
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: 8/KvYMVgxBd6bCPCLCnI0+6qg1/RZ9THGa3ZqT2+H9A=
Subject key identifier: C5:38:81:FA:18:AD:4B:6D:ED:18:6D:E9:E5:F4:A5:49:6F:C9:98:53
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 01A08D1F9D10A2D975385AE1F38CF11424F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0FC0
Signing time: Thu 10 Sep 2026 21:00:54 +0000
Manifest this update: Thu 10 Sep 2026 21:00:54 +0000
Manifest next update: Fri 11 Sep 2026 21:00:54 +0000
Files and hashes: 1: ILRt9LkKcLV8zTDhe4daBlelpbE.roa (hash: NtW+TS7Xs6SFuc4EVBUAJ27kGuxkzyU+HkBhm6grJWo=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: NZRnWw7NwWe7oZkgBmGoQQKrVRHS0KBO8TXo0AvC0NM=)
3: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (hash: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs=)
4: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (hash: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:9d:10:a2:d9:75:38:5a:e1:f3:8c:f1:14:24:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Sep 10 21:00:54 2026 GMT
Not After : Sep 11 21:00:54 2026 GMT
Subject: CN=c53881fa18ad4b6ded186de9e5f4a5496fc99853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:a4:5c:f1:94:5a:e8:45:8a:84:c6:34:f0:
5e:ff:a5:6c:a1:39:f8:87:27:48:6a:c1:09:1e:b1:
1c:d9:79:f9:85:4b:84:20:3c:36:6c:f9:35:0f:b1:
f7:9d:e5:f4:09:7c:0f:12:df:82:27:b8:9e:55:e6:
41:98:34:1d:55:08:cc:3a:df:9a:2d:80:72:e2:77:
6a:07:37:5a:f3:62:d5:03:5d:69:36:f7:9b:ae:b2:
ed:64:bb:93:e8:6e:26:d8:6f:a5:ea:97:17:0e:b3:
a0:9b:8e:f0:60:dc:25:9b:a8:01:be:04:61:99:c6:
a8:49:40:5f:fd:d5:1d:ab:84:d6:6b:88:8d:24:8a:
b8:0c:fd:68:85:61:07:4d:9c:d3:8e:89:97:33:c9:
38:6d:72:1d:c8:e0:9a:ec:e4:92:8e:d8:90:45:43:
53:a6:de:d6:c0:20:d2:e2:01:dd:d6:31:b2:c3:77:
bc:7c:ab:6a:07:c1:ed:3a:8e:bf:1e:f0:0c:66:4f:
1e:eb:d2:7e:8a:14:d4:d9:1c:eb:ee:09:6b:69:f1:
8b:c0:97:38:34:64:99:af:02:58:02:11:f0:64:c7:
66:85:80:92:ed:ea:07:ec:74:ca:64:28:27:95:b2:
b1:ce:3d:e6:74:ed:80:67:76:a5:0d:8e:5e:03:76:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:38:81:FA:18:AD:4B:6D:ED:18:6D:E9:E5:F4:A5:49:6F:C9:98:53
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:62:27:40:ff:91:e1:3f:7a:d2:c4:5d:d9:65:bc:e2:a9:73:
60:71:3a:64:71:56:80:5b:03:ea:ce:e5:e7:6a:8c:8c:fd:84:
ca:c3:d0:1b:ef:13:cb:1e:ad:81:2b:47:06:e9:3d:1f:0c:80:
63:5d:55:b9:ab:1a:b3:a8:5a:b2:50:83:79:cb:3d:a0:25:d5:
d8:7d:02:9d:cb:4e:3c:d2:92:a0:7f:00:5f:a8:9f:5d:2a:6e:
58:2a:a1:bd:d7:08:42:36:ce:37:a0:29:ca:42:f6:cf:67:b5:
31:88:56:23:41:d5:8d:92:1f:f9:d9:ef:e8:ec:85:6f:42:34:
e1:13:ef:66:fc:45:e5:fb:57:5b:2c:20:11:34:04:77:97:6b:
3a:63:26:ef:27:f3:75:c1:60:6b:74:39:c9:2d:b1:d9:11:2f:
de:36:ca:35:26:c2:52:a6:12:63:ee:d0:04:48:1b:43:7a:9c:
c4:50:9f:28:ff:ac:22:98:78:61:32:af:2a:dc:c7:9e:47:5a:
4f:94:71:3f:f7:58:75:7c:4f:c4:f4:1f:3b:63:d4:96:f0:33:
5a:91:66:1b:5d:cc:7a:c7:e2:18:f1:2b:39:c0:b5:6d:96:19:
f2:1a:04:4a:40:35:05:90:b2:19:21:e0:34:76:70:18:d2:4a:
d3:b8:31:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:06:00 2026 by rpki-client