Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: AwCfKz39ZdPYmWfnUUKs+ge9xRi1Mh5+ritHJNSzwQ4=
Subject key identifier: E1:02:44:9A:E5:CB:7A:BC:D1:35:30:A9:DA:14:86:D8:30:7D:85:86
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 01A06EA750EF605D9D4A89433A112640BE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 0AF5
Signing time: Fri 04 Sep 2026 23:00:54 +0000
Manifest this update: Fri 04 Sep 2026 23:00:54 +0000
Manifest next update: Sat 05 Sep 2026 23:00:54 +0000
Files and hashes: 1: 1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa (hash: He4PUZhKvLvJbADEv84xs1x0RYoT7WY7P6/fpECXwDc=)
2: FkErPbDIeaRtvt2mbo2Rn3cHaTE.roa (hash: Udc4j3pbjPbQNDOUkwyNVr+rebw3Mlt0Hcd+vSG/cyg=)
3: GUhp8Wvci_j7T4kmVTXcfm-wQGw.roa (hash: sCSjIJ+mAkndBqHerekCSW8OY51YrH4HeTZcaJ0ddlk=)
4: Lx10w8QEiPDY7QbmkKm1WqjMKzY.roa (hash: 2Jg8RPIFYFJg9gr44bQNGOwxTHbO7QCXzzpqCpKGJY4=)
5: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: Ggf5ChjyNqMZl8D57EvJbt8wocteV/I2lOZlZkx3sI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:50:ef:60:5d:9d:4a:89:43:3a:11:26:40:be:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Sep 4 23:00:54 2026 GMT
Not After : Sep 5 23:00:54 2026 GMT
Subject: CN=e102449ae5cb7abcd13530a9da1486d8307d8586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:67:72:a2:c1:96:28:14:84:e7:08:c9:30:
bb:2e:0c:4f:a0:74:3d:ec:71:93:d3:64:7f:31:86:
96:ed:e4:f3:0d:31:71:23:af:9e:a2:a4:fa:c9:67:
f9:68:58:19:a5:4e:8a:25:b9:a6:3b:a0:fb:33:35:
b2:a4:b7:52:3a:1d:1d:7a:6e:e2:e9:79:4f:0a:49:
6a:e4:9e:d1:7e:13:55:a9:94:f2:78:1c:0b:9a:05:
14:55:86:a2:ed:b1:0b:59:79:0d:00:29:de:40:f9:
15:2f:7b:3f:93:6d:5c:bb:95:83:54:77:51:b5:ff:
18:ce:66:76:f9:49:64:a8:22:5d:7e:ee:8b:6f:19:
37:3a:bf:b3:af:ca:e9:b3:c0:7b:10:61:e6:a1:62:
f1:7e:fc:a9:28:7f:e3:a0:be:56:7e:39:fb:cd:ea:
4f:57:a9:20:d0:7e:b3:3e:b9:9e:b2:fc:50:6a:3a:
35:56:d9:88:72:a2:e5:71:c3:5b:72:c7:42:31:83:
b1:68:5b:95:52:d3:1c:c7:ed:89:8a:a0:1e:76:ce:
b6:70:f2:2e:20:0f:95:27:e6:62:af:09:4a:cc:e1:
a9:aa:0e:c1:a5:11:cd:7c:a5:0a:82:7b:0e:be:18:
5f:d3:90:b3:5d:84:7e:e2:40:a1:a7:5e:90:1e:df:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:02:44:9A:E5:CB:7A:BC:D1:35:30:A9:DA:14:86:D8:30:7D:85:86
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:67:c7:80:e2:e2:e4:3e:10:a1:d5:f8:75:2b:de:82:49:4f:
3b:39:de:10:1f:75:8d:ae:f8:d3:7c:8b:7b:94:da:68:c9:4f:
aa:b1:b2:0d:63:b1:b2:05:de:55:75:3a:d2:0c:f2:73:2e:ad:
7d:9d:51:7b:17:63:fa:8f:f2:d1:d7:c8:4d:a4:36:42:e3:83:
1e:3e:59:01:5e:d6:d9:12:6e:1d:3d:10:64:28:02:7a:00:de:
66:71:30:ee:f8:82:38:e1:d3:e8:88:23:07:ec:b3:ec:04:53:
be:ca:7a:c3:96:7b:67:d4:66:cc:74:41:37:63:2e:16:88:89:
83:27:26:91:59:b3:98:da:c3:6e:d0:1d:2c:e2:8b:c3:85:be:
81:82:44:30:71:6e:ce:98:5a:c1:d5:ed:d7:fb:1f:b7:95:0f:
c9:24:be:32:7d:bf:bd:31:10:37:7c:8a:2a:ca:c3:0b:a2:ff:
3f:17:c5:66:4d:c6:6f:14:37:b5:99:99:ad:20:5c:27:a7:0a:
2d:16:36:cc:5a:75:8a:f9:e0:c9:06:54:d7:28:53:25:e2:0c:
e4:98:1d:33:4d:83:02:0e:51:47:8e:bf:a8:05:89:e8:81:2f:
22:d9:bc:7b:81:e8:fb:a1:8f:64:9d:4c:2a:c5:28:9d:4e:83:
e3:6c:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:26 2026 by rpki-client