Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: YO1e5PJEKDBf5jDs3zsgt2uc0fgr7yAncq5y5rHE1j4=
Subject key identifier: 11:10:85:FB:0D:0C:C1:DF:7B:EA:9E:52:CA:6A:68:B9:1A:D8:60:F3
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 01A0C7462B16AEC3484FE32A8B5C8CC7CAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 19F9
Signing time: Tue 22 Sep 2026 04:00:59 +0000
Manifest this update: Tue 22 Sep 2026 04:00:59 +0000
Manifest next update: Wed 23 Sep 2026 04:00:59 +0000
Files and hashes: 1: EUQPSRByg2QMDNqMMHo2oQZNlbY.roa (hash: H+d5ds358KBr4HrcZ0lWa3uis3q9gOlPohiMxXosS7w=)
2: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: QWsdYJ/na5QRPGbcRVH/OiGwcBoQ2nTX1q/A5QLmHAw=)
3: zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa (hash: ctimHgQjwKly2d3TDS9AzpF0v6QUFIibm4H4p93sG5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:2b:16:ae:c3:48:4f:e3:2a:8b:5c:8c:c7:ca:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Sep 22 04:00:59 2026 GMT
Not After : Sep 23 04:00:59 2026 GMT
Subject: CN=111085fb0d0cc1df7bea9e52ca6a68b91ad860f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:56:48:09:11:8b:65:ea:ca:bb:e5:d3:70:
b6:92:0a:31:fa:6f:9e:cf:09:1f:56:0e:3f:99:89:
3e:af:47:0b:d0:59:53:4a:98:0b:a9:8c:76:6f:76:
c1:63:bd:ca:60:16:e5:6f:26:58:33:ae:bf:96:4d:
09:e3:b5:fd:1e:fd:37:e1:a3:fb:f7:53:c9:19:31:
46:c8:6c:53:04:09:1b:04:b1:23:f2:48:55:69:49:
79:a6:a9:07:6f:28:f1:b7:06:6a:b2:87:4f:6c:57:
d4:c0:0a:fa:f7:94:6a:2d:3a:ae:4e:c6:28:d5:4f:
c4:43:bf:75:c9:4b:e8:92:f8:45:21:af:62:e7:13:
4f:14:60:76:c3:c1:0f:b1:8e:c2:27:36:d2:22:13:
55:a0:23:31:07:8f:c3:92:fd:08:2a:6e:cb:2a:a7:
62:19:fc:bf:f4:27:ac:51:49:ee:6a:e1:2f:f6:32:
01:35:a3:7b:6f:90:c2:05:86:62:27:5d:46:bb:c9:
73:e0:8e:e4:11:37:aa:63:07:e8:31:c0:ce:89:19:
32:ea:71:f3:28:bd:47:ae:8b:61:52:a7:67:57:36:
19:03:d0:0c:20:21:f5:4a:55:d6:70:c3:fe:59:09:
3e:77:35:15:27:8a:e5:a5:23:3e:82:98:88:63:de:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:10:85:FB:0D:0C:C1:DF:7B:EA:9E:52:CA:6A:68:B9:1A:D8:60:F3
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:84:1c:55:81:45:aa:a6:b8:e4:7f:b4:af:1c:25:11:92:b0:
70:b5:9b:21:69:a3:bc:9a:7f:59:c3:11:78:44:dd:0b:3c:8f:
2b:bd:b2:f1:ad:6a:07:5f:0f:b2:b4:eb:af:e5:71:cf:6a:e8:
6b:6c:0c:fb:51:68:15:d4:77:40:fe:20:90:50:6d:d0:90:90:
91:46:a0:98:e6:4f:62:e1:c8:1f:b5:70:a7:68:bc:20:08:0f:
40:98:9b:e2:ed:68:fa:84:50:4d:85:22:22:47:87:66:08:23:
ed:11:0e:df:a9:e2:b3:9f:e1:83:f0:d7:37:f4:fd:c7:03:8d:
fd:04:fd:58:8b:34:a7:16:1c:0b:4a:e5:fa:fa:59:20:bb:3b:
fc:4a:66:06:88:ee:82:85:e6:33:53:0a:0f:53:2d:30:ce:bf:
dc:9d:b7:35:ae:7c:2f:b0:24:ec:3d:4c:6b:e5:87:37:3b:36:
f2:0b:63:1a:d2:5d:f3:c3:e8:b3:e1:19:44:84:a2:ae:7e:cb:
12:03:a8:a0:fe:2f:83:21:6d:89:90:2c:06:5f:b6:19:95:a9:
a6:be:0b:46:4d:63:67:e6:d2:f6:d9:b1:f7:88:49:c1:02:25:
fd:fb:52:61:36:de:20:44:62:66:8c:83:7d:a0:d2:7a:40:20:
22:ed:25:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:44:34 2026 by rpki-client