Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: ky4GVunNFuf1OcIAvvPtx2KuLFZhxj95a2MD8S4qgzc=
Subject key identifier: 1D:20:2C:4D:DE:B3:4B:E6:75:4B:02:4B:30:89:4E:A1:BB:36:02:2C
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 01A1144EB2FD9ABF649827F34CD971BA2950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 1403
Signing time: Wed 07 Oct 2026 03:01:04 +0000
Manifest this update: Wed 07 Oct 2026 03:01:04 +0000
Manifest next update: Thu 08 Oct 2026 03:01:04 +0000
Files and hashes: 1: 4fVpw4jDmLgLlVEJ14HcYjkhURc.roa (hash: OgxhauoTFqD32kP7fqq3sMCVlZur9FHQRJ/kNIVIhFQ=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: 5bYfOeDAdkpceF5R3gDJ5J0pVxUeYBfBpL9zxtUkoiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:4e:b2:fd:9a:bf:64:98:27:f3:4c:d9:71:ba:29:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Oct 7 03:01:04 2026 GMT
Not After : Oct 8 03:01:04 2026 GMT
Subject: CN=1d202c4ddeb34be6754b024b30894ea1bb36022c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:3e:2c:f4:5d:1d:16:1b:cd:2a:28:43:24:
73:78:a9:1c:71:53:9f:e8:ec:03:f7:fa:0d:81:6d:
02:29:a8:70:ff:7b:87:f7:23:b0:a6:a7:25:3d:0e:
cc:c1:41:11:d1:8f:cc:26:e6:3d:3b:32:d2:61:14:
49:82:54:05:88:02:ee:3b:54:f2:32:ad:d3:ec:78:
08:12:a1:18:9a:bb:78:3b:36:33:35:6a:7b:5d:7a:
60:8c:20:64:ef:ad:10:09:70:e1:6b:18:14:71:3e:
9e:0b:a7:6b:7d:f8:ff:52:ca:5c:f2:b1:ea:54:12:
e0:ec:40:ed:0a:7c:58:9e:4c:c8:cd:b7:bb:c9:a1:
9d:d4:c8:fd:df:8f:48:35:32:59:87:75:73:e3:20:
bc:3e:12:90:7f:14:b2:3f:5c:26:8d:52:b2:24:73:
2d:83:22:20:4c:6a:d5:45:d5:92:bb:99:80:21:64:
6a:ca:71:69:d8:c4:06:e4:29:03:9e:55:be:1e:f2:
e5:f4:88:71:5c:db:26:0c:d3:c4:29:9a:44:c7:9e:
37:52:93:7a:f9:38:9d:4d:c8:d6:ee:90:52:b0:59:
c7:3d:0c:1e:e2:3f:6f:60:83:24:3f:94:e2:d7:b5:
f8:f1:d8:0c:aa:b5:79:91:e0:6c:be:68:63:4f:57:
8b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:20:2C:4D:DE:B3:4B:E6:75:4B:02:4B:30:89:4E:A1:BB:36:02:2C
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:10:d2:30:71:c1:59:0c:17:6d:e9:a6:e1:1a:ca:63:7c:ee:
3a:96:2e:74:08:22:93:53:18:9c:b6:15:64:e5:2a:e5:f1:11:
23:08:1e:ee:65:d7:17:5f:fd:e9:0c:7b:8f:e8:2b:55:d3:ab:
1b:63:11:65:1d:d2:86:64:a1:dd:08:5a:8c:11:fb:62:52:58:
20:1c:1b:60:46:90:e8:bc:9b:99:d9:2c:b4:b0:8b:d4:3f:e1:
8b:ab:d6:7c:89:74:7c:89:cb:67:8f:4b:07:0b:be:6b:9e:1c:
59:f4:7c:47:28:45:a0:81:e6:23:a5:b0:73:08:8f:0f:ab:46:
6d:30:8c:0b:16:6d:72:f4:a2:22:d4:00:ad:f7:71:c1:bf:5b:
06:2e:b0:d6:0a:9b:b7:27:92:d2:69:d3:ab:43:43:79:85:28:
0f:71:9d:3c:1d:7d:af:18:f1:6a:ac:73:78:14:93:cb:fd:99:
eb:4e:4d:aa:e0:e5:ea:c2:b0:0a:99:84:38:c9:a3:e3:8d:40:
e8:f9:fa:c7:8d:e9:67:2b:a7:7a:67:bb:f6:b4:57:55:4d:be:
d1:d9:26:dd:d5:9d:8d:da:9b:9c:6d:04:15:5d:b2:6d:51:5f:
2b:91:77:b1:b1:d9:42:32:00:3e:32:9d:c6:67:0c:60:eb:b5:
90:ae:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:42:34 2026 by rpki-client