Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
File: hAKSSGHLwIjGVahyU1qQMQige_E.mft (raw, json)
Hash identifier: 2zJbhYx9ezkzSW85iUwRgDIyiGhfJdsUa7uzBLAQ2Zg=
Subject key identifier: A2:8F:13:D9:A1:F3:F7:94:11:4B:67:71:13:E8:A8:0D:AA:68:79:5B
Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Certificate issuer: /CN=8402924861cbc088c655a872535a903108a07bf1
Certificate serial: 01A159D4AA9B5F7434FDBC48DD34A42800BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
Manifest number: 16EC
Signing time: Tue 20 Oct 2026 15:01:11 +0000
Manifest this update: Tue 20 Oct 2026 15:01:11 +0000
Manifest next update: Wed 21 Oct 2026 15:01:11 +0000
Files and hashes: 1: EApMV8-N-zmao3CAo-NQpD3Lz2A.roa (hash: aR54mqSnxFgOPc79I9yN0jBUTDGkCFj+YEV/eOtu4c4=)
2: hAKSSGHLwIjGVahyU1qQMQige_E.crl (hash: 27fR4SgrkIxeEALOIyk2/T2tFUAzzl+E6wEIj1wh62Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:d4:aa:9b:5f:74:34:fd:bc:48:dd:34:a4:28:00:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8402924861cbc088c655a872535a903108a07bf1
Validity
Not Before: Oct 20 15:01:11 2026 GMT
Not After : Oct 21 15:01:11 2026 GMT
Subject: CN=a28f13d9a1f3f794114b677113e8a80daa68795b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:ac:23:5c:74:28:7c:7b:23:d0:7e:bb:e2:
7c:ff:e7:88:2c:07:18:97:b0:c6:4c:a8:17:bb:60:
5f:f6:76:a0:60:6f:ce:28:e3:8b:c9:fd:ae:42:10:
c8:4b:ef:47:5b:95:77:c6:c9:cd:e5:79:a5:3b:f0:
b8:67:27:1d:e6:4c:b6:5a:5c:6b:60:32:34:db:ca:
6f:6e:7a:cd:d5:7f:15:ed:ac:b7:13:a7:3d:81:a0:
8b:44:a4:77:8d:63:19:25:18:4c:03:1e:7b:2c:46:
42:fd:5c:6a:14:7c:07:87:98:1c:8b:d1:09:1b:94:
f8:87:4d:a6:18:1c:86:3c:b9:b3:50:23:e4:40:d2:
bd:d2:b9:b3:c3:5c:20:13:aa:36:d7:c3:46:dd:5f:
04:6a:98:56:96:66:be:3c:27:06:87:5d:b8:a5:96:
fc:9b:2c:32:e0:27:bc:28:06:3e:2e:24:37:15:e0:
30:b3:bc:20:34:f2:a6:67:b3:d1:22:bc:2c:2f:31:
ed:19:20:71:71:43:59:e7:79:6c:77:11:ed:b7:07:
44:c8:11:a5:c9:a5:2b:51:0e:df:73:c4:c8:c6:d2:
c0:af:7d:fa:b1:25:00:f0:24:de:50:75:79:de:87:
9c:01:c1:f2:e6:81:cc:a9:04:02:17:ad:35:43:8d:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:13:D9:A1:F3:F7:94:11:4B:67:71:13:E8:A8:0D:AA:68:79:5B
X509v3 Authority Key Identifier:
keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a7:62:9b:36:db:9f:a6:29:3b:60:61:81:05:70:b8:1a:0e:
9e:5e:a7:3d:9d:50:28:26:e0:8f:09:ad:36:e5:ac:14:bf:44:
00:13:5d:7b:fc:71:5c:82:05:c1:50:f4:22:cb:42:1d:11:21:
6d:25:b2:c5:e0:40:c2:06:c8:5d:5b:cc:f3:9b:e2:20:5a:ea:
70:05:2a:38:dd:e7:42:6e:0c:48:e5:a2:ea:b6:d4:7b:6d:d8:
a0:f0:fc:e2:fd:d3:4f:58:1b:5b:7f:93:7d:31:5e:5c:79:51:
be:c4:93:ce:9a:f9:94:29:2b:a4:76:ff:a9:0d:3f:41:d6:14:
d3:47:3b:c0:52:be:04:a8:bd:7c:a5:68:bb:cc:a5:43:f5:ab:
fc:13:07:14:ed:01:95:72:34:6a:68:75:d7:13:d6:c6:bf:54:
95:c0:f5:fb:51:11:5e:3c:3d:cf:1c:9b:e9:27:04:93:81:43:
f0:84:93:39:c9:81:47:88:1a:74:fb:67:c5:bd:b0:51:a3:23:
e5:c6:c2:12:88:50:98:3a:87:03:be:d0:6d:cd:4d:1b:67:e3:
c8:5d:30:b2:b2:22:bb:01:4a:57:39:f6:24:70:ee:0a:89:96:
c7:b1:d2:4a:84:76:58:26:8b:a5:21:f4:c2:91:82:bd:05:26:
0a:4f:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:19:38 2026 by rpki-client