Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: PJieAwWvWtX+5zyEMV4CCZpT7TGnJylr9aSjXjyW5p0=
Subject key identifier: 97:57:EA:F8:48:6E:A9:4C:98:DC:E0:55:F7:1A:0E:C6:34:4B:FB:4A
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 01A0C8C6C4AF8980F1C26D7E43C1028448F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 1A64
Signing time: Tue 22 Sep 2026 11:01:04 +0000
Manifest this update: Tue 22 Sep 2026 11:01:04 +0000
Manifest next update: Wed 23 Sep 2026 11:01:04 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: hK6d4Q/ncoQJd8GeUqY6xDojq7dUR+abp/G73lvIcWQ=)
2: x-xatRQzbMJq2QoB7VpakVl_dyQ.roa (hash: FUFQzFRUVGUSKSoKEZzjy+oCv2v1jEvkTjPlxRoTw4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:c4:af:89:80:f1:c2:6d:7e:43:c1:02:84:48:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Sep 22 11:01:04 2026 GMT
Not After : Sep 23 11:01:04 2026 GMT
Subject: CN=9757eaf8486ea94c98dce055f71a0ec6344bfb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b8:bd:2b:02:2b:d9:29:d1:fa:c5:bc:11:ff:
9c:4d:f4:93:af:8d:12:5e:72:a4:33:80:ed:0f:2e:
9e:e5:96:5a:e0:88:df:8a:cc:bb:29:dd:08:c6:da:
52:c6:59:0b:7c:19:b9:0a:93:b2:82:cc:3b:a4:f6:
23:64:6d:b4:71:10:78:7c:13:39:35:c7:f1:e4:3a:
cd:ff:2b:19:f3:aa:66:d1:e6:fa:3f:c4:c5:e9:fc:
fc:fa:c4:fb:5a:9d:8b:1d:2e:d7:4a:cb:67:48:07:
85:f8:d6:3a:77:22:96:db:a4:b9:4f:b7:79:87:1a:
0a:a7:66:84:e0:d3:95:72:0f:91:a8:0e:b7:e5:7b:
aa:04:31:c1:db:a3:30:a7:f6:62:fa:9f:42:43:0d:
53:b5:1f:2a:05:d0:51:11:45:76:b8:6f:e1:e5:18:
1e:fa:ed:b9:dd:ad:b9:14:f7:ce:21:42:24:fd:0c:
2e:02:02:e5:bf:ac:1b:7f:58:e7:0a:1f:40:1c:c6:
7d:8c:23:c4:a0:ca:fd:69:e1:87:f8:12:ce:f4:e4:
20:57:46:04:0c:10:91:41:54:7a:3d:5e:47:b5:ad:
37:71:57:1f:4e:a5:8d:ff:9a:ee:f8:d4:36:b9:ec:
87:9b:fb:61:a6:e6:ab:aa:84:18:d1:67:19:b4:ef:
63:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:57:EA:F8:48:6E:A9:4C:98:DC:E0:55:F7:1A:0E:C6:34:4B:FB:4A
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:10:4a:91:b7:63:2c:42:d4:a0:16:33:35:61:d1:af:15:fd:
f9:cf:4f:52:df:d9:a1:f9:2d:c8:08:02:ae:bf:65:20:97:f4:
43:eb:76:06:57:be:69:4e:a3:e8:12:f8:e1:85:82:0e:4b:31:
f3:20:fd:fc:67:f8:80:9e:49:fe:06:bf:f1:95:79:4c:3b:0d:
13:3c:aa:b8:f6:7a:f3:78:ed:ff:ef:2d:0e:2b:7d:04:9c:ff:
be:0c:63:dc:ec:57:bf:b3:2a:5a:18:e6:22:bd:32:e1:02:b3:
06:b2:80:58:78:3f:6a:13:33:90:9e:cc:0b:3b:bd:5a:ca:a6:
06:40:0c:f8:dc:e7:01:87:54:fb:e2:8d:51:08:8a:84:13:26:
0f:f2:44:7a:41:f0:1c:6a:da:b7:68:42:78:eb:4e:ff:09:ed:
3a:7c:0c:39:93:2a:e2:f8:62:81:fa:ea:7a:4e:c3:57:cf:a7:
a4:bd:44:73:07:5f:96:55:39:68:7e:df:c4:01:20:9d:30:61:
ec:8a:d6:db:f0:b0:1a:f4:d5:26:26:de:f7:70:3d:30:e0:a6:
a0:af:c4:a5:bc:96:93:f2:82:81:45:c3:63:47:80:82:e3:6f:
6f:8e:65:52:22:d3:7c:2b:6e:5d:1a:1e:3f:dc:38:c5:6d:65:
fd:cc:e7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:30:18 2026 by rpki-client