
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json)
Hash identifier: e/hNET6DWLGmvv6eVgaMXSVUrwqBOyirZAUEAIQ5ZhQ=
Subject key identifier: 78:55:AF:00:85:AD:33:2C:D2:37:56:9F:A7:2D:54:0A:DB:83:59:0D
Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995
Certificate serial: 01A08F45046B885B24E8E49B66DA1D6A6465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
Manifest number: 1A59
Signing time: Fri 11 Sep 2026 07:00:59 +0000
Manifest this update: Fri 11 Sep 2026 07:00:59 +0000
Manifest next update: Sat 12 Sep 2026 07:00:59 +0000
Files and hashes: 1: 0z1v-iMgN-IiCcFz7KgyRD_9W5o.roa (hash: BFX8flEMTYsLMbzmmvgL8prvL0RkcLfro9e2dMsJhWI=)
2: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: J6H150ADzNbywB+eO4N1EXP6KMOWOATYYFiKzZGBKYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:45:04:6b:88:5b:24:e8:e4:9b:66:da:1d:6a:64:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995
Validity
Not Before: Sep 11 07:00:59 2026 GMT
Not After : Sep 12 07:00:59 2026 GMT
Subject: CN=7855af0085ad332cd237569fa72d540adb83590d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:5c:fc:8f:31:b4:6f:87:99:f9:3a:31:24:
ae:71:bd:ad:b0:04:a9:f5:38:91:86:bf:1a:8c:9b:
60:d7:30:f1:ab:9f:de:f6:5f:df:92:38:bd:5e:8f:
f8:4d:8e:30:68:07:ad:b3:34:da:20:41:5d:40:af:
c2:94:68:fe:34:09:a2:ea:35:2a:2b:6e:40:ee:79:
9a:24:1c:a0:ae:22:f4:c6:7f:88:1a:3e:e4:4b:4b:
14:66:5a:a3:96:f2:f6:40:5d:20:08:74:46:9b:5f:
75:57:f7:aa:dc:3d:e5:23:d2:39:3f:ad:ae:a9:30:
96:06:67:70:15:25:49:3f:88:0b:d5:2f:bd:ed:ff:
19:88:76:75:85:7a:3d:f2:d3:43:d6:2b:a8:29:c8:
0a:2d:2b:c9:5e:41:65:4d:82:a2:e1:0b:ed:70:c6:
f6:cd:82:df:17:22:83:99:13:da:64:59:7b:d1:19:
9c:a2:ba:03:52:fd:6a:ba:fc:a9:d9:4e:10:45:65:
42:9a:91:d4:8d:11:18:0b:13:e9:57:cc:99:03:2e:
a7:e4:50:34:12:46:c0:1a:71:66:07:28:36:00:3e:
18:da:9b:e2:06:dc:07:40:ac:bd:2e:22:e0:ce:3f:
03:11:97:a4:df:b9:59:3e:7c:6b:48:d1:dc:07:bd:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:55:AF:00:85:AD:33:2C:D2:37:56:9F:A7:2D:54:0A:DB:83:59:0D
X509v3 Authority Key Identifier:
keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:40:3d:7f:11:3f:a3:88:50:b9:9b:a7:d2:92:a7:6f:a6:93:
00:dc:3c:e9:5f:86:70:42:b3:b0:0e:6b:5b:ed:8b:e0:32:ff:
97:71:58:4f:1b:7b:31:43:2f:65:89:5e:36:a8:6c:8e:4f:3e:
0a:bc:de:4f:17:ae:4d:0e:a0:d7:7d:a7:03:04:6a:b2:08:f8:
6a:75:ca:e5:2f:ee:c5:31:a3:b0:d0:5c:5b:19:56:8b:63:7f:
17:e3:cf:07:53:2b:79:17:e5:bb:59:8d:d0:48:10:d5:4f:9d:
44:45:15:8a:3b:a5:9c:5b:52:fa:ac:36:f6:47:9f:03:bc:6d:
bf:43:89:0b:5f:d1:60:f7:4f:f9:af:a6:89:35:d2:24:d7:37:
9c:de:de:b9:3c:2a:af:19:03:d0:63:0c:97:d8:16:4d:6c:74:
c0:13:c5:4a:2f:40:df:1f:34:9b:63:3f:a4:1c:97:da:4f:32:
6c:4b:c4:e1:61:62:32:1e:15:0a:6f:e1:9f:95:cd:1e:15:65:
48:44:12:d6:5f:e3:4d:f4:5f:27:62:b4:74:3c:84:6d:a2:88:
6f:d6:2e:03:bb:90:be:f0:75:2d:70:8e:2d:6b:06:2b:0f:35:
e8:fa:be:a9:08:9c:ca:5a:65:16:fd:9f:f1:01:b1:9d:51:eb:
8a:ae:c4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:05:16 2026 by rpki-client