Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: RAbcuof16aollqHEztvNLIdykpjFeasrhMKihOP5Rik=
Subject key identifier: 68:E3:9D:E1:14:E2:6E:34:B3:33:23:4C:FB:E8:64:A2:6C:03:80:F1
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 01A177DE9755D4929F69EB63DEA93741E412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 1ACA
Signing time: Mon 26 Oct 2026 11:00:38 +0000
Manifest this update: Mon 26 Oct 2026 11:00:38 +0000
Manifest next update: Tue 27 Oct 2026 11:00:38 +0000
Files and hashes: 1: 867F4OQuQLWhRY4aKxKeoxD01B4.asa (hash: +fRCR0HY7fbE+pyBbt7W5yHcfIjIo6aJjDfzPZQv280=)
2: au_k5KTkHwmYgyGwQL9kaGDMGdc.roa (hash: TQ4e7aFpXjYOcX/z8GmwxlZOtaffODMat2Hj3Al3L2Y=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: gwR4/pITGizA757yW1yyIwvO3LwYv75WSUG3OHUoSRY=)
4: iqLo87tMFOB-XBrWIzdU46MRBuE.roa (hash: IzYBLEWXA56LUWCfb8F/l/nPeES5nSXV/ENxm4IRlhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:97:55:d4:92:9f:69:eb:63:de:a9:37:41:e4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Oct 26 11:00:38 2026 GMT
Not After : Oct 27 11:00:38 2026 GMT
Subject: CN=68e39de114e26e34b333234cfbe864a26c0380f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:e6:e2:f0:60:7c:89:e4:dc:0b:f3:09:04:
14:ab:ca:2f:8b:5c:bf:92:96:fd:fc:f8:21:3a:90:
c7:05:c9:73:f7:45:eb:82:9d:0b:42:20:10:7e:ad:
46:e5:d0:4f:9d:39:6a:37:54:29:5c:b8:08:6e:bd:
fb:66:2d:9a:c2:24:a4:fa:11:4c:93:40:ac:7a:a8:
ea:16:43:c3:46:81:bf:fb:e4:e0:7b:c4:1a:ab:84:
47:69:3b:84:fc:5f:b3:d1:1b:04:52:13:0a:da:65:
ff:9a:33:20:bb:d0:ee:74:c3:ef:c2:c5:97:58:ed:
8b:ac:c1:6f:4e:47:ad:02:3b:5e:64:e1:fb:ec:37:
a0:84:a7:0e:47:22:cd:ef:e0:db:b9:ed:47:45:a9:
e1:44:3a:9e:78:e5:62:3f:69:7d:4a:d5:a3:e6:6b:
3f:b9:d2:b7:8b:d1:4e:3f:14:6f:b8:d8:b0:48:97:
be:3e:38:c1:9f:62:e0:c2:c1:83:40:20:92:41:27:
5f:7b:fc:56:b5:94:ed:da:ce:36:30:6c:d2:7b:05:
ea:f5:65:8b:ba:42:ed:48:40:b8:b8:93:c6:27:af:
8c:60:f3:7f:87:77:a2:37:02:f3:f1:3a:a5:9e:97:
ab:2c:bb:5a:74:51:7a:96:e7:19:b6:0e:99:92:a7:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E3:9D:E1:14:E2:6E:34:B3:33:23:4C:FB:E8:64:A2:6C:03:80:F1
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:eb:34:6e:06:99:25:5a:11:71:fc:9f:4e:22:98:80:c1:36:
5e:06:31:e2:21:0c:42:73:c6:01:bb:22:da:71:9a:01:c0:79:
37:7c:65:d6:87:89:f7:2a:33:85:13:a7:21:83:7c:25:59:32:
b7:82:49:65:7c:5b:97:98:6b:ef:a8:7f:6e:06:78:89:27:7a:
61:85:28:7d:5d:d0:24:18:07:8b:63:2a:72:9d:ef:e2:87:7d:
0f:0b:63:e1:fe:51:b6:18:ab:c5:76:a0:74:02:38:a1:8e:b8:
67:4e:f0:7a:47:8e:19:ff:d6:26:61:d3:a6:f1:70:bd:f3:e9:
06:b5:6d:95:59:bc:cd:1f:a1:90:ba:d8:11:48:f4:56:9b:46:
cc:40:c4:08:1e:d6:07:50:7a:12:4e:f6:90:79:7f:46:70:6d:
62:c1:85:70:6b:7f:57:90:91:40:fa:61:57:8d:41:7c:2b:77:
09:92:ba:95:8f:ff:50:ec:72:59:5a:20:d5:19:e2:85:9e:b0:
66:1a:30:7d:11:9e:ab:e3:65:59:e8:23:75:ab:02:f8:80:44:
21:3d:99:8f:51:ce:2d:de:93:06:cf:72:d4:84:76:2a:3f:76:
e9:cb:69:ca:f1:7d:87:63:65:30:f6:f1:7b:18:dc:b5:de:1e:
31:6f:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:33:17 2026 by rpki-client