Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File: H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier: F0bEzZb6kMQBz1deatka9BjVHYZqQba3aUxT8+zhWpg=
Subject key identifier: 64:1E:FE:C4:5A:44:42:F3:AC:08:81:A9:12:48:C7:28:FF:08:89:18
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer: /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial: 01A08B9EFFC08D468F7BF31CF2DA85C8BD81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number: 1302
Signing time: Thu 10 Sep 2026 14:00:48 +0000
Manifest this update: Thu 10 Sep 2026 14:00:48 +0000
Manifest next update: Fri 11 Sep 2026 14:00:48 +0000
Files and hashes: 1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: IewxETN4OsEoMF40hFaICe2HZ5B90TwURTjmWzpMiLk=)
2: Vf77xukhBIpUTcfDdQGILMMSa4Q.roa (hash: tmWyKSyKboTPLB52PoBpJE8efgve3egkhQ+0cqtz0+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:ff:c0:8d:46:8f:7b:f3:1c:f2:da:85:c8:bd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Validity
Not Before: Sep 10 14:00:48 2026 GMT
Not After : Sep 11 14:00:48 2026 GMT
Subject: CN=641efec45a4442f3ac0881a91248c728ff088918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:01:5c:91:3b:01:e7:c4:09:39:9e:c8:95:
c4:54:13:71:da:88:2e:35:db:34:23:38:47:96:d3:
27:d4:6b:24:44:96:c6:e8:26:30:20:41:e6:82:66:
16:91:4a:64:32:f5:bc:2e:a9:6f:fb:7c:df:46:30:
cf:74:13:fa:cf:6d:37:ff:c8:ea:0b:83:5d:82:1c:
9c:a0:f5:6f:01:9a:f4:ee:d6:eb:ae:07:e0:a3:6a:
f8:4d:d7:e4:da:7d:70:95:21:0a:69:8a:47:fa:79:
36:48:a1:e8:1d:93:98:6b:3f:2e:b9:3a:ab:3c:57:
63:11:a2:96:2d:d8:1d:c2:e2:be:79:fa:3d:5b:15:
e4:0b:96:88:50:51:ac:6e:d5:57:b4:1a:ea:fa:b2:
78:92:f9:15:51:a1:cf:1b:c6:31:d1:05:1a:bb:90:
55:1d:29:95:f2:13:a1:69:91:2d:95:36:b8:f9:66:
9f:a0:18:a8:cd:6b:3f:5d:ab:9b:92:7c:b7:cc:e3:
b8:22:2a:64:a4:a8:7d:0d:17:a3:5b:55:04:da:08:
87:51:af:e5:82:df:fd:c7:9c:14:6c:b5:17:e6:9a:
0f:c6:ac:40:34:0e:69:9f:7e:4a:63:cc:3c:bf:74:
f8:01:70:c1:2a:85:b1:54:aa:8b:ef:a8:ca:d8:ac:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1E:FE:C4:5A:44:42:F3:AC:08:81:A9:12:48:C7:28:FF:08:89:18
X509v3 Authority Key Identifier:
keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:23:6a:ea:ff:57:5d:25:9b:1a:69:fc:27:59:80:2e:8d:2c:
35:bb:44:37:af:f4:e3:cf:aa:fb:f7:42:1c:9c:5f:57:42:1f:
cc:b3:58:26:51:55:a1:9e:2f:fe:e1:25:b2:28:ae:3f:d8:38:
24:6e:cd:6f:01:9e:27:63:6c:b7:90:88:5f:2e:23:5b:70:f5:
74:6b:88:0b:aa:90:59:ad:8f:05:89:f6:53:09:2c:6f:43:d2:
65:41:39:57:71:91:83:06:55:e4:71:7a:cf:24:43:77:4e:f3:
9a:ed:08:ef:14:da:d6:09:b9:7d:bb:7e:01:7b:de:7c:fb:7e:
25:1d:cb:2c:ae:40:ad:53:12:23:79:bf:2a:cd:80:3f:28:64:
da:dd:45:a2:d5:b8:d6:77:ae:cd:f6:0e:81:05:e9:f8:e1:7c:
af:da:09:24:28:61:37:c0:80:b1:01:65:8c:0a:b5:a1:1c:a8:
8d:06:80:2d:e0:3b:43:e7:33:0c:9a:fa:5a:50:c1:54:17:c9:
d9:53:be:79:a8:59:c6:87:0b:57:df:81:e9:9b:c3:18:47:34:
cd:79:46:4f:cd:02:32:4b:26:55:67:24:4b:1d:47:f5:d6:23:
a6:8f:07:7a:4a:98:45:24:bd:17:f4:da:2f:0c:a8:30:ea:8a:
ca:01:6f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:03 2026 by rpki-client