Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: S4sXhFfLLUkcsw020ujbedzkf0mIKt4hnrHKBSQV9TI=
Subject key identifier: BB:71:6B:18:D7:E9:33:0F:3F:25:5D:88:F2:BF:D0:7B:5A:0D:A1:80
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 01A0262058E8D0CD725ADFFFEC64FBE4DCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 128C
Signing time: Fri 21 Aug 2026 21:00:49 +0000
Manifest this update: Fri 21 Aug 2026 21:00:49 +0000
Manifest next update: Sat 22 Aug 2026 21:00:49 +0000
Files and hashes: 1: OmEUp-3epX_KUifqGg6OagsyLUI.roa (hash: wX4E8X9J3RZD1t+7aNfaKdNYFXjEujR+Op2mKH/JxaE=)
2: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: nb6HKs6TN61TYwYGKjB5bXSFljmzrRQ7GmUUTCGgdTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:20:58:e8:d0:cd:72:5a:df:ff:ec:64:fb:e4:dc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Aug 21 21:00:49 2026 GMT
Not After : Aug 22 21:00:49 2026 GMT
Subject: CN=bb716b18d7e9330f3f255d88f2bfd07b5a0da180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:8a:b0:85:88:aa:43:28:92:f7:bf:de:6e:
84:57:50:2a:27:67:60:08:e0:c6:d0:65:38:51:bc:
9c:c2:bf:91:86:c1:3b:e8:9a:34:d8:9a:1d:8d:fc:
5f:68:1a:03:c9:1c:fc:f9:a9:d2:62:a7:16:e0:95:
11:0b:6c:e8:7f:36:45:ce:64:0c:b1:3c:1c:54:c0:
25:30:66:4d:14:d2:35:c1:ae:5f:39:c6:ae:b2:e4:
07:dc:e0:48:5c:62:35:30:37:b6:9f:e4:b1:8f:de:
7c:e5:03:77:46:64:85:0e:b4:9d:ca:a2:96:c3:6a:
3b:d0:49:88:36:3a:c0:31:ed:4a:d2:94:f6:bc:87:
43:13:bd:18:2b:0c:d6:e5:35:1a:00:49:d7:c7:0d:
4a:ae:ed:cb:31:ab:d5:71:73:7f:fb:22:5b:ad:44:
e6:9e:1e:14:17:3b:e4:2d:c3:9a:41:39:ee:5a:5a:
b7:00:83:95:48:b4:ea:c4:de:18:20:60:2d:66:65:
36:61:99:26:46:6d:d2:5b:d8:63:78:a9:28:37:dd:
a3:92:6f:db:b3:2e:f8:43:f4:7a:c0:21:87:d7:3c:
10:0e:87:3e:8f:a7:2e:05:cf:00:c4:c5:a6:85:07:
59:fc:27:70:69:20:80:a8:67:57:df:c7:94:ab:79:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:71:6B:18:D7:E9:33:0F:3F:25:5D:88:F2:BF:D0:7B:5A:0D:A1:80
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:44:0e:59:f7:75:b8:c5:93:8f:95:e3:f8:ba:65:19:be:c5:
74:3c:7f:51:51:b6:3d:c6:a5:75:ef:bd:5f:43:7e:a6:a8:00:
a8:b8:d2:34:94:e6:47:16:a3:45:b0:b4:96:4d:3b:87:bf:2c:
41:f5:59:c2:e3:a9:02:67:58:34:80:19:4f:43:1c:35:39:67:
4d:db:05:a9:d2:9c:78:9b:f0:72:a2:f9:d1:b0:c3:f5:1b:36:
c3:0e:0e:43:da:ca:b0:e8:f1:9c:04:ba:90:38:77:0f:7b:78:
d2:9f:ca:40:ba:a9:ad:ec:07:77:83:f0:78:7b:fc:5a:86:85:
dc:63:cc:a7:ce:5e:9b:0c:50:bc:39:3c:a9:ae:85:80:72:dd:
35:20:63:97:54:24:eb:f5:2b:45:8c:7a:ca:fa:f8:9d:1b:9a:
b6:32:0a:71:a7:e9:88:33:71:a9:3a:5d:fe:1b:dc:96:0e:b8:
8f:f5:f7:76:b5:47:8c:1f:e2:77:e8:d8:20:67:9a:3a:bc:3e:
0e:8d:d8:e6:6f:83:f1:05:a0:d9:a8:4b:25:8f:c3:6e:1d:95:
55:93:c0:35:3f:23:87:82:26:73:02:87:ab:24:9b:e9:fe:52:
a8:6d:2f:2a:fd:68:c0:3f:6e:2d:a7:57:d0:f1:be:5b:fd:b9:
cf:d8:77:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:40 2026 by rpki-client