Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: +xpYyssmDT7DCFG/iwj1v0a+tIB6rCnIKPIrFBBjWKg=
Subject key identifier: 88:90:0B:60:F6:56:49:62:A7:A7:17:47:CE:06:11:8C:EA:D5:2A:C3
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 01A177DE983B9968CB150B5F564F7C46BC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 0A95
Signing time: Mon 26 Oct 2026 11:00:38 +0000
Manifest this update: Mon 26 Oct 2026 11:00:38 +0000
Manifest next update: Tue 27 Oct 2026 11:00:38 +0000
Files and hashes: 1: Dz46KAYraGcTikQMGoMJVAAInHQ.roa (hash: NU2HWGZh7sQrY1k6J9xhsLm4R4NqLLcBXrqTHwrCQfs=)
2: FC-j2DCq34hCFuPalVqFP_Va_c4.roa (hash: jfYCQqEdA0WNXwP1ahEI1VJ/4GR5skI19EQziW64bRA=)
3: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: Ak9XSM1xw5xRWNoZDLujOCBsEH6gDfn75tPKuNYjwYg=)
4: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
5: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:98:3b:99:68:cb:15:0b:5f:56:4f:7c:46:bc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Oct 26 11:00:38 2026 GMT
Not After : Oct 27 11:00:38 2026 GMT
Subject: CN=88900b60f6564962a7a71747ce06118cead52ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:bc:1e:56:4e:b9:3b:59:68:45:1c:86:35:
0a:37:67:d2:6b:43:fe:76:ce:11:e8:0c:a2:18:8b:
ab:cb:1a:e7:a1:34:fe:e3:3d:fb:ac:3d:2a:dc:f1:
69:40:ad:50:f2:52:49:66:d7:e6:19:60:d5:24:05:
61:3c:d8:79:84:7e:03:d7:97:36:05:9e:99:95:a7:
fc:47:27:d7:5e:50:8a:aa:1f:d0:1e:00:71:4b:10:
c3:c7:80:c2:25:9c:11:c8:c1:f2:e2:e5:77:29:79:
cc:83:56:9a:30:e3:96:03:56:91:fc:2e:34:61:61:
2c:55:a5:7a:40:9a:21:2b:eb:f4:39:9a:a8:2a:59:
ee:52:ca:10:f3:77:ce:2f:7e:e5:3c:2c:bd:8c:6a:
db:30:bf:6b:e8:b6:61:d7:2d:da:27:fa:32:55:1f:
72:ab:30:af:46:60:d2:ef:66:f9:2c:04:d1:56:12:
5c:27:31:6a:fb:33:23:50:96:e2:69:d1:2a:74:ea:
8d:a9:06:97:f0:7b:2a:38:60:50:ff:d0:bb:bd:03:
ce:df:3b:ff:35:75:b8:5d:ac:d7:62:7d:ad:dc:25:
22:35:a1:79:c8:14:db:d9:14:ee:8b:cc:35:dd:69:
c4:e2:74:62:88:82:ac:1b:1c:dc:20:93:95:03:55:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:90:0B:60:F6:56:49:62:A7:A7:17:47:CE:06:11:8C:EA:D5:2A:C3
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:18:96:eb:14:0e:ff:c5:49:57:38:22:bf:4f:4f:0d:27:d2:
b7:d5:e7:bd:71:a7:65:37:50:fd:6c:f8:fb:82:98:c4:e6:35:
54:47:7d:47:0b:8e:6f:b4:a3:ec:16:7e:e5:4d:74:9b:17:81:
f0:8f:e8:32:44:60:26:60:7a:a9:70:26:4b:54:a1:a6:83:fa:
45:ed:04:17:f6:06:e5:ed:82:b4:af:66:09:f5:69:26:f2:29:
70:0e:b0:51:e5:f2:46:70:21:38:c1:04:69:fc:c8:6f:66:9a:
8d:bf:ee:e2:c9:af:24:79:01:b4:79:e0:61:42:12:29:d3:27:
bd:bd:b5:49:2d:a5:c8:55:8b:df:76:6a:ca:df:da:08:46:98:
78:ed:0d:47:d8:67:77:ca:ef:46:c3:64:fd:41:7a:4b:77:45:
4c:b8:7e:01:ae:22:94:8c:8d:2a:15:4f:5d:48:06:dd:c4:e0:
63:72:08:ae:52:4f:c0:4e:bf:67:f1:3c:1a:4a:82:ae:bd:2b:
51:3d:80:0c:9e:5c:4e:a4:43:ea:03:70:33:0d:cb:8b:14:4b:
00:b2:8e:00:8b:e5:c9:3b:8c:4c:10:aa:ce:ce:23:31:25:ba:
60:69:1a:82:e7:10:84:0f:24:1a:23:80:52:4e:f8:cc:68:26:
be:08:e8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:04 2026 by rpki-client