Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: mO9mLwutYS/Jx/C68WfyPaKAgRiPGeMdcpXPv6hpuS4=
Subject key identifier: 95:93:38:95:39:53:BA:85:AF:3B:76:65:9A:26:DF:97:74:FE:73:E5
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 019E9BF300A793C3EEA738111282D61A22AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 09AB
Signing time: Sat 06 Jun 2026 08:00:54 +0000
Manifest this update: Sat 06 Jun 2026 08:00:54 +0000
Manifest next update: Sun 07 Jun 2026 08:00:54 +0000
Files and hashes: 1: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: JOWyOULJ9kxWCe+lp4NxJZ9bfI9pVxuHeaKVBZNA7ZM=)
2: ilf77_-o9-q6za7MOsqeG7F-F18.roa (hash: QcXY77GP6oWSI7llT54vOOPgAvyMn7s0Et6LlhSw/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f3:00:a7:93:c3:ee:a7:38:11:12:82:d6:1a:22:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Jun 6 08:00:54 2026 GMT
Not After : Jun 7 08:00:54 2026 GMT
Subject: CN=959338953953ba85af3b76659a26df9774fe73e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:ac:f0:d6:2c:12:40:96:16:b5:bd:d3:64:
cf:ef:5c:ff:6b:5e:54:80:f5:e5:45:22:48:ca:9f:
32:a9:48:64:a4:35:e1:3a:9e:14:75:21:31:54:db:
a4:9d:04:26:43:d9:ad:f0:b9:bf:7c:63:97:56:f3:
9c:97:21:05:cc:3e:cb:18:a9:21:8c:9b:8f:a8:f7:
47:92:30:bf:88:13:12:66:20:40:87:a9:6b:e7:9b:
3f:7a:43:3f:ab:78:11:5d:df:66:eb:41:16:09:56:
ba:47:68:ec:db:26:ca:1d:e3:dc:dd:a9:de:23:14:
a4:1b:4a:d6:3c:21:9a:8b:bc:b9:00:69:9d:b4:a3:
e0:ad:dc:49:e0:96:fc:b7:22:15:a5:6b:fd:73:40:
73:ad:3d:5e:ca:d7:38:ae:1f:00:59:8d:97:d4:bb:
a2:6c:b1:5c:c0:57:f0:26:06:b5:01:d4:93:2c:36:
8b:85:e6:62:0a:02:b8:34:4a:47:b1:a0:c8:7c:94:
1b:fc:3c:c7:ed:dd:75:c5:9f:0f:e1:89:9d:fc:a4:
63:61:24:e2:1e:e2:c2:5c:20:3e:ae:54:00:55:74:
9e:fb:83:cc:1a:75:3f:e0:2e:b5:03:10:b1:dc:78:
63:4d:c6:1e:c3:41:f2:42:a0:da:b3:7f:7e:31:b0:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:38:95:39:53:BA:85:AF:3B:76:65:9A:26:DF:97:74:FE:73:E5
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5e:b2:37:37:b9:9e:1f:45:03:a7:49:6f:94:83:85:b6:8d:
9c:a5:77:24:11:d3:7a:fa:9a:7d:08:57:f1:b8:30:cf:bc:7b:
2b:e1:2f:94:8c:57:41:23:27:8a:68:2d:77:98:6a:ea:4c:ef:
63:10:05:87:33:e8:18:ae:99:b5:a5:12:30:6b:25:44:7e:31:
b3:a1:9e:56:b7:25:1c:7c:c6:fc:b0:34:57:71:61:24:26:73:
11:2d:08:d8:28:37:a7:98:4e:11:9c:70:33:0d:d2:7c:54:3e:
69:1e:2c:7b:73:f7:5b:2d:89:48:9a:c8:f3:03:4e:01:30:53:
c7:f9:6d:26:fb:35:6d:6e:a6:d8:e7:1b:a3:1c:e2:19:46:12:
81:c1:53:e6:c7:01:61:43:08:a4:93:ee:bc:17:ad:19:47:4c:
4a:40:5b:f8:f7:34:f5:f3:87:76:92:21:bb:af:ee:f9:43:ff:
57:02:2f:a0:fc:98:72:f8:bc:60:71:d4:fa:4e:c7:0a:05:26:
2e:da:44:3e:65:79:9b:f9:3a:d9:f6:6a:e0:b7:19:bd:ea:c6:
f0:c6:65:af:4a:40:74:17:03:c7:65:d6:94:cf:28:61:36:e8:
d1:5c:fa:0b:b6:45:54:73:2c:9b:2f:04:56:56:6e:b8:a7:87:
97:2c:16:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:18:58 2026 by rpki-client