Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: FtQT0qpxm1AY9WgNMAEnng5i04vGZpmQEEOUC/73HHk=
Subject key identifier: CF:A2:27:51:DF:DF:1D:E0:99:89:F5:BA:E4:1E:8D:24:F4:04:C2:E0
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 01A17BF290486A509CC3A4F9FDAD9E5A4C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 176E
Signing time: Tue 27 Oct 2026 06:00:56 +0000
Manifest this update: Tue 27 Oct 2026 06:00:56 +0000
Manifest next update: Wed 28 Oct 2026 06:00:56 +0000
Files and hashes: 1: blJ-TZh-82zY8BmhlGXDYcWlXEM.roa (hash: Fd7qkgfgnAB5yGlcwTOLNMtcHfXu1EK11nyoGzaI4T8=)
2: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: itgDA611TMT2cqhSn9Yu6lnFMSoZrWgOI8jQmPUZVEM=)
3: uGcdeOeH2FGE8oSm_emFftbBDBI.roa (hash: K6Jsrsz0fx7XMWqDVYW8cVOMG7U2AmGR+nHljnd4RYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:90:48:6a:50:9c:c3:a4:f9:fd:ad:9e:5a:4c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: Oct 27 06:00:56 2026 GMT
Not After : Oct 28 06:00:56 2026 GMT
Subject: CN=cfa22751dfdf1de09989f5bae41e8d24f404c2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:5a:fe:97:2e:3e:33:28:42:7a:da:50:d2:
b2:0b:3c:8d:14:c6:ba:81:26:44:39:58:ab:46:8c:
8f:68:dd:78:c8:ec:a7:92:03:cc:7f:9c:db:18:1d:
8c:e0:55:d2:ed:84:58:c3:83:2d:1a:94:38:46:0e:
9f:67:48:dc:ad:6d:43:86:5d:23:a1:5f:23:0f:d0:
fe:4c:92:1c:69:8e:99:e5:ed:84:0b:20:3a:fe:5e:
4f:97:9e:25:4c:fd:58:33:d3:8c:c3:91:9e:b5:dd:
e7:68:14:04:55:8b:3c:e0:55:2d:3c:fb:3c:6d:f9:
53:b8:e5:85:9b:ec:4f:34:85:fe:84:80:34:4c:47:
b2:bd:72:a3:97:49:b9:fa:03:29:a0:92:a0:f9:4f:
b4:38:18:da:37:b5:2a:53:64:03:4c:c1:9a:a5:33:
26:a3:24:d9:ad:94:72:15:f2:5a:d6:d0:f2:c9:e8:
af:6b:9d:2f:3a:be:85:a6:fd:47:45:a6:6b:8c:ca:
a2:ca:04:13:e8:2f:59:f2:fa:eb:25:2f:78:41:c3:
26:0f:8b:4a:1e:25:85:2f:79:25:e4:7f:1a:9c:94:
e3:29:91:42:62:35:a3:72:0d:0e:b9:a6:fe:2f:6a:
98:1f:86:2f:bf:29:e6:9b:c2:ca:18:4a:b3:13:c7:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A2:27:51:DF:DF:1D:E0:99:89:F5:BA:E4:1E:8D:24:F4:04:C2:E0
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:32:06:13:38:09:86:86:d9:92:c6:5b:93:89:2b:5a:fe:f2:
fc:e7:da:88:8c:03:93:9c:f7:14:b5:cc:e8:a2:58:38:4d:56:
46:b4:d0:96:4f:ac:3f:9d:fc:22:60:c6:fc:53:df:61:ef:45:
0d:1f:9b:a1:31:c4:6d:34:43:c8:88:ae:e4:eb:01:4b:95:42:
92:14:ca:5b:27:99:72:6f:67:e4:b0:98:ea:b9:42:02:37:1e:
70:86:22:c5:25:3e:b1:b4:c9:89:9c:e4:cd:49:5b:bd:20:35:
4a:24:0d:96:7e:30:a9:6d:dc:d5:4a:6a:f9:51:fb:11:b2:ad:
ff:be:8d:9f:c7:e5:32:51:6b:65:2f:cc:10:01:14:e0:4f:cb:
c5:34:d3:05:7a:3b:cd:43:f9:37:9f:b7:e5:c2:0e:a9:4e:ee:
a3:0c:52:7e:8a:82:e5:10:ad:bc:d1:6e:bd:b2:01:06:a1:aa:
21:44:3f:02:20:8a:7c:8a:f2:cb:0d:25:c7:7d:db:7d:18:4c:
b2:26:df:ba:70:71:11:83:aa:9f:8a:da:0f:54:8f:02:13:b5:
28:09:b6:b0:a7:e3:47:e7:9c:a2:a9:d0:94:7e:84:47:82:2e:
5b:c9:64:f3:fd:ea:95:6b:0f:86:e7:7b:9d:76:9d:3d:74:99:
d5:1c:c7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:59:27 2026 by rpki-client