Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: W2wxhKovgBAXaZoHCvmZjvLfoKxjOeJrenbZ33YZxrQ=
Subject key identifier: B6:66:28:F9:73:61:92:4E:43:0C:58:77:0E:59:67:9F:21:E9:6A:4C
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 01A1DE39C9D2945DC6F03FAC1AAA4050F490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 0B5B
Signing time: Sun 15 Nov 2026 08:01:31 +0000
Manifest this update: Sun 15 Nov 2026 08:01:31 +0000
Manifest next update: Mon 16 Nov 2026 08:01:31 +0000
Files and hashes: 1: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: V2wSTaFp+wdbapN8O382Sxcj2dOkDzmEu1LDUT5QxQY=)
2: ilf77_-o9-q6za7MOsqeG7F-F18.roa (hash: QcXY77GP6oWSI7llT54vOOPgAvyMn7s0Et6LlhSw/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:c9:d2:94:5d:c6:f0:3f:ac:1a:aa:40:50:f4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Nov 15 08:01:31 2026 GMT
Not After : Nov 16 08:01:31 2026 GMT
Subject: CN=b66628f97361924e430c58770e59679f21e96a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:1f:4b:da:7a:fa:61:17:bc:3d:5e:90:af:
18:da:bc:9d:29:01:27:3a:d6:23:95:2f:d9:a1:43:
1b:b3:52:28:19:8e:bc:7b:7d:a7:2b:88:6c:6d:e6:
99:c1:56:2a:84:a6:cf:32:00:36:fa:1e:3c:ce:ff:
81:3c:09:c6:51:9f:81:92:94:6b:10:6c:ca:06:cd:
53:1f:8b:aa:7d:fd:c0:5c:ac:f5:81:c8:24:f1:e3:
bc:fd:b4:ae:4e:d8:d5:e7:1f:84:21:2b:6e:51:e9:
c8:9c:d8:49:89:47:a0:2a:5a:a7:2a:b1:71:ee:6b:
bd:1c:cd:9a:56:60:6f:79:0f:5e:84:0a:b0:c7:c5:
88:8d:e0:cf:85:a0:db:ca:c7:c6:04:c8:27:ab:4e:
40:72:10:f9:f1:79:12:5c:7d:32:6a:30:ab:ae:86:
98:56:e7:45:a0:81:02:ac:b8:99:7e:50:32:f7:bf:
24:22:58:3f:19:5c:66:f2:b8:6c:d8:75:bf:0c:70:
39:f7:12:f1:49:86:59:57:d9:ac:f9:49:42:85:c4:
d8:ad:e5:96:b6:cd:1b:ba:98:ff:10:99:a7:ae:5c:
23:04:7f:bc:04:b7:3d:9e:9f:f3:98:72:c4:9c:60:
9c:ab:51:20:5b:99:e2:b1:62:3b:f5:c9:a3:fd:ca:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:66:28:F9:73:61:92:4E:43:0C:58:77:0E:59:67:9F:21:E9:6A:4C
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a5:65:0a:31:98:aa:2a:9c:d0:19:ab:c8:10:84:28:56:2e:
89:06:47:d3:4b:80:7d:99:b3:f2:74:8b:93:2f:16:6e:65:78:
73:fb:0d:88:d6:48:19:e9:db:54:f7:32:43:7e:72:06:91:5d:
c4:bd:58:34:55:a6:bd:57:9a:e8:fb:35:29:98:d5:fd:2d:5a:
d1:bf:38:e0:4a:f2:28:29:03:7b:63:57:d5:d6:34:bc:68:29:
79:27:f7:05:f4:49:fe:2f:41:15:28:68:fc:81:ec:17:d5:77:
88:67:80:10:64:ed:dc:36:2a:76:50:ff:f9:97:21:0e:80:e5:
af:d9:fc:0f:bd:e1:e4:a8:93:d3:0c:eb:97:07:5a:d2:31:08:
22:b9:09:97:cb:72:8d:8f:21:d5:40:89:07:dd:7b:5f:6f:01:
25:b0:07:a6:a0:26:d2:98:ee:a4:07:da:e7:93:79:b0:fe:0d:
64:83:3c:a3:20:b6:21:9c:60:97:23:87:bb:39:0a:95:d3:32:
95:8a:b4:83:4b:7f:2c:32:bd:8c:42:72:a3:fd:b6:62:e2:c0:
77:41:a3:37:c0:af:9f:ae:0c:7e:36:be:53:a8:7e:e8:d8:08:
02:26:cb:76:b8:75:63:e4:4a:1d:35:fb:b1:17:f7:7b:ea:36:
82:68:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:33:06 2026 by rpki-client