Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: 7X9iizVXSUx1hVEJfYXt0wiRQs7lb2/GHfCpgM+bRKA=
Subject key identifier: F3:B8:47:CC:1C:31:CF:8B:69:4C:D7:28:68:B1:7C:05:C0:6C:A6:C2
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 01A0D2DE8B945171FBE2A91E44A93180EEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 10:03:15 +0000
Manifest this update: Thu 24 Sep 2026 10:03:15 +0000
Manifest next update: Fri 25 Sep 2026 10:03:15 +0000
Files and hashes: 1: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: uLXoQFum+wti2hvixyN50fT9/HQ+W8uFREL2JCru3h8=)
2: NE7pTp4QnaDUGUHHElFTbo-gDG0.roa (hash: r/+SGcFjTDLD6C4xVwjhnpDBi0wwxr0NEt4KOnZIJYg=)
3: p4Ci63x1biX5rkNwdgShagWDKiQ.roa (hash: +XOGwU+R4ACvZpm15Ra20YpWSpLTXsRXodHyyF4EiU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:8b:94:51:71:fb:e2:a9:1e:44:a9:31:80:ee:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Sep 24 10:03:15 2026 GMT
Not After : Sep 25 10:03:15 2026 GMT
Subject: CN=f3b847cc1c31cf8b694cd72868b17c05c06ca6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:46:50:a4:5a:b5:a1:ab:1e:3d:f9:0b:71:
43:c6:df:5a:2f:fa:47:51:cc:0e:1f:89:5f:cb:9f:
de:38:e8:51:b2:4e:79:10:c6:5e:51:3d:c3:11:16:
e6:60:f3:93:74:4b:54:f5:82:e3:ad:06:e3:80:81:
7d:26:b7:16:9e:62:45:0b:36:0f:2d:44:85:bf:81:
a6:50:a4:2d:0a:ac:da:bd:30:f5:12:f9:6f:bb:49:
8f:bc:83:05:4f:21:c7:08:4b:0e:2f:ba:cc:8f:cb:
36:73:b1:f7:b1:e7:81:d9:5f:5e:d3:5c:73:a2:d0:
53:be:41:75:dc:11:67:6a:01:53:18:a6:72:5e:ce:
ed:a6:e9:54:ec:78:5a:16:5f:32:01:7c:3a:41:67:
c3:b1:2b:92:ef:0b:80:11:74:1d:89:bd:f0:61:d0:
ef:c4:08:84:f6:b9:33:b0:23:39:f3:ae:64:a6:d9:
56:55:e5:97:89:2b:41:d8:dc:62:10:ae:e6:d0:63:
e8:9d:31:5e:6b:06:7a:0c:e8:bb:2a:36:b5:d2:fe:
9d:ff:bb:9b:b1:53:ae:29:14:5f:5e:8d:e6:94:0c:
bb:89:e2:16:f5:a7:e5:c0:45:34:19:c4:e4:43:17:
9d:ce:1b:d2:e4:bc:90:f2:e0:c6:c1:ce:5a:a4:9e:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B8:47:CC:1C:31:CF:8B:69:4C:D7:28:68:B1:7C:05:C0:6C:A6:C2
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d0:03:23:69:67:aa:ad:a1:63:26:f5:4b:b4:1b:cd:59:d5:
f8:28:5b:72:35:93:38:0b:22:1f:96:6f:66:18:e6:5b:9a:67:
99:0d:84:3c:34:ac:c8:8d:de:5a:01:97:d3:b7:80:3f:86:fe:
e6:84:db:4d:ca:82:fd:e3:3b:d1:07:89:0b:0f:6f:2a:80:35:
ec:4e:3a:f9:ea:76:dd:c8:33:e5:19:c2:96:1d:8f:ac:8c:82:
e5:f7:ac:90:35:03:6d:7d:43:be:a5:bc:c9:7d:28:f7:f3:46:
fc:c1:60:24:9f:38:6a:47:41:78:c5:61:45:6c:4d:fa:7f:5b:
ab:d0:0f:44:84:0a:b4:81:b2:38:de:0c:4f:1d:53:b4:b1:d1:
1b:b8:0b:f4:39:db:0f:94:43:64:ed:65:ec:f8:06:23:3a:8b:
0e:33:24:82:dd:5a:6d:69:2f:01:e4:68:91:a1:9d:0f:a5:99:
84:4e:8e:d8:63:3a:9c:99:ce:e9:ab:9b:0d:1d:4e:b3:53:24:
fc:9d:4b:41:79:2a:6c:ec:f3:b2:51:7d:c6:ef:c2:63:6f:3e:
24:cc:dd:29:65:e5:7b:7a:7d:9c:25:c7:84:49:69:f0:10:41:
17:ee:fb:31:d3:c7:cd:78:66:75:50:fb:38:14:a5:06:4d:4a:
05:43:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:56:04 2026 by rpki-client