Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: eM3leWPGC6SbfePL9fuK2cCbnkFsLQZjgkp/LXoryLk=
Subject key identifier: 3A:1E:E0:C3:A9:65:AA:E2:83:F9:2B:31:14:FC:A3:D5:37:9A:D7:DA
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 01A06E39A698F19D6F5A7C8782BD58E5C06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 0740
Signing time: Fri 04 Sep 2026 21:01:06 +0000
Manifest this update: Fri 04 Sep 2026 21:01:06 +0000
Manifest next update: Sat 05 Sep 2026 21:01:06 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: vffvwJPwsFoZvLiAAwv5FEMYmkQl+vqbGDH+kCIhz2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:a6:98:f1:9d:6f:5a:7c:87:82:bd:58:e5:c0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Sep 4 21:01:06 2026 GMT
Not After : Sep 5 21:01:06 2026 GMT
Subject: CN=3a1ee0c3a965aae283f92b3114fca3d5379ad7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:65:f8:e9:1d:fd:78:39:e3:e1:07:2e:b7:54:
33:59:9e:e1:88:73:e7:f4:c7:51:21:55:23:ad:89:
b6:69:33:81:31:bc:08:1c:4e:c7:62:38:2d:29:9e:
a4:c4:3a:5d:ff:ec:4d:bb:d7:0c:cb:f2:96:6e:ed:
42:2c:e0:e9:21:81:00:0e:fb:63:26:26:80:5a:33:
41:4e:fe:3e:d8:9b:7a:86:f1:82:e6:2e:f7:3d:0d:
08:47:90:35:d1:72:b8:e1:3f:4e:b7:f0:8d:68:20:
42:dd:ab:62:95:50:ee:85:c8:e4:dd:3c:65:cf:cf:
48:0f:73:82:ca:78:7d:9a:51:4e:a2:1e:ae:be:ab:
7a:c9:51:a4:fa:3e:8c:36:56:84:05:6a:2d:17:65:
ec:ff:48:08:11:52:df:ef:ed:f0:24:60:58:6f:5f:
ff:eb:e0:1e:10:e9:ec:61:dc:8d:81:e9:a3:7f:6f:
f6:f2:33:dd:94:71:07:8c:74:72:15:6a:25:b3:ea:
ab:9d:76:a0:a7:99:a3:15:bd:29:51:74:95:07:00:
95:a6:3f:e5:01:d1:2b:b7:9c:82:27:d1:59:7e:a8:
82:80:16:31:94:39:42:35:a1:f8:52:02:b8:62:5b:
d5:ce:aa:80:28:b0:61:b4:97:59:8f:3a:67:24:56:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1E:E0:C3:A9:65:AA:E2:83:F9:2B:31:14:FC:A3:D5:37:9A:D7:DA
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:46:84:9b:92:b0:27:2c:5f:16:fa:7f:0a:e5:b4:02:2a:43:
2a:fb:6b:60:35:1e:95:da:96:d0:da:52:54:18:4a:5a:05:2c:
f0:17:de:51:41:8b:bc:dd:ab:f3:58:b2:34:5a:1f:68:bc:a5:
35:d3:c5:d2:7e:b5:a8:b4:33:09:80:0d:ce:e7:29:90:74:bc:
82:42:57:49:71:6c:d1:7e:2e:64:da:dc:be:1b:5f:50:86:5e:
02:0b:86:d1:bb:73:51:71:56:68:d0:ef:98:9c:b6:dc:00:d1:
fd:54:7f:2a:64:3a:9a:8f:45:b4:80:86:9e:a4:fa:a3:46:4d:
99:e2:dc:d9:c8:3f:b5:b6:a5:ba:18:72:67:98:23:e7:0c:80:
77:a3:e2:43:a9:ab:ac:4d:ee:21:8b:b7:f6:8c:e0:ab:e7:22:
27:4f:0f:c8:3d:cc:37:af:df:76:52:f4:30:2a:82:6a:17:66:
81:b4:11:22:a2:14:f3:c5:a2:a7:05:2e:0c:0a:53:b9:74:f8:
9f:02:ed:13:d6:7a:a4:5d:c4:4d:9a:d2:b0:e0:c9:f6:87:15:
45:18:74:02:80:b9:8a:e7:1b:7d:aa:96:1c:de:02:13:e7:e5:
97:7e:58:8c:9c:c7:f3:69:9e:b4:4f:9c:61:df:4d:e2:42:79:
17:27:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:59:54 2026 by rpki-client