Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: ERHl0UmRmTVf0FmcTrjXauMEZguoQyCx+VoiXq+GRgc=
Subject key identifier: 34:88:22:D5:23:98:BA:9E:22:BF:4B:87:02:FC:DF:8B:AA:4E:C0:01
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 01A08B319DE2F4AAF2D4358F96EE29CCC520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 0A19
Signing time: Thu 10 Sep 2026 12:01:19 +0000
Manifest this update: Thu 10 Sep 2026 12:01:19 +0000
Manifest next update: Fri 11 Sep 2026 12:01:19 +0000
Files and hashes: 1: FC-j2DCq34hCFuPalVqFP_Va_c4.roa (hash: jfYCQqEdA0WNXwP1ahEI1VJ/4GR5skI19EQziW64bRA=)
2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: 3uvT8DlDJRnXb4M7JB5m5HlAA1tGYPSgKkxkcKWVXog=)
3: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
4: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:9d:e2:f4:aa:f2:d4:35:8f:96:ee:29:cc:c5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Sep 10 12:01:19 2026 GMT
Not After : Sep 11 12:01:19 2026 GMT
Subject: CN=348822d52398ba9e22bf4b8702fcdf8baa4ec001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:0a:05:4d:29:f4:5d:c5:45:14:a5:d6:63:
28:84:db:63:fc:e5:aa:3e:1c:a1:4f:81:a0:cf:d0:
17:a2:e7:30:6d:7d:77:f6:e6:1e:7c:87:90:5e:02:
7c:1e:0b:3d:4b:4d:eb:67:70:15:94:86:de:4e:32:
c6:69:32:49:43:79:13:86:a1:3c:d9:75:83:b4:23:
2c:89:e3:92:b0:18:aa:1f:10:85:da:6b:4e:03:6f:
db:f2:6b:c0:c4:a6:5b:85:d0:0c:84:73:57:35:59:
a7:d9:db:a4:d1:cb:54:42:3b:eb:ce:2e:bb:41:b8:
3c:b8:9a:aa:c4:76:b1:10:eb:e9:4a:44:a1:82:07:
2a:b0:36:26:b2:40:4c:1f:ab:cf:a1:0b:64:24:c5:
31:96:f1:1a:84:2a:27:90:fa:d4:f5:9c:a2:ad:d9:
6e:d1:64:0a:30:5a:5c:6f:c6:4e:ff:e9:0b:80:de:
b7:93:a8:50:9f:cf:6f:9f:4f:e0:ed:08:05:45:60:
86:5a:86:55:5b:94:6e:62:ee:ed:1e:1e:bb:01:30:
ed:2e:5a:6d:12:eb:e4:5c:07:49:ee:00:08:10:84:
47:44:fc:e3:31:4c:59:db:98:37:19:60:dd:a4:16:
a6:05:f2:92:15:25:aa:55:54:a1:71:98:92:45:49:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:88:22:D5:23:98:BA:9E:22:BF:4B:87:02:FC:DF:8B:AA:4E:C0:01
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9b:fd:52:26:b2:43:f7:9a:82:53:1f:a6:2f:ce:6c:60:a1:
2a:09:bf:2f:42:3f:fb:17:fc:3c:e6:2f:a0:61:b9:a5:ce:a3:
00:e8:ca:a1:08:53:6d:12:56:e0:3a:06:1b:1c:1c:1c:f6:79:
f9:d0:0b:b3:47:0e:69:41:18:5b:3e:84:c9:24:ce:31:42:08:
72:f7:58:b1:48:7f:f3:0a:67:f9:8c:10:36:9e:51:28:5e:9f:
c6:8f:e7:85:c8:1e:96:b2:04:e4:05:81:45:6e:57:27:09:7c:
59:16:13:4a:73:34:11:64:7c:2b:4d:eb:52:43:a9:ae:1a:c1:
2d:cd:39:37:55:b9:6f:b5:51:79:d3:3f:70:83:41:2f:ae:61:
a1:1c:2d:6f:be:43:7c:b9:3c:c4:99:ba:5b:15:61:b9:e2:5b:
9e:1f:b9:7a:cd:9d:ee:96:f5:70:89:6e:ba:d3:ea:0c:68:ee:
97:5f:c9:49:23:d3:33:38:e1:bc:68:01:fe:d2:a5:c5:54:28:
0b:e4:a4:30:6e:be:2c:c5:69:c5:b0:f8:13:5b:1a:30:66:68:
2a:dc:91:e5:df:6a:20:89:64:13:55:26:4e:cb:5c:f1:c1:39:
86:a8:45:dc:a9:42:41:4d:2a:39:78:85:0d:fa:4f:36:23:e4:
fd:5a:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:48:22 2026 by rpki-client