Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: R2jaVECEE71I+CeQ7NJrD96W7MsAGK9HttvNMjAwpxk=
Subject key identifier: DB:FF:71:50:7F:F7:B1:D0:89:9C:9C:25:69:8E:6B:34:40:39:36:59
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 01A11E2D21551F09A10F8EFF09D48B7D37FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 1AA3
Signing time: Fri 09 Oct 2026 01:00:36 +0000
Manifest this update: Fri 09 Oct 2026 01:00:36 +0000
Manifest next update: Sat 10 Oct 2026 01:00:36 +0000
Files and hashes: 1: 0z1v-iMgN-IiCcFz7KgyRD_9W5o.roa (hash: BFX8flEMTYsLMbzmmvgL8prvL0RkcLfro9e2dMsJhWI=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: XqZLIK7BWXP5LVKn4E21qqNZApdBftxdhmJKg4cYTqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:2d:21:55:1f:09:a1:0f:8e:ff:09:d4:8b:7d:37:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Oct 9 01:00:36 2026 GMT
Not After : Oct 10 01:00:36 2026 GMT
Subject: CN=dbff71507ff7b1d0899c9c25698e6b3440393659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:d2:36:28:11:22:a0:c5:df:8b:eb:18:e9:
41:ea:72:50:02:24:28:61:88:66:32:1d:eb:99:5b:
ef:9b:a6:36:cb:c2:e4:c3:c9:25:8f:72:2f:f8:c1:
30:c7:e1:95:af:4f:c7:8f:c9:12:73:6a:92:c9:ea:
39:9b:65:ac:a1:4f:1d:e0:01:7a:90:2d:b6:e9:c1:
59:2e:c6:53:4d:5c:ae:f7:89:0f:ad:b6:d9:a2:3f:
26:d1:4a:95:f8:fb:67:29:ea:73:b5:c7:1f:8e:9a:
7c:15:49:78:f4:2c:e4:37:0a:11:29:ed:e5:17:99:
8c:66:33:9c:b3:e9:4b:65:5e:8e:97:85:2b:8c:54:
39:9c:bb:b4:4f:a9:80:a7:1c:79:7c:10:04:20:ed:
fb:cc:75:3a:e5:23:9a:de:09:0e:3b:b3:30:d7:db:
1c:15:c1:80:bd:72:ca:d7:ab:9f:e2:da:42:8a:24:
9c:9b:1b:b3:db:47:6c:eb:bd:09:fa:d7:86:21:3d:
14:42:1c:13:f9:28:50:b9:b2:6d:3f:4d:a0:17:e3:
e1:72:da:d9:47:64:b1:a1:e9:8e:f1:cb:47:b2:e6:
88:a8:f9:a5:bf:35:3c:32:f8:09:ee:09:3a:2b:2b:
bb:fc:01:15:ec:e5:1c:bb:58:0c:a2:d7:aa:01:76:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FF:71:50:7F:F7:B1:D0:89:9C:9C:25:69:8E:6B:34:40:39:36:59
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c1:da:53:d5:d8:0d:44:13:89:fd:40:95:cf:5d:cc:c4:98:
fd:2c:8d:24:d4:2d:e4:ef:e5:d0:db:d0:c6:ff:08:10:5c:45:
70:e5:23:88:e4:e0:e2:e8:85:42:6e:ba:52:30:e8:73:7c:6b:
82:72:a4:ea:53:03:36:e2:c8:de:f2:10:aa:71:97:b8:20:be:
2b:25:b5:77:4e:02:c9:e1:40:9c:25:cd:15:df:87:e0:51:07:
da:75:d6:0d:20:94:44:f3:10:78:4a:2a:bf:59:41:6b:39:7d:
e1:55:9d:0b:80:da:91:df:e2:f7:2f:49:59:c4:7d:38:10:89:
aa:ca:54:b6:b6:38:ab:a0:1e:9b:e6:14:08:0b:8b:82:75:dd:
8f:40:ce:e5:4d:78:36:ba:99:ae:9d:cb:60:ae:69:40:f0:02:
9b:1e:0e:d9:1d:db:9b:21:87:af:ec:b3:0e:7e:78:9e:86:ef:
a2:e0:88:95:66:82:59:98:3f:8a:4e:95:21:0c:26:d4:ee:4e:
dc:ad:cf:74:4c:78:4c:a6:e9:d2:27:e6:05:2a:4b:ce:97:c3:
57:5b:e1:f8:56:67:c9:16:c7:4f:9c:e9:0c:3a:3e:28:33:e4:
74:77:52:18:b2:d0:dd:7e:6d:56:92:04:71:a7:22:c8:a8:11:
c0:b7:48:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 06:45:48 2026 by rpki-client