Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
File: H9nOye0f1PQcCx4w77lshhVTvjY.mft (raw, json)
Hash identifier: o+vd1bAgle5T2fGXHlxGtbCNFS2EOpYvhBpGUMHI2rI=
Subject key identifier: 21:EB:E4:B9:7B:A7:F6:FE:D3:52:3A:C2:26:3C:81:F3:1F:D5:07:2D
Authority key identifier: 1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
Certificate issuer: /CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Certificate serial: 01A0F30CEE1B4DC0632078FF19C96C359DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
Manifest number: 0660
Signing time: Wed 30 Sep 2026 16:01:45 +0000
Manifest this update: Wed 30 Sep 2026 16:01:45 +0000
Manifest next update: Thu 01 Oct 2026 16:01:45 +0000
Files and hashes: 1: AGVrI7h1W1sZnmEHrQIXxLRxF1Q.roa (hash: K1nbjcJomqgMcH/NVsTCJWhMoSmEDtw4c8u/MMrHlso=)
2: H9nOye0f1PQcCx4w77lshhVTvjY.crl (hash: 2PW758bI82sP2vRkov5O0I6FElVAMt7U0l4YlRabPas=)
3: fnZsGtHZZ57ibD1bgR7D-kx03A8.asa (hash: gnq6h8vpZgrDrbXWUtlG5+lFKokphaSsAqWL7zsvVig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:0c:ee:1b:4d:c0:63:20:78:ff:19:c9:6c:35:9d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Validity
Not Before: Sep 30 16:01:45 2026 GMT
Not After : Oct 1 16:01:45 2026 GMT
Subject: CN=21ebe4b97ba7f6fed3523ac2263c81f31fd5072d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:c0:09:b1:95:61:38:90:37:2c:e7:d5:98:
4d:46:91:07:bb:ce:59:30:b9:46:bf:94:9c:ea:09:
8a:1b:96:24:81:0f:8f:9a:09:4e:12:e7:94:f2:ed:
bf:e9:34:6d:ef:f9:4e:e7:25:53:ab:d0:3e:17:f6:
da:d8:e0:33:a6:23:e4:7d:a9:56:51:e5:c8:af:bb:
5e:6e:71:68:52:52:5a:8b:28:2a:cb:66:49:ba:bb:
e1:a7:72:4a:4c:27:29:a0:c1:f4:02:6c:45:a8:d6:
b2:20:6b:9f:dd:36:dc:9a:fa:8c:9c:98:bc:a4:3e:
a2:81:e3:30:d1:0c:2e:65:3c:b0:0b:30:e8:01:ec:
79:a0:bc:ba:74:e5:f5:b5:e3:28:5f:6e:f8:83:e4:
28:62:1c:be:aa:4e:0e:c0:ce:ae:34:f3:4a:20:60:
35:b0:cc:21:fc:79:e9:d1:a5:2c:a5:d2:75:7a:03:
23:6b:48:e8:a3:61:d0:e9:33:48:ad:2b:fa:19:99:
9f:1d:b7:d7:19:d6:ce:75:61:e9:e8:d8:c5:10:64:
9c:cf:59:73:27:95:64:3d:e4:10:7e:7c:19:14:6c:
dd:0e:8e:3d:ed:94:77:3d:5a:ee:25:c1:04:9c:cd:
95:df:ab:65:87:c7:d5:5e:d7:0d:93:0f:be:bb:97:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EB:E4:B9:7B:A7:F6:FE:D3:52:3A:C2:26:3C:81:F3:1F:D5:07:2D
X509v3 Authority Key Identifier:
keyid:1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8b:27:86:f6:04:12:7e:9c:1f:24:ad:23:16:0a:16:ec:b4:
6a:b1:27:89:d1:89:d9:c3:32:39:85:40:4b:db:1d:04:49:5e:
84:82:9a:29:50:15:e2:a8:b2:12:65:d5:09:22:33:51:c0:55:
31:9a:a3:48:bc:bd:a2:02:2c:58:27:fd:70:5d:65:e7:84:96:
48:1e:96:b5:df:69:39:83:4f:f7:c2:b3:68:f4:1b:3e:df:fc:
a5:46:ee:02:c4:fc:de:7d:14:c9:69:e5:f4:d8:2f:eb:43:20:
64:d1:1a:79:3f:93:5c:91:bb:bc:71:ba:71:e5:50:b9:24:c8:
1b:e2:1d:67:d3:24:52:c0:4b:d2:44:35:50:22:b6:1a:5c:72:
39:80:46:4c:e0:f4:f4:04:ca:c6:e8:68:5d:7b:91:bb:9a:0b:
65:3d:0e:1a:4e:c7:50:75:16:74:31:ca:59:29:33:d9:95:f2:
0b:6f:7d:19:22:db:bb:5f:8f:15:8f:dd:d7:67:72:25:ba:92:
cf:31:d0:74:ba:29:a0:4c:f1:e2:55:72:95:7a:d2:94:4e:d7:
81:43:20:5c:00:95:68:4f:49:d7:6f:77:63:1c:2d:b2:ea:fb:
8b:fe:99:a3:dd:90:ef:c7:4b:9e:b8:b3:4e:16:70:b0:75:c9:
66:86:8d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:52:13 2026 by rpki-client