Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json)
Hash identifier: NtttYQ74I9pNm17sIpwVaDcwRfhuGJkqB1LOkk5ZYHM=
Subject key identifier: 2C:D0:30:09:58:8B:92:55:D1:96:30:BF:C4:25:6A:A0:BF:AB:36:81
Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Certificate serial: 01A18ED4CF392F01E103A8921DACE1AF7676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
Manifest number: 0D31
Signing time: Fri 30 Oct 2026 22:01:13 +0000
Manifest this update: Fri 30 Oct 2026 22:01:13 +0000
Manifest next update: Sat 31 Oct 2026 22:01:13 +0000
Files and hashes: 1: 7hkN41FQK4rNVtwj2BraoZnJuqg.roa (hash: 5m1MRTp35SIueLauNwTAW0LsW5mYAj38kHx8oT3d5Os=)
2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: Q8os2E2MF1jel+uXKt7qTEfpyrRCy0pg6yxBzNt1+t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:d4:cf:39:2f:01:e1:03:a8:92:1d:ac:e1:af:76:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a
Validity
Not Before: Oct 30 22:01:13 2026 GMT
Not After : Oct 31 22:01:13 2026 GMT
Subject: CN=2cd03009588b9255d19630bfc4256aa0bfab3681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:9b:73:d5:28:be:a4:4f:d3:15:31:48:36:
d0:64:59:06:50:60:6f:bf:2a:89:41:63:35:65:9d:
6c:30:31:f6:ed:54:35:04:04:91:1e:da:c1:64:ce:
56:0d:f4:96:40:6a:63:a7:fc:4d:a4:27:de:66:76:
c2:34:87:b6:6d:9a:f4:25:28:79:01:9a:70:b0:f1:
4b:73:93:9a:0a:02:9b:ec:a7:5a:02:ab:6f:ca:55:
34:3e:df:aa:b6:72:dd:e1:30:80:47:8f:95:0c:f7:
3c:bd:6c:c8:5d:0d:be:b2:eb:e9:ce:a1:95:79:72:
27:81:ad:a6:a5:d2:0f:88:d1:c0:cd:82:9c:2b:6c:
24:f1:28:2e:a1:a3:87:cc:2f:37:a5:ce:3a:d6:73:
27:07:97:d0:a1:40:5f:99:de:8e:ed:6a:01:64:5b:
da:b2:0d:b7:f1:9b:c6:3a:7a:cd:21:de:8d:61:1c:
d6:0a:ad:3f:c4:17:fe:a8:d8:b7:e8:a0:c9:dd:73:
66:c6:af:ed:0e:1d:0a:e9:a8:50:b9:17:61:83:cf:
8e:05:a8:8b:d1:e5:92:90:64:bb:0a:74:dd:5b:c6:
05:c6:1e:a3:22:16:3b:28:28:55:26:bb:21:c7:27:
c5:6a:82:51:e7:ec:5a:0f:55:53:bb:30:e4:9e:90:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:30:09:58:8B:92:55:D1:96:30:BF:C4:25:6A:A0:BF:AB:36:81
X509v3 Authority Key Identifier:
keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:99:9a:9b:f1:79:ea:cf:6a:20:f4:31:c4:35:ab:a0:17:4f:
fb:58:e5:98:e9:12:8b:84:60:97:10:52:7d:02:56:6c:dc:90:
bd:f6:a8:d9:d8:75:3f:30:28:e3:90:9c:18:70:4c:45:f5:04:
c4:af:54:df:3a:55:2b:f9:17:2b:bc:bf:44:b7:c5:99:a4:d3:
2b:ca:1a:4a:3a:4b:6d:33:b6:14:bd:8d:ec:88:ce:ee:a7:9c:
e5:be:2c:92:d6:71:28:d6:a2:87:9e:83:58:d5:c0:de:76:b7:
b5:20:47:cd:49:ce:db:43:d5:0b:c9:fe:fc:ce:0e:84:ce:03:
e5:95:bd:8c:91:80:c7:7a:d4:31:44:66:07:c8:06:aa:37:f1:
ec:cf:1c:41:ae:e5:e4:3a:c9:7b:12:9e:82:ce:b8:20:27:7b:
a4:8f:33:bd:07:db:55:65:35:93:6c:f5:56:ec:64:02:06:38:
9f:14:01:63:f5:10:f8:7a:0c:b1:09:f5:d3:8d:23:5b:75:f4:
d6:30:73:e2:d4:64:0c:43:fb:34:23:43:5f:00:60:78:9d:9a:
df:59:cf:d7:d0:51:b8:75:40:2f:7b:8a:58:5e:7d:3f:2a:20:
4f:7d:5f:eb:97:90:94:8d:3b:2d:2e:b0:84:81:44:91:ae:37:
42:1c:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:17:49 2026 by rpki-client