Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: 8Mf50GgJ/+4r7mWLVYFE5O83BH8ucjeEM9OKP9xo2oY=
Subject key identifier: 37:98:E3:A0:5E:72:59:33:F7:4A:A2:45:E5:1B:51:AF:6F:12:78:02
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 01A0C82160921E044594FF4FB52FD521BE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 0ACB
Signing time: Tue 22 Sep 2026 08:00:25 +0000
Manifest this update: Tue 22 Sep 2026 08:00:25 +0000
Manifest next update: Wed 23 Sep 2026 08:00:25 +0000
Files and hashes: 1: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: l3SPxkmXjQTLtrQ5Rbeccw05kUGr+u6jFGOJGJqPK2s=)
2: ilf77_-o9-q6za7MOsqeG7F-F18.roa (hash: QcXY77GP6oWSI7llT54vOOPgAvyMn7s0Et6LlhSw/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:60:92:1e:04:45:94:ff:4f:b5:2f:d5:21:be:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Sep 22 08:00:25 2026 GMT
Not After : Sep 23 08:00:25 2026 GMT
Subject: CN=3798e3a05e725933f74aa245e51b51af6f127802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:b9:e7:aa:09:49:1b:08:11:fa:b8:c6:14:
f7:e7:f6:ca:6f:e4:8d:dd:51:ef:f6:7a:61:88:77:
8e:95:97:41:f5:91:56:56:d9:31:f3:a3:58:a0:bd:
0b:0e:81:65:7e:b3:74:7b:8a:a2:1d:1d:5a:2f:f0:
ce:f8:42:aa:e4:8b:4d:8c:34:e0:5c:6d:d5:ee:92:
66:0b:91:e9:55:13:ec:1f:5e:0a:ab:c7:28:54:ee:
e2:50:cc:53:67:55:c5:6a:1b:50:47:7d:4b:2b:63:
35:69:08:60:ec:8e:60:95:13:15:82:d5:cc:4f:58:
fe:9e:7f:dc:f7:de:fb:9a:28:8e:ff:8e:38:c9:ba:
45:0e:61:de:49:22:9a:b8:88:7d:5a:1e:59:ea:36:
e4:8c:d6:12:22:5a:24:ad:a0:44:8d:ba:fe:2d:09:
ec:68:6c:55:80:4d:bb:89:3a:11:10:6f:3c:6d:58:
3e:40:ef:d3:17:aa:bd:af:e8:47:1e:46:36:78:01:
59:f7:11:c9:91:99:f8:4d:b7:7a:3b:18:eb:3e:d4:
79:f4:03:86:ca:d7:68:d8:b9:3b:71:eb:c3:bb:64:
dd:6c:cd:87:db:a7:85:26:8d:cf:f4:f7:e2:ad:db:
4f:a5:e2:d1:3b:27:1a:85:f3:a9:e6:b4:38:bf:8d:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:98:E3:A0:5E:72:59:33:F7:4A:A2:45:E5:1B:51:AF:6F:12:78:02
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:82:20:1a:9e:9e:c5:a9:fc:b1:4e:ed:7d:a7:0f:dd:db:61:
9d:80:2f:14:10:d1:c7:ea:99:ab:e3:00:bb:6b:e7:0a:6d:05:
16:25:01:03:4b:c6:94:77:66:cd:04:bb:34:2d:e5:31:29:b2:
5c:09:90:1c:05:eb:69:d9:bb:df:1a:15:aa:aa:c9:57:d7:87:
3f:58:c9:cc:83:18:48:5a:d0:42:11:10:03:f8:db:c6:4e:dc:
9a:c3:2e:60:bc:2f:b0:84:d4:3c:24:0b:7b:52:ae:a0:c6:d7:
16:71:7c:b0:8b:f0:dd:d7:44:dd:8d:84:da:d9:e0:bf:4f:60:
2a:47:08:75:67:65:a5:8a:ab:33:09:46:36:11:ea:03:3b:06:
da:e1:0d:de:99:44:bd:1a:f9:a4:c5:4a:65:7b:a5:91:d0:a8:
9f:6f:29:83:8a:ca:35:52:81:f8:b3:50:61:6b:2f:da:f1:23:
bf:a3:2a:b3:dc:80:82:25:ca:c1:73:0b:bb:33:e4:74:41:d4:
2a:9b:9c:78:10:9d:87:76:dc:96:81:04:ad:2e:6f:fc:bc:c3:
0d:88:2a:8b:bd:2f:78:c6:e3:91:74:b9:66:3f:d9:8d:bd:5f:
24:5a:52:03:50:3f:45:5a:1b:31:52:d4:f8:0f:35:d1:10:86:
50:95:5d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:18:24 2026 by rpki-client