Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: ZdI3FGVcJ9VnkzY5GBBBMHgKjoccln+3ShzTj24xuiU=
Subject key identifier: AC:0D:B0:9E:FD:12:E4:72:1D:E0:25:E6:E2:5A:CE:32:EE:D4:10:D9
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 01A16E6DC9E44B9B22BB30C3DF2BEBE950E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 07C5
Signing time: Sat 24 Oct 2026 15:00:51 +0000
Manifest this update: Sat 24 Oct 2026 15:00:51 +0000
Manifest next update: Sun 25 Oct 2026 15:00:51 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: JLHti4JZHKQA9Y2AelwAv4Mku7k1XDLHRX5JLUwvGTo=)
4: yLDI05DHrOeaX6ii6878CuRRTU4.roa (hash: 4oNVYzhNYx0P9TBjHoCa/qlg6gb1ePfdWkrrIU05JyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:6d:c9:e4:4b:9b:22:bb:30:c3:df:2b:eb:e9:50:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Oct 24 15:00:51 2026 GMT
Not After : Oct 25 15:00:51 2026 GMT
Subject: CN=ac0db09efd12e4721de025e6e25ace32eed410d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:6b:83:9c:e3:90:26:68:e1:10:20:76:8a:
4d:2a:1d:b4:82:2d:90:eb:fb:39:9f:f2:98:9d:21:
f4:06:d5:8f:f5:84:33:29:32:26:97:02:50:ad:e3:
75:30:6f:99:b4:52:51:e6:22:17:fa:69:a6:bf:5a:
af:c0:4a:32:4c:be:dd:4d:29:dc:ec:32:1d:04:da:
73:2b:e5:ce:99:ae:6f:0b:9c:97:b3:00:57:ce:50:
1e:3e:79:0b:11:a1:0c:b7:0c:01:dd:18:54:08:20:
a8:8f:6d:5d:42:54:38:b9:15:82:8a:b3:69:e1:a7:
3d:2e:9b:7c:e1:51:a2:71:3e:c9:11:ae:17:30:2c:
e3:37:41:03:48:20:dd:ce:78:c4:ab:12:64:ea:05:
99:3a:86:1c:82:24:5c:8d:70:23:ba:2d:1b:f1:9c:
04:62:68:3c:38:ac:77:22:22:80:22:94:82:6a:ee:
67:f4:28:3f:cb:aa:a9:53:9a:a4:b5:86:7a:22:97:
9e:0a:db:a6:a5:e5:09:dd:af:a8:89:9b:40:90:56:
09:db:6b:ad:65:56:81:b5:d8:2f:47:00:8e:5b:eb:
d5:74:93:fc:9c:a1:e4:99:e9:5d:f0:ec:1a:98:1d:
94:e7:f3:d5:d6:f5:15:a9:da:31:a2:5f:d5:84:53:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0D:B0:9E:FD:12:E4:72:1D:E0:25:E6:E2:5A:CE:32:EE:D4:10:D9
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0e:a6:68:fb:27:96:73:40:ea:44:63:ff:50:77:b8:bc:ea:
39:46:6f:a8:08:b7:09:3c:cf:31:67:49:67:75:56:1d:3e:c6:
90:72:cb:85:f6:0f:91:4c:22:f3:cc:29:ef:b1:30:b2:8f:4e:
e7:85:91:c9:d5:c6:f9:ef:e1:82:4c:67:36:ed:df:eb:30:0a:
22:f6:78:31:0f:99:42:41:e3:97:d7:7f:95:b7:51:2b:3f:7e:
f0:d1:80:81:57:d8:82:f1:8e:63:d8:9b:39:51:e7:7b:23:43:
b5:62:99:f7:87:84:24:44:60:6d:1c:07:54:26:d7:72:9b:55:
49:30:3c:de:1e:6e:a7:26:5e:89:3a:74:cc:31:eb:55:01:ea:
cb:b2:49:d2:cc:d3:3c:9b:21:92:89:c3:9d:4c:2b:8e:30:01:
5a:dd:b9:33:a1:23:50:00:0d:ea:c5:cb:d4:69:63:a1:e7:98:
86:aa:48:8e:8a:48:e6:98:6d:f7:9e:99:ad:c8:4c:e8:32:75:
f3:09:e4:8e:59:ad:8d:4d:fe:c3:3e:ad:4e:13:03:d6:62:fa:
9c:04:3e:f3:31:d5:97:c0:67:c7:25:71:44:32:26:d0:45:21:
38:46:c3:c7:71:f7:a9:1c:e7:82:c1:77:4f:a4:a7:33:00:a0:
62:14:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:18:44 2026 by rpki-client