Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
File: H_oFe7xNCbnGccQ_-W81wA3p-7s.mft (raw, json)
Hash identifier: xXOlVCGn33RXY9wnxS7KB8qwtEYEDg4XSs06csrU99w=
Subject key identifier: AB:B7:41:BE:2D:C1:73:AA:E9:32:CF:FA:01:84:30:51:46:13:27:EE
Authority key identifier: 1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
Certificate issuer: /CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Certificate serial: 01A169B527FD2B5E17C7EE4EF75450DC798C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
Manifest number: 016B
Signing time: Fri 23 Oct 2026 17:00:42 +0000
Manifest this update: Fri 23 Oct 2026 17:00:42 +0000
Manifest next update: Sat 24 Oct 2026 17:00:42 +0000
Files and hashes: 1: H_oFe7xNCbnGccQ_-W81wA3p-7s.crl (hash: K8BoN+UDv1utOlqilAr9J3pP8BkQUUj1NbW1Dl/vfis=)
2: TvRQaRsziqrRJCQCiUQYjyKVrn0.roa (hash: mrwUynV6T3tedBWfd3iohzz+A8WkbO6ygpgXbd4vXq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:b5:27:fd:2b:5e:17:c7:ee:4e:f7:54:50:dc:79:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Validity
Not Before: Oct 23 17:00:42 2026 GMT
Not After : Oct 24 17:00:42 2026 GMT
Subject: CN=abb741be2dc173aae932cffa01843051461327ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:df:ff:72:92:df:31:26:d8:d7:b2:52:db:
93:be:cf:25:d9:aa:82:15:e8:0f:54:9d:71:cc:b5:
50:23:fc:c8:54:84:2b:8f:e1:d7:a9:75:27:88:f7:
51:36:ff:1d:d5:6e:9d:4c:7a:a6:62:71:1a:57:c7:
0e:1b:bb:8c:7a:76:60:77:80:bb:71:f0:89:07:ea:
f5:59:d2:bf:cf:6e:36:ff:0f:13:c2:4f:68:24:99:
a2:06:5a:21:bf:40:92:aa:52:bd:cb:9c:8d:03:4a:
4b:55:18:31:8c:b1:83:18:5b:97:43:81:f5:dc:58:
20:e3:21:4e:13:03:a1:ba:d8:3a:dd:9d:0e:b2:df:
3c:3f:01:a6:73:13:53:ab:37:67:bd:f9:17:e8:a9:
60:1a:04:be:a4:fa:dd:8a:8b:5a:a4:be:90:77:a0:
70:e0:24:4a:07:ae:97:4f:98:3a:14:ab:22:91:c0:
4f:f0:58:44:f0:ab:0b:d8:37:e8:59:9c:ca:b7:ad:
73:bf:24:de:72:f5:6c:11:bc:aa:8c:e5:06:7e:18:
c6:64:e6:fd:f6:dd:56:ae:41:4e:00:6a:06:8f:41:
76:07:2b:95:c3:37:12:dd:a3:43:44:8d:dd:fd:f5:
98:27:ac:2a:c6:9d:07:33:7c:bf:e0:4d:9d:13:d5:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B7:41:BE:2D:C1:73:AA:E9:32:CF:FA:01:84:30:51:46:13:27:EE
X509v3 Authority Key Identifier:
keyid:1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1b:ab:7f:4e:71:84:e3:6b:a2:66:9f:3c:5b:6e:8a:e7:a1:
3b:51:d7:bb:ba:a6:f2:60:eb:4a:08:08:63:91:18:39:70:d2:
11:b1:c1:0c:ec:39:4a:47:62:77:d7:2b:14:a8:a9:77:8e:c5:
c9:98:e7:7c:78:b6:ba:e6:48:9e:da:50:2c:97:57:3b:d7:a0:
98:05:df:63:82:77:31:07:28:82:11:d6:8e:be:6f:30:cd:b2:
3c:0e:ec:49:c4:46:25:2d:5b:f9:f5:b2:61:1d:59:aa:37:7b:
8f:60:b8:22:1b:5b:a0:a6:00:55:b2:e1:9b:9e:be:06:ad:94:
38:a4:2b:64:5c:f0:9a:4b:e5:8b:2a:ae:4c:0e:cf:7a:b4:63:
61:11:26:6d:0f:bc:e0:12:8d:42:74:f2:32:b6:0f:d7:93:15:
97:6b:96:14:96:41:ba:1f:68:d6:11:ac:99:40:d2:c6:10:a5:
ff:62:d9:ce:42:89:8d:21:cd:b4:8f:85:7c:8b:60:10:ad:74:
cb:c1:51:ef:e1:19:c3:80:4c:c9:aa:2f:29:36:13:a4:aa:18:
e1:5d:8e:66:e9:53:27:9a:24:1f:21:47:97:64:99:f3:46:ba:
61:47:69:00:31:87:28:ec:93:b3:c8:14:19:bb:a4:ee:6a:99:
b3:ef:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:11:58 2026 by rpki-client