Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier: 50/quVMIjvvKExpdFACdaYLyfnwo7PZVxuVYQiuxHHY=
Subject key identifier: 77:26:C5:7F:5B:B9:94:EA:9A:74:57:74:C2:4B:B9:13:90:11:03:6A
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 01A1675967CDCD584CF2414EB036767AC148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number: 1ABF
Signing time: Fri 23 Oct 2026 06:01:14 +0000
Manifest this update: Fri 23 Oct 2026 06:01:14 +0000
Manifest next update: Sat 24 Oct 2026 06:01:14 +0000
Files and hashes: 1: 1-5ZO4wy2gdMm-RlasEiiUu_66ag.roa (hash: z6hiEkQzG0sD38AUOglWiXkVXLhBbifg/B/a3MzT8UE=)
2: 4sjyq3qhVZlOGoiUzGF4lAOm0Ms.roa (hash: snRHhhCF/A70W64B8Ansk4wih7fxueYm9qlqzv1rXXE=)
3: JXD9OGEgFf3Wk4sh84udKIfqooU.roa (hash: qrmAAi4FfndLs6wG6DvmHeD7s+/mauxwlNM+tOn8N8I=)
4: Ncp12bGOlnl7zeDP17e5hwwIiXs.roa (hash: 8U+DuszR+o7r4oyJP5qAPzyleDSPshxobLvejlTQgog=)
5: OMs3SExnh8q-OfFFrIMvJ4V20rM.roa (hash: 3VJ0PQELJEdphYzfdK0KvVfZHKT8gZroOq8apM3LPBE=)
6: bcdCYadegTnuv1kyS3SFpw7_obg.roa (hash: FHoWoxIPPut7YlIBnS9RiEjsnw6/GTtGF64PoDTZc+8=)
7: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: xwRgZwAc+wnpg6pCpR/5wfkquUL9y8NVUw/A7RP55hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:59:67:cd:cd:58:4c:f2:41:4e:b0:36:76:7a:c1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Oct 23 06:01:14 2026 GMT
Not After : Oct 24 06:01:14 2026 GMT
Subject: CN=7726c57f5bb994ea9a745774c24bb9139011036a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:e5:cb:99:05:44:fa:60:c9:c5:ce:4d:13:
de:77:b7:fa:41:01:cf:3b:a1:a0:b5:20:3e:1e:80:
30:6b:37:65:70:b9:f4:d5:bd:38:72:af:d5:05:93:
f7:fe:0a:76:78:89:23:7c:df:a8:6b:b6:c6:89:36:
36:18:5c:a9:9d:f9:4d:0e:98:27:75:dd:90:92:4d:
7c:58:41:82:65:85:28:5c:4f:1b:b0:18:41:ee:14:
00:1e:f8:fd:87:a3:19:f7:4c:7b:5b:7d:5f:1b:09:
27:07:7e:ab:a0:85:00:51:5b:da:e4:a9:b5:9f:60:
3a:d4:6b:72:88:33:6d:2d:b6:12:b5:8f:1f:69:fc:
ad:c5:ba:28:37:70:79:52:58:a4:0a:fb:9c:0a:24:
36:39:8f:88:20:e8:af:49:6c:ab:0e:a0:90:07:fa:
9d:95:19:12:96:ac:32:f7:4a:48:b0:c9:36:41:c7:
dc:25:19:aa:fc:b0:d6:c8:8d:ae:56:10:0a:ed:dc:
17:1b:1b:48:b4:ca:08:46:14:64:a7:89:9e:93:b8:
50:40:9f:6b:71:af:f0:af:e9:0b:cc:f0:34:79:e2:
c4:4f:3a:93:b4:a8:15:67:35:f9:d8:33:f4:36:53:
da:f0:35:e3:52:7d:50:2e:a5:8b:3f:3a:aa:d3:d7:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:26:C5:7F:5B:B9:94:EA:9A:74:57:74:C2:4B:B9:13:90:11:03:6A
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2d:3f:da:1c:69:3f:ac:16:9f:5d:fc:0d:c6:8c:13:30:53:
0f:a9:8e:a0:6d:2d:1f:d6:f9:5a:0c:12:76:65:55:ee:3e:49:
24:a0:a5:19:ae:ca:38:21:1c:68:74:22:a1:6c:b8:f8:ca:e3:
aa:fc:46:ad:92:31:6c:a9:e6:c5:8b:71:b0:79:9c:4b:20:0a:
8f:33:5b:f8:76:1e:39:b6:95:2f:d7:73:8b:83:f3:f6:e7:75:
c4:f0:32:c3:9a:4c:6b:c4:29:e0:61:9a:74:73:f1:82:c6:5b:
bd:b4:b5:59:34:88:08:93:0f:ab:f6:52:f0:c5:a1:fb:43:6d:
c4:9e:f0:67:bf:07:c2:cb:b7:15:84:fc:67:ca:ac:a4:24:a8:
81:99:8e:ca:3e:40:f8:82:f3:bf:ac:54:89:5b:60:ed:7c:1a:
be:d7:d4:7a:58:b3:98:a1:80:79:fc:68:fb:71:72:bd:e3:1f:
c8:bb:de:e9:db:b6:06:a9:94:62:1c:01:a2:df:1d:78:77:32:
0e:bb:86:10:95:e2:d0:87:f3:42:64:22:f5:72:a6:51:8d:9a:
4f:7d:8d:43:26:a0:26:75:ed:a6:e6:fd:01:6e:b0:6c:ab:05:
b1:fe:f6:23:de:c1:c8:0d:67:e7:97:9d:b8:fe:9f:67:fa:26:
72:85:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:17:36 2026 by rpki-client