Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
File: pkHn9ngj7vUqGf4dyODmp_QclDM.mft (raw, json)
Hash identifier: kvoPeJ0R6IS33wri9/cndHv8+yFiCKQczwxcsJIWz08=
Subject key identifier: A1:2A:C8:3A:4C:91:A1:5A:CE:52:8B:B9:E2:40:FF:F7:19:83:4E:83
Authority key identifier: A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
Certificate issuer: /CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Certificate serial: 01A1249E18721162473CA4DB351884EEFF0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
Manifest number: 0E34
Signing time: Sat 10 Oct 2026 07:01:42 +0000
Manifest this update: Sat 10 Oct 2026 07:01:42 +0000
Manifest next update: Sun 11 Oct 2026 07:01:42 +0000
Files and hashes: 1: nJSmMLTuP11zOj-elOc_2mrwgF8.roa (hash: 10N2e/W3MOYvDPcGICyNpYfCx8NxZM9dOTlLGlZzpE4=)
2: pkHn9ngj7vUqGf4dyODmp_QclDM.crl (hash: 0Sr85IPb2srLYs+Dokm6Tkla95Ke6I59hxu/WSK990Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9e:18:72:11:62:47:3c:a4:db:35:18:84:ee:ff:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Validity
Not Before: Oct 10 07:01:42 2026 GMT
Not After : Oct 11 07:01:42 2026 GMT
Subject: CN=a12ac83a4c91a15ace528bb9e240fff719834e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:4b:94:10:29:59:89:7e:15:53:63:a5:4f:
67:d5:00:4f:c0:91:13:2f:51:bd:fb:06:90:06:b7:
1b:0f:b2:94:86:ab:98:a1:f5:ed:82:52:34:2d:35:
f7:8d:47:89:92:15:f4:0f:6a:25:99:58:c9:95:59:
89:14:44:cd:ac:09:db:7e:51:2c:44:b4:66:03:62:
9d:37:07:8d:a4:1d:aa:0d:fa:7f:06:49:ff:e5:01:
da:68:a7:fb:97:4b:8e:19:d1:01:da:58:70:c8:38:
aa:5e:9a:36:e5:53:72:0e:e7:ec:6d:a7:95:81:15:
dc:ae:c6:3c:c5:c5:a2:57:4f:bf:8d:bb:36:95:f4:
5b:13:0b:72:1f:4d:84:df:72:81:d7:6f:d4:a2:52:
1f:2b:30:27:69:3d:65:c9:9a:7e:f5:e7:ec:f2:0c:
86:02:de:37:1e:01:0f:6a:d1:53:a3:7b:8e:64:c3:
cd:78:a1:15:7b:1e:85:51:93:f2:ef:7b:e4:91:9f:
03:cf:20:b0:54:31:e8:95:fd:03:d3:e9:51:c3:0a:
97:4b:4a:65:08:17:f1:d5:f4:7c:82:3e:06:8e:09:
ec:57:d0:05:ba:ed:af:4e:a8:50:c9:58:ac:7b:60:
98:b1:ce:c6:39:db:99:4f:1a:aa:9c:b7:a2:0f:b0:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:C8:3A:4C:91:A1:5A:CE:52:8B:B9:E2:40:FF:F7:19:83:4E:83
X509v3 Authority Key Identifier:
keyid:A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:de:e7:4a:d3:69:83:eb:84:62:2b:88:9a:3e:e8:0f:45:2b:
32:84:01:00:fa:c7:aa:2b:cd:b9:46:49:2e:3d:48:6f:68:b8:
0e:81:39:db:01:1a:d6:8b:88:2d:36:5b:54:7b:5d:11:38:e0:
a4:d3:33:54:6f:7a:a3:1d:95:53:02:d5:6d:6d:6c:43:f7:ce:
7c:bb:54:e1:4b:8e:03:33:fd:09:df:a1:c3:fa:3d:a9:b4:af:
d6:a5:5b:84:3d:7a:1a:9c:24:0d:24:c8:24:fd:f2:ab:53:0e:
f2:bf:a3:c3:41:87:27:db:8e:c7:c4:a0:c2:d9:06:71:d8:d0:
9b:a0:8b:89:d3:1a:d4:2e:05:a6:e7:47:b8:b6:f4:e8:82:46:
d0:9b:a1:3d:b7:18:52:92:4c:d9:af:65:8f:ca:41:cf:26:0f:
df:e4:89:8a:32:ed:64:bb:bb:66:a7:15:56:c3:31:01:47:6a:
7d:b5:84:9b:18:9a:3f:a9:79:e8:12:8b:9d:a7:46:66:f4:d7:
cd:42:d6:59:b5:de:dd:51:7b:b1:8d:f3:f5:cf:d3:d5:65:6c:
01:da:26:e3:48:03:7d:9c:75:71:a6:4c:21:d6:1d:a2:8d:dc:
2b:87:7a:cd:d9:05:e5:9a:08:e2:d6:e5:9d:4a:93:ae:fa:e5:
9f:89:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:25:30 2026 by rpki-client