Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: YRjT3c4FgKqtYaZ4tbEOMj622tcpFPOpAauHGcdFZHM=
Subject key identifier: 67:9B:3E:7A:C9:9B:B9:87:B3:8C:6A:AC:0A:85:03:58:50:D0:25:F6
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 01A11FE549A7912EDAA849839BBF7D57223A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 1409
Signing time: Fri 09 Oct 2026 09:01:22 +0000
Manifest this update: Fri 09 Oct 2026 09:01:22 +0000
Manifest next update: Sat 10 Oct 2026 09:01:22 +0000
Files and hashes: 1: 4fVpw4jDmLgLlVEJ14HcYjkhURc.roa (hash: OgxhauoTFqD32kP7fqq3sMCVlZur9FHQRJ/kNIVIhFQ=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: TArig7ra+yQmId89si7UC4XtpvpbF8m/GYnClXfMt+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:e5:49:a7:91:2e:da:a8:49:83:9b:bf:7d:57:22:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Oct 9 09:01:22 2026 GMT
Not After : Oct 10 09:01:22 2026 GMT
Subject: CN=679b3e7ac99bb987b38c6aac0a85035850d025f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ef:23:55:6d:0f:fd:8f:06:0d:d8:21:0d:09:
94:b2:49:90:63:d1:42:e1:0f:f0:f7:af:bc:34:b7:
0e:5b:b7:c5:e5:48:3c:39:a9:50:74:50:17:d3:39:
52:58:07:e8:75:7a:4a:12:76:4d:58:3f:99:82:a1:
79:e4:af:b1:3c:76:42:61:97:f6:23:d9:3a:d4:a2:
ba:2d:10:cc:db:42:e8:b2:03:7d:80:0c:b9:0d:d1:
17:83:d0:e0:5b:93:a3:66:ac:7e:4b:56:9c:fc:8b:
b6:52:a2:41:a5:ce:e0:85:bc:eb:55:cb:0a:ad:48:
1c:97:2b:50:72:fc:56:82:ff:1e:c2:ff:53:bb:2a:
3e:99:1d:3c:97:50:66:c3:09:dd:b4:4f:c8:5d:d2:
e9:8f:54:e6:d8:74:6e:c1:24:b6:04:0e:d3:46:37:
d3:aa:1e:f6:d9:e2:fe:4a:e4:c1:29:ef:39:6e:a7:
50:cc:81:64:09:f8:3f:c5:23:6c:b0:ec:0d:e4:f5:
bf:17:fc:76:a8:ec:44:32:ff:70:2b:73:85:5f:2e:
e3:e1:5a:a8:7d:d5:78:22:ef:e6:75:48:6e:b6:01:
c6:04:e2:14:c1:87:9a:d9:41:1d:70:31:61:f1:0e:
eb:e6:95:0d:9c:c1:13:2a:dd:bc:cc:94:52:95:80:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9B:3E:7A:C9:9B:B9:87:B3:8C:6A:AC:0A:85:03:58:50:D0:25:F6
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:75:e9:b8:e9:19:fd:12:82:ba:6a:e7:74:ed:c2:98:d0:bc:
c6:b3:35:75:02:8c:8b:54:7b:f4:41:6a:6b:6d:a7:ae:92:26:
94:bc:35:a3:e6:fa:dd:8a:0d:b6:b8:94:f9:e0:85:e4:04:3f:
b4:87:33:6f:e6:ab:4d:32:35:d9:a0:04:b8:23:a1:52:8a:bd:
71:8a:e3:11:00:68:e4:ef:bb:a8:d5:db:36:6a:31:cd:00:fc:
99:ad:2c:22:c3:e5:cb:dc:dd:59:18:71:92:e8:17:95:bf:66:
a6:dd:5e:93:c3:16:f3:6e:c5:91:fe:2a:b7:4d:a6:34:30:87:
db:8a:0e:f8:60:76:c0:4b:f8:8e:54:63:8f:dd:14:30:4b:3d:
61:ba:7d:3a:96:f8:7e:0e:43:51:28:c2:6d:05:30:59:b9:2e:
03:73:6a:39:5a:85:fe:7c:a1:b8:62:9a:0c:86:7c:ea:49:f9:
ea:93:f9:0f:bc:20:4a:73:87:d0:bb:2e:ec:e6:08:29:77:f0:
fb:bf:a6:e7:cb:3e:14:1a:06:38:a0:fc:b0:44:17:1d:35:df:
b6:b1:0c:86:b1:5f:8f:47:31:45:ad:a7:4d:8d:cd:c4:b5:8c:
e5:aa:3b:9d:32:5b:67:c6:87:f1:19:2d:7a:9d:7e:0a:c2:15:
cd:b2:f9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:15:17 2026 by rpki-client