Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File: Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier: fTTwEYhKR/vbD6LOTwHtN0JbZQzP3oKItGERwNSAeB0=
Subject key identifier: C0:AA:AE:26:3A:86:75:2B:06:71:2F:10:FD:F7:B8:37:36:D5:A6:6A
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial: 01A0BC1DCF2654894B1EB957ED3375238B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number: 0DF9
Signing time: Sun 20 Sep 2026 00:01:05 +0000
Manifest this update: Sun 20 Sep 2026 00:01:05 +0000
Manifest next update: Mon 21 Sep 2026 00:01:05 +0000
Files and hashes: 1: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: hMYv9f57LekO3Fts/G4vQTJZIFvsOlDIbI1RNnIhxA0=)
2: S3ZN1Eo4WmIttcCuXgmyXCV1mQA.roa (hash: HALtWZ0hiQzMkL2eGHauQhHqRPrLY/Kagy5eLk2wo9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:1d:cf:26:54:89:4b:1e:b9:57:ed:33:75:23:8b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Validity
Not Before: Sep 20 00:01:05 2026 GMT
Not After : Sep 21 00:01:05 2026 GMT
Subject: CN=c0aaae263a86752b06712f10fdf7b83736d5a66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:33:e4:05:4c:a1:f9:c4:a1:61:67:99:41:
84:ba:cf:26:eb:55:de:0a:6d:ea:b3:46:47:3a:5b:
21:60:55:52:8a:14:5b:c9:b9:c9:e1:d2:84:25:88:
ef:1f:1f:87:01:54:14:7e:4f:92:e6:6c:30:e8:bf:
f4:38:35:a2:3b:62:f1:3a:9f:f2:6c:4b:44:42:4f:
d2:23:be:71:c9:d5:7d:19:91:d2:60:a6:29:09:89:
74:cb:74:2b:10:a7:16:e8:5d:4a:45:e8:70:c3:fb:
10:4e:fa:76:e3:86:e7:d0:bf:48:1e:6e:3e:71:40:
04:df:7c:22:ae:ac:f3:1a:be:89:86:ed:84:7a:57:
b8:1b:1a:64:62:80:cf:dc:93:94:e0:0e:59:62:86:
52:bf:a6:6c:c6:fe:bb:93:68:8c:34:25:49:7d:b8:
c2:1b:1d:58:5a:27:76:b2:fd:1d:38:8c:25:27:82:
a2:da:87:69:c6:88:e3:a8:d4:b8:4d:ad:83:f5:f8:
ba:89:17:aa:f9:d6:b9:e4:ac:42:6d:74:93:b1:e9:
7f:6b:6a:ae:21:1d:cf:9d:44:85:56:6d:dc:ff:14:
74:d3:fc:8f:b1:7e:99:00:6a:8d:1c:31:f2:ee:22:
ce:b6:c3:8d:43:de:14:e1:89:74:df:9f:cf:9c:2f:
2c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AA:AE:26:3A:86:75:2B:06:71:2F:10:FD:F7:B8:37:36:D5:A6:6A
X509v3 Authority Key Identifier:
keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1b:5b:8e:d9:0b:2c:88:35:c2:57:36:2f:a0:a9:48:f4:a0:
06:79:ad:cd:a7:b1:fc:be:b5:de:97:92:f5:95:57:41:23:45:
7b:ad:dd:d2:9a:df:97:46:b9:f1:2f:5f:56:03:0e:9b:d8:fa:
77:3d:42:ae:d8:12:36:dd:c9:08:b9:27:d1:67:6e:25:58:74:
52:ff:2c:90:aa:9a:66:fb:7e:e3:df:fc:ba:d2:fc:7b:f6:d8:
96:80:16:77:79:a9:46:36:e2:85:ad:bf:e9:12:21:2d:57:c5:
17:c1:93:ae:f6:13:fd:f7:d9:18:a1:3d:89:c3:b0:b6:be:49:
6d:7f:01:b0:2e:fb:d4:4d:e0:d4:14:81:26:67:3f:3c:5f:25:
1e:aa:95:bc:f8:77:7d:fd:cf:29:c6:67:f7:06:76:10:dc:82:
a2:26:02:35:a6:38:9a:e1:e0:74:6c:6e:41:dd:d7:7e:55:cf:
4e:9e:fb:97:24:2a:56:b6:84:68:06:83:44:71:fe:e4:c6:82:
07:62:d1:e3:bb:ad:18:0b:c9:72:22:8e:2d:c8:ae:13:00:43:
d7:b4:08:58:60:27:ee:4c:61:93:4f:98:ef:8c:bc:19:b0:6c:
ea:13:e7:0d:60:c8:32:4b:ac:99:f3:2e:8f:d3:b3:92:37:0b:
10:c3:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:34:43 2026 by rpki-client