Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
File: H-AtvuYsmPAfIPR3DRakf3mr4yw.mft (raw, json)
Hash identifier: GCyL+VTyyoZsFW7wEK5aPwMigrDZEsgra+HsqnQKu7M=
Subject key identifier: 18:02:C5:70:81:DE:33:A7:9A:3F:5D:86:7F:F2:AF:5A:08:F0:F3:4F
Authority key identifier: 1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
Certificate issuer: /CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Certificate serial: 01A08A8CE485304ED27256AC8C3BF6F3D72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 09:01:24 +0000
Manifest this update: Thu 10 Sep 2026 09:01:24 +0000
Manifest next update: Fri 11 Sep 2026 09:01:24 +0000
Files and hashes: 1: 6je334E6vS-LEN70q2JQTnLcXnI.roa (hash: i6EQ3DO1huyRHpd1XLIGPiT060/8wv4RUfUtrI/3N/4=)
2: H-AtvuYsmPAfIPR3DRakf3mr4yw.crl (hash: oDwpmEov1TQmhoMwU8+K6lsbnXh+yoa7pJA7Ezlis3E=)
3: SNRyT-psWpKwoGXfunZN_2dqMhE.roa (hash: bm+f2jYvd0y98N9DxFt8D+iBDNL+FFbwvDEiyUs3DUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:e4:85:30:4e:d2:72:56:ac:8c:3b:f6:f3:d7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Validity
Not Before: Sep 10 09:01:24 2026 GMT
Not After : Sep 11 09:01:24 2026 GMT
Subject: CN=1802c57081de33a79a3f5d867ff2af5a08f0f34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b9:92:9f:4d:3b:11:0a:0f:cb:32:b7:fc:2d:
c4:6f:dc:96:58:7d:2e:bd:e0:ee:34:7a:28:0c:35:
14:a5:29:51:a6:a8:cf:4a:9f:80:ad:1b:65:7b:de:
59:0a:c9:bf:38:97:1b:08:98:34:1b:e9:14:19:c4:
6a:58:15:f5:94:90:1d:d1:7b:db:32:a6:fe:57:0b:
3b:42:f0:ad:49:7d:ce:d0:37:39:ee:af:76:88:10:
11:ab:b0:b8:40:a7:06:dc:0b:db:00:c6:a0:49:52:
ae:b3:27:b0:f5:74:78:f9:c1:e3:0e:78:77:00:4a:
21:e2:22:91:8a:fc:c0:2c:a7:51:c3:86:c4:50:e2:
c7:56:67:30:40:3a:3b:7c:b5:b7:6a:0b:bf:19:5d:
b4:44:2b:24:fb:b9:77:c4:73:4a:f6:b4:49:31:a7:
47:08:d7:ac:47:37:b7:47:34:53:7a:27:48:e1:44:
d1:18:b2:a4:2f:dd:86:4a:b5:d7:7b:69:03:c7:c7:
99:b7:35:db:28:72:04:c6:ce:eb:55:1f:2b:56:9e:
e9:ff:8d:90:df:01:81:63:51:58:90:22:cc:e3:6c:
1c:15:85:8d:60:c3:a1:72:1a:d8:03:00:c6:65:32:
1a:c5:9c:9c:39:b0:fc:92:d8:da:b0:7a:aa:75:06:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:C5:70:81:DE:33:A7:9A:3F:5D:86:7F:F2:AF:5A:08:F0:F3:4F
X509v3 Authority Key Identifier:
keyid:1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6c:3b:32:d8:95:f3:09:b8:5a:b7:1b:8c:0f:30:4d:7b:e9:
52:71:f8:b2:14:5c:71:82:45:e2:da:69:85:be:df:d8:5b:b5:
6a:da:73:68:bd:dc:f4:44:89:e0:5c:d5:f6:2d:71:72:dd:a8:
a8:9e:e0:96:1a:85:2d:a5:b7:2a:eb:e3:23:9e:29:b4:1b:08:
5e:da:ad:bc:bb:27:67:68:92:35:13:e1:71:49:31:80:46:89:
16:a7:94:de:ba:bb:bb:18:24:04:a2:ca:db:9c:fb:dc:31:b1:
20:ee:22:d7:9e:1c:01:12:00:8f:0c:ac:eb:bb:28:d4:13:e1:
fe:cd:0e:ad:11:7d:06:1b:3f:e8:39:61:0f:10:eb:cd:20:74:
aa:f2:ff:1b:69:70:9e:23:e2:01:37:18:65:74:de:1a:4d:93:
d5:11:d3:c0:51:56:40:79:e0:80:ac:c7:f2:98:dc:ec:f3:49:
aa:13:11:6e:4f:05:ec:78:7b:33:82:39:74:b9:4a:2f:c5:8b:
08:ce:6e:7a:91:84:20:eb:22:76:3e:63:3a:d5:c5:de:aa:db:
d5:e3:a0:0e:b2:fe:3e:57:55:d5:e7:21:15:1b:4f:87:81:51:
7b:64:10:06:22:a2:97:09:eb:94:75:36:1a:ca:52:e2:9c:e0:
90:d6:a6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:13:47 2026 by rpki-client