Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier: R1OBCN1QRNtSvstvMfyK05uFiQLFhuE42rutAEVNYDs=
Subject key identifier: AF:55:26:52:26:6E:29:E2:BC:D4:03:70:CE:F6:E8:2F:DD:7E:05:48
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 01A121D34C37640ABDBECDCDB5D74AB76642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number: 1A9B
Signing time: Fri 09 Oct 2026 18:00:58 +0000
Manifest this update: Fri 09 Oct 2026 18:00:58 +0000
Manifest next update: Sat 10 Oct 2026 18:00:58 +0000
Files and hashes: 1: 1-5ZO4wy2gdMm-RlasEiiUu_66ag.roa (hash: z6hiEkQzG0sD38AUOglWiXkVXLhBbifg/B/a3MzT8UE=)
2: 4sjyq3qhVZlOGoiUzGF4lAOm0Ms.roa (hash: snRHhhCF/A70W64B8Ansk4wih7fxueYm9qlqzv1rXXE=)
3: JXD9OGEgFf3Wk4sh84udKIfqooU.roa (hash: qrmAAi4FfndLs6wG6DvmHeD7s+/mauxwlNM+tOn8N8I=)
4: Ncp12bGOlnl7zeDP17e5hwwIiXs.roa (hash: 8U+DuszR+o7r4oyJP5qAPzyleDSPshxobLvejlTQgog=)
5: OMs3SExnh8q-OfFFrIMvJ4V20rM.roa (hash: 3VJ0PQELJEdphYzfdK0KvVfZHKT8gZroOq8apM3LPBE=)
6: bcdCYadegTnuv1kyS3SFpw7_obg.roa (hash: FHoWoxIPPut7YlIBnS9RiEjsnw6/GTtGF64PoDTZc+8=)
7: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: t8pyMkQxxB9VdgCpmO1K9bUBy45Lk0Q5NBH2gUqhGN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:d3:4c:37:64:0a:bd:be:cd:cd:b5:d7:4a:b7:66:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Oct 9 18:00:58 2026 GMT
Not After : Oct 10 18:00:58 2026 GMT
Subject: CN=af552652266e29e2bcd40370cef6e82fdd7e0548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:4a:ac:fa:fc:40:6a:05:d1:ad:03:00:ca:
7f:72:5b:83:f5:9f:0d:0b:87:5e:3e:6f:76:87:ad:
a9:4a:fe:84:7b:79:dc:5a:72:58:94:bb:68:79:25:
78:11:ec:61:9b:73:4f:5a:a1:32:d5:9a:a4:ea:c0:
72:39:b3:99:4d:87:60:86:39:ba:e4:3c:d5:88:99:
97:28:69:25:aa:f3:51:d1:af:56:c5:64:58:d6:d3:
97:6c:33:6b:dd:27:91:15:f8:d5:b8:77:77:d8:bf:
31:c4:61:7a:00:47:2d:03:3c:68:f3:45:ae:51:75:
5b:09:3b:76:2c:a4:bc:f8:a3:8e:64:fc:e7:38:2c:
b6:8b:29:2a:df:fd:2c:9f:54:dd:d9:fc:dd:c1:29:
8b:ed:03:e7:dd:df:42:05:5d:0a:b7:6f:df:4a:86:
d9:f3:d9:6f:11:c2:e9:68:87:63:3e:06:a6:b5:83:
e1:f4:80:65:7e:43:d2:30:7c:33:76:a3:42:9b:68:
b5:8b:a8:16:d0:c2:db:02:5b:dc:2e:15:93:ea:3d:
c4:af:5f:7c:67:59:ad:98:c9:18:e9:00:d8:f0:27:
e5:cd:c4:17:d7:fe:5d:3a:f9:24:65:28:9d:5c:e5:
ea:84:f4:c2:5b:d1:b5:8c:a9:86:37:2c:39:e1:6a:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:55:26:52:26:6E:29:E2:BC:D4:03:70:CE:F6:E8:2F:DD:7E:05:48
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9d:af:97:3f:e5:fb:e8:8e:cd:e3:8f:01:fe:6a:42:74:34:
23:c4:ba:ef:98:39:40:35:48:af:75:f5:b0:fb:14:f6:22:87:
1f:10:f9:e3:bc:a1:18:cd:ff:bb:83:2d:e1:31:13:cd:4b:6b:
c4:e0:45:fb:ce:05:91:59:b5:80:66:dd:ee:81:2f:4e:06:61:
c0:ed:64:2b:5e:9f:79:a1:6b:61:83:42:16:00:b3:fa:79:2d:
dc:8b:2f:fb:b0:8c:fd:7a:9b:89:ac:5b:43:51:cd:8d:62:06:
32:80:0d:20:6e:70:90:88:3d:ba:0f:f0:cd:31:d2:e3:56:5b:
9a:a3:11:fa:f7:bd:88:39:d8:06:66:66:6d:72:ca:5b:fb:79:
ef:c9:13:3c:84:a5:30:a0:54:49:f3:f4:72:a0:fa:4b:63:c7:
f9:b2:5f:81:8e:c7:45:36:21:c3:45:9c:22:2e:ed:c4:89:57:
1e:5b:b6:8d:93:eb:1a:0b:75:ed:8a:3e:4a:98:01:de:89:b3:
8d:cd:0d:ce:a3:61:10:29:61:12:c8:d4:61:55:94:68:13:e8:
e0:b9:9d:01:ef:d7:52:50:81:00:e7:9a:80:25:90:57:f4:01:
8b:b7:e1:b3:28:69:40:e1:2d:38:79:89:60:c8:97:cb:82:ea:
48:4a:77:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:47:40 2026 by rpki-client