Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
File: D_HA6RHM5MRT_sKxaPbBPTbg34U.mft (raw, json)
Hash identifier: 6Hb4kKbbirNXaWQ83jtUm7bFS17Xhvptz9rpjzfeF3k=
Subject key identifier: 50:A5:F6:60:22:21:77:60:C0:46:8E:94:E2:A8:A2:1B:4D:AE:0B:FD
Authority key identifier: 0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
Certificate issuer: /CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Certificate serial: 01A15365030F2088F791BE9435FF4A18E962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
Manifest number: 02C7
Signing time: Mon 19 Oct 2026 09:01:31 +0000
Manifest this update: Mon 19 Oct 2026 09:01:31 +0000
Manifest next update: Tue 20 Oct 2026 09:01:31 +0000
Files and hashes: 1: A2gg-MX124Lpmk4q6amGH364pI8.roa (hash: vW20LJAGKrZU5294D/w3GbyCDoxlRHd2AtS8gCcCOJ4=)
2: D_HA6RHM5MRT_sKxaPbBPTbg34U.crl (hash: HE4qMobX4qMl/Ole/RjK1hp6SoqRY8ZR9fXim/tjLG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:65:03:0f:20:88:f7:91:be:94:35:ff:4a:18:e9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff1c0e911cce4c453fec2b168f6c13d36e0df85
Validity
Not Before: Oct 19 09:01:31 2026 GMT
Not After : Oct 20 09:01:31 2026 GMT
Subject: CN=50a5f66022217760c0468e94e2a8a21b4dae0bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:f0:93:44:4b:4b:13:8c:8a:be:01:8f:71:
66:bd:f3:9c:4d:49:ab:d2:4b:b4:ab:3b:88:55:72:
e9:c4:92:54:05:d7:c2:2e:61:36:f6:9a:b1:9e:cc:
bc:a5:ac:ba:12:1b:8c:c6:2a:5e:28:30:f9:81:d7:
9e:37:8b:16:bc:6f:ed:dc:98:46:60:c0:ee:ba:7b:
ea:86:14:0c:fa:42:c1:7b:4b:cf:97:43:0e:e8:e8:
39:e1:8c:c0:82:f6:b4:e1:61:f8:0d:a1:de:c3:82:
61:60:fd:18:59:b5:2f:0b:34:cc:08:7d:6b:8c:bf:
ff:a1:48:d5:3a:3a:22:61:83:9b:8c:1f:50:cc:53:
68:ad:b9:21:3c:ae:b0:6f:ac:7e:63:58:ae:a8:4f:
17:26:8c:a6:96:46:63:a8:de:97:1a:ce:52:1f:ee:
c9:58:63:13:23:3f:7f:2a:fc:14:04:f3:03:63:0e:
fd:c3:c5:78:3e:02:d5:51:0f:ee:b1:ee:a3:0f:d2:
9b:50:85:a7:98:b5:98:1f:0a:71:60:af:f8:a8:a7:
5e:6a:97:d9:c0:ca:92:35:e9:16:97:73:4e:50:b3:
cc:39:bc:08:d9:4c:a3:b0:31:0d:65:45:c7:13:47:
8e:81:96:25:de:bc:91:80:86:3d:94:db:96:c9:50:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A5:F6:60:22:21:77:60:C0:46:8E:94:E2:A8:A2:1B:4D:AE:0B:FD
X509v3 Authority Key Identifier:
keyid:0F:F1:C0:E9:11:CC:E4:C4:53:FE:C2:B1:68:F6:C1:3D:36:E0:DF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_HA6RHM5MRT_sKxaPbBPTbg34U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7d2e51-22d2-461a-aa2e-79d13faab62c/1/D_HA6RHM5MRT_sKxaPbBPTbg34U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7b:7f:a6:24:3b:6f:bf:44:50:66:a7:84:79:65:0d:82:af:
03:10:94:27:c1:42:56:3c:3d:3c:42:ff:35:18:a5:37:e8:6b:
19:be:ef:8b:f8:a7:fe:12:f7:03:cd:6f:87:bc:6c:39:f7:38:
ea:d2:b3:96:e0:82:4a:99:cf:51:0a:b0:d7:fd:85:5a:78:5a:
c7:dd:a4:8a:1f:26:72:2a:5b:3b:eb:67:a2:2d:a7:cc:51:0d:
39:da:21:f9:0d:dc:a9:dc:43:62:2c:5c:15:6e:65:4c:dc:42:
4a:10:10:2e:7d:a6:28:a9:e5:73:7b:19:e1:2f:31:24:c0:b2:
0f:c5:94:2f:f6:df:fb:80:4e:ac:6f:3f:a7:fb:d5:76:e8:2f:
38:3b:06:93:5d:1d:92:b7:0b:80:2e:75:04:ec:92:a3:24:08:
da:82:8d:68:ce:04:56:af:54:f7:e5:c0:3e:76:00:3d:b0:c2:
56:81:19:ce:bc:f2:f7:de:b4:7a:a9:d3:96:52:40:96:50:4d:
7e:8a:da:ef:ec:55:a4:43:7d:3a:03:37:0b:90:be:43:7b:43:
f2:64:05:11:bb:2d:50:2a:e1:cb:1c:cd:bb:73:b9:22:08:63:
53:41:31:4c:96:fd:17:d5:f1:8e:d7:41:b3:0d:0f:c2:32:ce:
69:4e:cf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 16:53:32 2026 by rpki-client