Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: rF2/dt7XrpM0+JOaj9QLF2ICEdBR4qiU4PNv44nzG64=
Subject key identifier: B1:79:13:86:7A:6A:FE:A3:74:B8:46:C2:C7:B4:68:D4:5E:CB:3E:5D
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 01A08A1EFC73EDF6B4B6E5C9EEC3EC35CE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 0CAA
Signing time: Thu 10 Sep 2026 07:01:21 +0000
Manifest this update: Thu 10 Sep 2026 07:01:21 +0000
Manifest next update: Fri 11 Sep 2026 07:01:21 +0000
Files and hashes: 1: 7hkN41FQK4rNVtwj2BraoZnJuqg.roa (hash: 5m1MRTp35SIueLauNwTAW0LsW5mYAj38kHx8oT3d5Os=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: Fk9QRZdhXaaMAr647c9V+w7elhwtWJPzm8ZO25IwWuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:fc:73:ed:f6:b4:b6:e5:c9:ee:c3:ec:35:ce:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Sep 10 07:01:21 2026 GMT
Not After : Sep 11 07:01:21 2026 GMT
Subject: CN=b17913867a6afea374b846c2c7b468d45ecb3e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:70:69:b8:dd:ad:80:d8:44:1a:5a:29:27:34:
f6:1d:d9:39:f5:d9:4f:37:07:b6:7f:e5:69:c7:7d:
62:6f:30:20:ca:4f:87:9b:05:3f:7b:ad:98:99:53:
4c:a9:f5:b5:35:d6:0c:f7:26:05:7c:17:2a:9f:22:
ef:33:8a:b8:d1:b6:f6:34:13:5d:3c:ad:6f:26:4c:
af:e7:d2:3a:d7:e9:11:08:68:98:5e:44:30:ab:87:
b1:2b:ed:7b:e0:0c:a7:82:56:0e:da:b4:ef:80:c8:
c6:f8:6e:d7:9c:f6:57:c8:a5:19:c8:47:8b:f3:27:
a9:78:3a:af:61:71:ee:ad:fc:ac:0b:67:69:71:54:
ea:e2:ad:ee:78:22:4f:ed:44:0c:ab:1c:ab:6c:f7:
87:1f:55:11:0c:98:1e:81:c6:35:3f:db:e8:77:e6:
a7:2e:95:c6:cb:42:89:06:8f:31:4e:f9:05:ce:63:
81:a4:84:9e:a7:f4:59:6d:ee:74:54:3d:ad:55:83:
42:56:1f:13:aa:1e:3c:e3:14:cb:68:88:76:24:f2:
89:56:c1:b1:1b:14:db:f7:88:9f:3b:51:e7:1d:e1:
d7:59:f1:e6:7b:f9:d2:58:0a:f1:b9:42:58:59:06:
7e:b7:70:e9:04:28:23:48:7d:48:d8:55:19:e0:ee:
d4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:79:13:86:7A:6A:FE:A3:74:B8:46:C2:C7:B4:68:D4:5E:CB:3E:5D
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8a:e1:e7:f3:aa:7c:eb:54:47:5f:e5:96:cf:50:c8:38:97:
e9:fc:34:db:c2:af:63:23:ed:9d:13:5c:46:ba:b7:26:22:7d:
d2:79:b0:4e:08:80:51:7b:1c:50:5e:28:d0:48:89:0c:b9:86:
34:23:d4:62:5e:6c:57:44:c9:c9:ef:a9:8d:04:87:1f:52:f4:
e7:00:bc:64:5e:ff:c8:ec:9c:5f:16:a8:8a:35:4e:b8:9b:61:
12:31:21:5f:86:fe:55:38:8b:66:d0:1f:ff:e4:30:41:10:29:
45:48:18:a9:5c:7c:be:e7:dc:be:77:4f:2b:4d:ac:b2:71:e0:
a0:5a:e1:d4:a1:fd:d8:0b:30:8d:3c:88:d9:18:91:84:12:c3:
0c:dc:48:29:77:54:ce:5d:cf:f8:8a:2b:d1:49:d7:5d:ba:5d:
5d:ab:f2:3e:84:95:d8:c4:45:97:36:ed:4e:24:4f:a1:85:ea:
e4:51:e9:6b:52:74:8f:95:99:e5:fb:75:3f:53:07:d6:5b:9a:
f3:e4:fe:1a:c0:cf:ee:2f:7b:80:fe:29:ab:b0:18:71:67:91:
d8:48:e5:31:9c:55:76:27:90:27:f8:93:70:22:61:69:f9:2b:
08:c3:80:dd:cd:91:ec:1d:fb:0d:a5:a0:d7:fb:61:89:75:ac:
67:ed:61:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:00:35 2026 by rpki-client