+YfedNrS5C5KNGiWcNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:28:b0:24:13:4e:66:28:41:e4:fc:51:49:d8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Sep 21 09:00:39 2026 GMT
Not After : Sep 22 09:00:39 2026 GMT
Subject: CN=a8bd13b131f1624f84960eb1fc34d0b0916964e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2a:5b:85:7b:85:39:a8:a3:01:15:d7:48:ea:
fd:bd:57:53:2c:36:44:79:b5:e4:61:0c:3e:47:c5:
77:5b:a7:a1:25:68:e1:18:a2:e6:15:dc:e1:3c:03:
7f:29:59:56:0c:ca:ce:31:83:82:60:ae:1a:db:13:
a7:87:f0:0a:7c:99:fe:53:a9:06:6d:e4:9d:d4:e3:
24:ef:fb:9c:1f:8e:18:79:ef:0d:54:c3:e4:ed:28:
e3:f4:a2:01:cf:1e:05:8d:8d:33:49:47:de:8c:a1:
fd:43:ea:70:90:56:1a:ee:f6:12:4d:0a:69:79:79:
aa:0f:a3:cb:e1:40:a0:a0:c3:f8:89:de:5f:98:32:
bb:03:1c:d9:68:2b:fa:23:7b:0b:5f:e2:e9:2f:0a:
25:48:c0:70:0a:f9:8f:ce:2a:d3:03:f6:47:1c:5e:
ae:3a:19:e7:48:e7:2d:1a:0e:8f:18:d1:e4:26:36:
ee:b5:3f:c7:c4:a2:bb:f2:5f:c6:3f:41:d7:e1:e9:
8e:08:68:76:5a:7f:df:32:87:be:e8:ba:5f:cd:af:
82:af:2e:5d:e0:12:58:58:0f:5a:2f:59:55:59:a6:
1b:e5:bd:df:89:17:40:da:73:d4:e7:d8:76:6c:25:
d2:bb:26:a8:46:54:1f:20:41:a4:2d:be:93:c4:70:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BD:13:B1:31:F1:62:4F:84:96:0E:B1:FC:34:D0:B0:91:69:64:E6
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b1:38:2a:3c:fe:c5:bb:47:f4:e1:25:56:cd:9e:bd:a3:09:
cc:d7:d0:ab:ba:c0:bd:a4:01:0a:7a:36:cc:6d:b3:da:7b:05:
66:80:a2:e4:a3:5e:d8:c4:5e:0d:dc:67:dd:eb:07:ff:5d:1a:
f6:55:9d:ed:31:b1:98:80:90:7c:02:3b:4f:52:3f:46:4e:f3:
5c:fb:aa:21:b3:b7:a2:d7:04:fa:e5:74:53:ec:e3:25:f0:42:
82:32:8d:7b:51:1b:ac:6d:8b:2e:d5:e0:ca:bd:a0:0c:4d:76:
68:bd:e5:72:61:36:a1:9c:32:20:da:00:6e:f9:e9:dd:a8:19:
7b:5d:dd:90:32:2a:ce:b8:dc:28:16:e5:04:b9:1c:44:08:80:
5b:1e:9a:7a:6d:87:38:95:bf:ee:eb:44:63:6b:fa:6e:9e:be:
56:94:ac:01:82:3b:05:38:70:ec:86:54:f2:1e:17:36:81:a0:
bf:f6:b7:5b:0c:90:57:7e:ca:74:8b:dc:e0:8c:1c:36:f2:34:
57:9e:e1:5b:43:21:9b:ce:cd:a9:a8:48:fd:59:e8:6d:3e:3d:
a4:60:92:48:69:bb:9e:13:eb:b0:77:d2:e1:c3:50:7f:ee:ba:
16:54:88:c0:0c:9e:1b:7d:82:f8:b8:e2:f9:56:61:05:93:fc:
c8:a7:89:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:51:08 2026 by rpki-client