Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier: hlY9hmqhPcnKurMQ6lHylz2ltskjVY4cxFRrcJko4F8=
Subject key identifier: 72:27:C3:D0:AC:8D:2C:41:7A:1C:FE:51:ED:50:8E:4A:84:54:9E:88
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 01A088D4B9B7BDB7FA2870D17CB962D08466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number: 1609
Signing time: Thu 10 Sep 2026 01:00:37 +0000
Manifest this update: Thu 10 Sep 2026 01:00:37 +0000
Manifest next update: Fri 11 Sep 2026 01:00:37 +0000
Files and hashes: 1: HTwlYLS_ffwhQcdIe5ndzskreto.roa (hash: 2KCaWvsbTh5/gdngs8HmHbk57EMiFOhMngXsbQP11o0=)
2: a4zBtMFZYByhLbfrS1dLgNWkKck.roa (hash: dYhiBJ/AxN48Rl+cu3HQdPVxUF/dVcAsWXYAXFUPJcE=)
3: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: qeTGQav/ISXMOnBKB8vM4pRpU4pg3pyA7y17dsQJg5Q=)
4: xSQW2sggbgbxw6ad1ltpXUi4AL0.roa (hash: TfP2oPkLUpfY+mHh6+HX4amHLmgM458P4qEzEj5WmsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d4:b9:b7:bd:b7:fa:28:70:d1:7c:b9:62:d0:84:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Sep 10 01:00:37 2026 GMT
Not After : Sep 11 01:00:37 2026 GMT
Subject: CN=7227c3d0ac8d2c417a1cfe51ed508e4a84549e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:ac:1c:0b:7b:7d:70:bd:ad:88:9c:df:e2:
68:6b:8e:22:27:60:cc:93:86:f8:ca:e9:9c:88:35:
24:91:c5:3d:84:30:39:86:0e:e6:1a:86:71:31:3b:
be:9e:27:0c:7f:df:af:72:5c:ec:49:9e:8f:b0:f2:
44:54:f2:8b:5f:a0:cd:15:54:a7:34:4f:e2:ac:0b:
ee:b3:fb:09:de:16:f1:1a:7e:d8:61:46:db:a7:1e:
25:30:49:f2:13:34:a8:d9:e5:65:58:28:cf:e8:40:
3a:af:27:d6:f9:a8:b0:39:b5:df:eb:89:27:72:a2:
d9:61:b1:b3:e4:de:98:d7:2e:71:ca:72:a2:1e:4f:
6b:20:b0:f7:f3:47:10:2d:3e:a0:88:82:57:4e:6a:
d0:6c:de:c2:60:7a:a4:87:1e:27:6c:f3:49:84:ed:
a8:a1:f8:71:fe:db:5f:c9:83:30:c8:f7:08:02:a7:
56:c4:fe:1b:8f:c3:05:c4:99:30:50:e6:37:eb:cc:
1c:c0:d6:9a:3b:64:f3:01:49:25:cb:05:bc:c1:35:
62:24:cb:d2:20:fd:ac:37:ab:57:60:28:27:dd:c8:
17:80:85:00:9b:29:00:87:8f:78:cb:fc:e1:95:3f:
61:66:ae:a7:c9:41:02:22:ab:46:76:1c:83:16:74:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:27:C3:D0:AC:8D:2C:41:7A:1C:FE:51:ED:50:8E:4A:84:54:9E:88
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e9:a3:4d:6f:48:1d:a8:6d:3a:83:b2:a5:5a:cd:59:2e:33:
07:17:07:5e:c9:41:77:e1:f0:8f:cb:3f:d8:54:9e:99:bc:90:
96:84:38:8e:ef:8d:51:ee:31:09:d4:22:f2:06:0b:89:a2:31:
31:e9:da:ee:13:a4:b6:2d:35:42:3f:fd:2a:4f:33:4f:73:72:
93:63:cd:3a:cc:1d:3a:39:03:1e:70:e6:4d:0f:8b:98:41:42:
b1:50:8d:38:ff:a5:ea:c7:8a:da:bc:b6:1f:20:ad:0d:45:83:
3f:ac:1f:16:05:66:4f:4e:35:6a:eb:17:fd:1a:a9:eb:65:ab:
6d:10:06:25:20:c3:a6:16:0a:68:3a:c9:f3:72:49:bb:61:ce:
bf:ae:51:92:cf:1e:67:17:f1:31:c7:e3:40:a5:a9:e2:72:93:
d9:12:4a:d6:7c:10:cf:2b:96:3a:dc:0a:51:b1:f1:fc:42:0d:
d7:da:d6:e5:90:c5:95:95:f4:4a:22:ce:7b:d1:e8:56:c2:60:
f6:bb:1d:47:64:68:b4:6c:39:d2:a3:f6:fb:2c:e8:d9:fc:b5:
28:6c:da:bd:c6:04:a0:43:cd:1b:de:78:e5:81:c3:fd:00:12:
d0:b6:84:94:1f:e7:2f:6a:48:ab:f1:7c:c1:04:6c:87:f1:b8:
83:a5:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:26:44 2026 by rpki-client