Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: YwMiN9gjHbtVPWIQbINpr9YnylJq4AlnIvfcFeIOca8=
Subject key identifier: 94:E4:FA:E6:D9:EA:5B:69:EB:5C:C0:0F:E2:71:00:1B:FF:4A:F0:8F
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 01A13E94C0460F6B1D4A16B6CF609FF2BB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 08:01:38 +0000
Manifest this update: Thu 15 Oct 2026 08:01:38 +0000
Manifest next update: Fri 16 Oct 2026 08:01:38 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: mTyJtC5mp+up5b7vYQrM+BtzuVdkIke3hrmXp3Ze71A=)
2: x-xatRQzbMJq2QoB7VpakVl_dyQ.roa (hash: FUFQzFRUVGUSKSoKEZzjy+oCv2v1jEvkTjPlxRoTw4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:c0:46:0f:6b:1d:4a:16:b6:cf:60:9f:f2:bb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Oct 15 08:01:38 2026 GMT
Not After : Oct 16 08:01:38 2026 GMT
Subject: CN=94e4fae6d9ea5b69eb5cc00fe271001bff4af08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:fe:45:38:3a:8b:63:65:ef:30:07:50:b3:
52:05:e3:c4:4b:30:a0:ab:af:88:66:8a:a5:75:46:
cd:a5:0c:9c:5e:2b:f0:af:e5:cc:5b:98:8a:44:3d:
0c:33:5f:d2:34:98:58:1a:3b:37:6f:16:45:fc:8a:
c3:b6:83:f4:ba:e0:8b:f9:21:96:ed:00:19:5d:43:
1d:3f:1a:a2:de:0a:78:6c:68:02:d6:8a:2f:4f:67:
13:ee:21:58:dc:ae:18:6d:73:62:1d:ff:d2:b7:1c:
9c:db:cd:a8:d9:ba:0e:0d:40:f4:7e:86:e8:89:29:
14:6d:b3:07:1e:a7:2c:d4:c9:8c:30:f9:90:d3:eb:
ed:da:68:91:66:4e:9e:16:44:75:0a:68:18:2d:c8:
f2:9f:4c:67:f6:c2:dc:28:c1:6c:fa:05:12:54:d1:
68:fb:01:38:ff:e2:dc:33:b0:30:1b:36:f6:eb:e2:
90:5b:1f:c6:5a:c2:1b:52:a0:eb:3c:ac:94:62:18:
1b:07:4e:54:62:e8:a2:34:51:3b:16:e4:c5:3a:da:
ea:5b:42:99:c4:6a:39:c5:e8:d0:0f:04:55:24:6d:
33:fa:dd:1f:3c:e1:bc:3f:99:79:81:46:0c:49:b9:
2a:3c:37:69:f6:5b:5d:a3:b3:b3:c7:57:ec:1a:29:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E4:FA:E6:D9:EA:5B:69:EB:5C:C0:0F:E2:71:00:1B:FF:4A:F0:8F
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5a:8c:84:fd:8c:a5:6a:a1:71:22:e5:7b:9a:d6:0b:5a:38:
6f:20:2d:e5:f3:ee:37:be:39:d3:94:4a:4e:40:ee:70:4f:24:
9c:04:65:d2:53:70:cb:e2:14:32:40:ed:7d:64:55:6c:8c:fb:
81:44:78:60:44:74:2f:36:21:38:e2:4e:e1:75:e2:5e:31:9a:
16:cc:98:54:e3:ed:38:3f:6f:0c:c4:51:7a:23:0d:11:85:9f:
db:a8:dd:fa:ed:19:1c:86:85:7d:97:b0:ca:69:32:ce:e8:47:
e1:b6:15:e0:21:5f:7c:60:74:60:c0:8a:4a:12:01:70:cf:7a:
d4:b1:f7:a5:02:73:fb:e7:eb:1d:76:39:11:94:6c:cd:f2:6a:
ef:30:aa:2b:90:62:50:fc:39:b8:a8:c5:8f:74:06:89:0e:c1:
86:0a:32:a2:83:8f:dc:4e:4f:da:18:81:2a:40:51:5d:bb:18:
b7:8f:96:8d:03:f2:66:78:99:52:9b:da:96:bc:b8:a3:07:1a:
1f:e4:5f:34:ef:08:c8:36:24:6c:54:a1:c2:8b:04:7d:b2:6e:
e1:07:b1:58:41:71:7b:7f:1b:f0:b4:29:be:6d:1c:1d:17:1e:
41:4f:04:f9:a6:e1:4b:2d:93:5d:4b:c0:1c:a9:0d:c6:af:31:
bf:ba:97:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:35:51 2026 by rpki-client