Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft (raw, json)
Hash identifier: S7Upq6gciR+km0ken7ltG3HiXfLV36V+z64QjW083OI=
Subject key identifier: 31:50:C9:4C:E9:17:F2:2D:F3:67:2C:24:A7:25:81:BB:33:7F:47:ED
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 01A17E4EFE9171C43C44F06969A883DCB154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
Manifest number: 0D56
Signing time: Tue 27 Oct 2026 17:01:08 +0000
Manifest this update: Tue 27 Oct 2026 17:01:08 +0000
Manifest next update: Wed 28 Oct 2026 17:01:08 +0000
Files and hashes: 1: U967gx6zU2ewhEleCWFHT_7A_9o.roa (hash: rEcp4qFupVQgVYmsA8hG1Q/G6+z2CIRB0Mx5vxsYxf0=)
2: h-KmrUFQix2mPVIgPxijrxKClGw.roa (hash: fc8hHRpimWi4M001kIYlHNuSFZw5gckGt8QS97+VBbM=)
3: hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl (hash: AjgUCEr0tWCM3v70hM6YKH6KlndkqPy0tQI71u3v/Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4e:fe:91:71:c4:3c:44:f0:69:69:a8:83:dc:b1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Oct 27 17:01:08 2026 GMT
Not After : Oct 28 17:01:08 2026 GMT
Subject: CN=3150c94ce917f22df3672c24a72581bb337f47ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:14:b2:29:9a:54:6b:1e:f2:4a:61:c7:bc:
3d:e8:3f:d3:e1:c6:72:0c:b5:ff:34:78:09:a5:ec:
b6:f1:1c:9c:19:25:e1:61:a4:20:f5:5a:1f:d5:6c:
c8:85:93:37:ae:b4:55:9a:11:40:fe:50:6d:1c:2e:
35:8a:48:b0:19:23:f7:20:40:7a:fd:60:71:2f:eb:
82:fa:f8:f8:ae:8d:e4:a4:cd:11:0c:58:fb:b2:18:
0b:97:b5:be:26:91:76:45:91:77:77:7f:27:9f:b9:
c5:4a:59:0b:89:14:09:f6:b3:ba:3f:93:2a:41:5f:
1b:1e:80:2c:39:9d:ef:d7:0d:85:8c:8b:13:3e:b7:
e8:a4:1c:1c:a1:42:59:94:00:f9:dd:40:c8:5b:32:
b1:e4:bd:b9:fa:24:c5:05:de:ec:7e:4f:ef:cf:b2:
bc:8f:68:2c:2f:bc:c8:bd:c4:c6:27:53:80:0b:71:
df:69:04:76:a4:b4:86:20:bf:ec:7c:e9:7e:5c:1c:
96:55:8b:f3:75:d6:8c:48:87:a3:51:cf:e3:dc:40:
05:0e:89:54:8e:b2:2b:20:70:c2:c3:53:53:60:a9:
3c:7c:9f:46:2a:ce:8c:06:b9:bb:d6:36:cb:49:fd:
a5:11:34:b6:4c:8c:05:f8:f3:4f:8b:e9:f6:da:a3:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:50:C9:4C:E9:17:F2:2D:F3:67:2C:24:A7:25:81:BB:33:7F:47:ED
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:6d:63:71:4e:2e:79:51:25:bf:1f:8e:25:85:48:b5:02:3c:
cc:27:f1:28:12:c3:37:dc:2b:a8:63:e3:a4:44:d2:36:a6:3a:
9e:d3:e6:38:ce:1f:05:91:50:87:97:f9:f0:9b:5f:b9:32:ba:
ea:ef:fc:22:d7:c0:a4:9b:9b:2d:ba:24:e1:0e:43:14:c3:58:
c9:df:c7:cc:d8:26:96:83:88:f6:d7:52:71:dc:a9:ea:e6:98:
28:b5:f7:23:98:61:a6:6c:f4:33:16:90:c2:a9:c9:e7:5e:50:
45:03:c8:74:a2:0d:e1:4d:1e:99:94:e5:87:07:15:81:56:89:
97:36:72:99:68:5c:15:e1:3b:09:16:0e:ad:dd:83:11:f1:9b:
82:fc:3c:f9:4b:5a:f6:ae:21:21:c8:f2:c4:5a:96:5a:7b:9e:
57:d5:63:cf:54:b6:a8:56:fd:44:06:5b:c1:2c:23:61:cf:bd:
e7:22:6b:5c:14:8e:4c:89:ab:21:3d:99:6e:3a:e8:06:ad:fa:
5c:8b:76:f4:e5:64:1a:3d:5f:15:58:1a:ef:91:14:1c:ba:d6:
22:b1:df:85:ca:8b:b5:12:6b:9c:b7:4f:b3:47:85:00:a6:fb:
30:99:ec:9b:37:22:b9:30:70:ae:7f:1d:0e:d4:a9:8f:b7:88:
34:60:02:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:42:53 2026 by rpki-client