Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: ItQNX9TFyhL5SAc2OEnjDyYSuE85+Y+3KB4Fc8D8RDk=
Subject key identifier: 72:06:2E:38:BF:01:1B:84:54:B3:84:55:A7:56:AB:05:4B:58:CA:7E
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 01A16BDADA09FB94073EFBE05DDA4D86A68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 0C4B
Signing time: Sat 24 Oct 2026 03:01:07 +0000
Manifest this update: Sat 24 Oct 2026 03:01:07 +0000
Manifest next update: Sun 25 Oct 2026 03:01:07 +0000
Files and hashes: 1: P0H9mn8azX8J6K-hdAfHiYeHr48.roa (hash: E4c9kuinUCaG0thWwOJajTUQL7VeKxkEvaLK1sfiV8U=)
2: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: hX+i34LQSrDQDCNQNieWgWyt0iLWo4Jl6xsAY9wl0Gc=)
3: tdjIiHG6aRg6RaOSgsb_E64QRco.roa (hash: rpGb1Qz22L2bS8euMlwSPzOxpxsFd6dx18fW4QaBOow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:da:da:09:fb:94:07:3e:fb:e0:5d:da:4d:86:a6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Oct 24 03:01:07 2026 GMT
Not After : Oct 25 03:01:07 2026 GMT
Subject: CN=72062e38bf011b8454b38455a756ab054b58ca7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:84:b6:e2:ee:63:7c:29:4e:15:f5:51:2b:
f0:97:18:44:c9:c1:a1:91:5f:cf:d7:38:b4:5d:7c:
ac:59:ec:6c:27:b7:30:a8:1e:52:1c:b8:a4:f6:2e:
21:b4:e0:10:26:16:bc:15:ed:9c:05:9b:ff:0e:77:
e1:fc:b0:e2:a3:d1:a7:7d:09:f9:b0:bd:c5:6b:50:
c3:4c:dc:67:96:08:86:4e:d4:cc:57:90:d2:01:c1:
87:8f:cd:62:41:13:62:c0:65:92:aa:6c:ff:c7:33:
4a:d2:a0:48:fe:99:bd:7d:96:6a:72:d3:66:56:40:
59:aa:69:9c:1c:fe:fb:74:3f:f6:98:f3:99:4d:da:
76:da:c9:1a:0c:03:87:6d:39:e8:15:6e:a4:93:0c:
3d:b8:47:52:31:06:20:de:7c:a4:1f:96:fb:58:d1:
b8:a8:0b:a8:2f:af:39:05:57:3e:9d:9f:04:01:9f:
03:32:ec:fb:99:7b:c7:68:37:1d:63:84:9e:82:96:
76:33:e9:aa:47:24:39:52:9d:46:5e:f0:ad:10:5f:
eb:d8:b9:cf:51:fe:56:23:7f:b6:31:99:82:42:57:
bb:26:49:c9:78:d7:94:8e:bd:65:ef:c5:91:a2:57:
75:69:d8:fe:44:66:f6:39:69:f7:ac:6b:77:0b:b4:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:06:2E:38:BF:01:1B:84:54:B3:84:55:A7:56:AB:05:4B:58:CA:7E
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:15:26:7a:0e:32:ad:63:87:20:c0:9c:6a:05:aa:d8:3c:33:
f8:0f:1d:1d:97:ea:83:f5:ff:cb:fa:4d:dc:ad:7d:44:4c:c4:
52:7a:98:26:c3:60:17:9d:52:ba:1b:c7:fc:c6:47:c3:45:37:
e4:e9:5a:25:27:10:e1:1d:04:75:71:76:fe:8e:ef:8d:02:17:
cf:79:0f:53:55:73:3e:d9:69:e0:d5:e4:52:fd:4d:16:24:b1:
3d:a3:3b:98:8d:82:9c:2a:85:23:94:55:e0:b8:d4:d0:8c:75:
9b:af:23:ed:0f:b1:47:b2:75:fe:0f:f5:a7:95:76:aa:9e:5c:
d6:40:7b:61:a4:d1:36:57:a8:8f:26:6f:6f:b2:37:3f:a1:f1:
db:94:a1:00:56:e9:18:17:3d:a0:1a:06:f8:29:9b:4e:71:be:
65:87:1b:d8:1a:79:71:21:df:fc:7d:63:eb:18:7d:fc:bc:21:
3e:01:76:50:19:47:49:3f:bd:2d:c4:78:82:e8:c1:94:65:b7:
85:8d:05:de:e9:ac:75:bb:65:41:90:07:de:81:fa:3b:51:fb:
c1:d1:6c:0f:11:e1:63:45:2d:cc:e6:51:17:03:07:91:f7:01:
15:07:6b:cd:2e:a8:f8:17:21:7a:01:1a:8a:10:e5:59:29:e4:
c3:28:2f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:13:43 2026 by rpki-client