Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: RoeXRsqCWll1PqDo7ucrQE0ceObiM1qaOqL7OjIbzYM=
Subject key identifier: 3B:D0:83:C2:F8:89:62:4C:74:BE:46:D6:E0:95:0C:05:41:D0:36:38
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 01A162D7EA8828CA21005CED1056BB38CA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 07BF
Signing time: Thu 22 Oct 2026 09:01:19 +0000
Manifest this update: Thu 22 Oct 2026 09:01:19 +0000
Manifest next update: Fri 23 Oct 2026 09:01:19 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: AWtcdrDJ7fxpF/TuGI1nhyUN89EmNRfHkrpoXK9lStU=)
4: yLDI05DHrOeaX6ii6878CuRRTU4.roa (hash: 4oNVYzhNYx0P9TBjHoCa/qlg6gb1ePfdWkrrIU05JyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:d7:ea:88:28:ca:21:00:5c:ed:10:56:bb:38:ca:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Oct 22 09:01:19 2026 GMT
Not After : Oct 23 09:01:19 2026 GMT
Subject: CN=3bd083c2f889624c74be46d6e0950c0541d03638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:17:bf:0d:78:37:0f:f0:4b:28:93:28:da:
08:1e:96:96:f4:64:95:a3:7a:37:34:9e:de:6a:ad:
77:1d:ee:20:9c:42:ca:8b:f0:28:31:f9:ad:54:2d:
f9:70:44:3f:ed:26:55:61:61:9d:22:63:d7:4e:ff:
25:27:de:08:6b:73:1e:58:16:d1:3c:6a:c7:9b:60:
90:c6:cb:70:f1:3a:f2:79:21:a9:d2:8b:c1:17:ba:
3a:26:80:90:4b:d6:55:a6:77:1b:62:08:62:02:e5:
57:9b:25:e7:d7:18:d7:39:5f:a1:c4:f7:2d:ba:e8:
42:b3:b1:42:b7:f7:18:eb:8e:07:93:b4:6b:d7:34:
15:70:cf:24:7a:bd:72:51:9c:25:6d:a5:73:7b:18:
e4:83:94:75:9b:ae:f5:62:62:5b:d3:5c:bd:32:1d:
4e:f0:8b:82:de:0d:bb:cb:ca:4d:15:ac:8e:72:08:
15:cf:64:70:f3:09:0c:28:2f:f1:6b:65:8a:ea:47:
9f:87:7a:96:56:40:d9:49:a4:29:97:70:dc:97:6b:
2d:73:1b:22:a9:af:9b:71:30:e1:f9:fe:fb:7f:ad:
97:3a:4d:49:91:df:28:f3:cf:3a:cb:08:ec:fe:25:
61:7e:8c:ef:45:86:e1:66:ce:a2:52:9e:15:0a:e6:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D0:83:C2:F8:89:62:4C:74:BE:46:D6:E0:95:0C:05:41:D0:36:38
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f4:91:1a:bf:73:d9:c6:b6:65:26:84:fa:8f:ae:f4:84:e4:
21:bb:3f:88:2d:bd:d5:3d:c0:0d:75:23:d2:40:aa:28:12:6e:
00:43:59:67:8a:b5:d1:f7:a1:3a:21:1e:f8:77:8f:c1:51:cb:
d5:2f:13:51:80:76:0c:59:19:88:e6:dc:f0:12:77:5b:f6:6e:
bd:7b:ff:ed:fc:55:f9:3d:1e:e8:ad:17:1a:2e:cf:b7:c6:73:
e6:f8:1f:9c:d7:2d:4c:1d:4b:6f:1c:d4:73:ca:0e:01:29:1f:
bd:95:62:31:ca:d0:81:79:4c:da:5f:01:26:6b:e9:db:1f:c1:
4e:07:6a:b6:7b:7d:4e:f6:fc:53:0a:17:97:fb:c1:57:b8:8d:
cc:ce:be:56:99:7b:d7:a2:dc:0e:85:22:07:a5:7d:95:d5:06:
c6:89:de:d5:b1:fc:62:a8:81:2f:ef:53:97:58:88:e0:d1:0b:
22:8e:6e:d6:1a:c1:8d:fe:91:20:af:33:63:49:c3:61:86:89:
f9:60:00:1a:03:78:6d:d5:44:54:9c:0b:28:bb:99:b1:aa:4e:
3f:18:c1:27:47:2d:78:7e:39:84:af:72:69:cc:f2:4f:97:8f:
bb:bf:f5:f9:f2:f4:92:dc:04:0d:12:24:70:64:a2:59:68:0a:
d0:da:20:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 18:23:07 2026 by rpki-client