Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: fRi84716b6JMgyvsDFR2gQfq8n0cTw0bxZUwefTbCVw=
Subject key identifier: 68:03:EC:C3:6F:20:46:86:F2:07:E1:F9:C0:8F:46:B5:97:FA:50:EC
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 01A12842FBA722C6F576A990F2E78211642D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 1A7E
Signing time: Sun 11 Oct 2026 00:00:40 +0000
Manifest this update: Sun 11 Oct 2026 00:00:40 +0000
Manifest next update: Mon 12 Oct 2026 00:00:40 +0000
Files and hashes: 1: 6knPf4Z_Yom73fZwtAX7TGmnwWI.roa (hash: uMucpBFGP9VTEQFIpmoToKJaaBVJ7Z0HhGQfxWsojaw=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: wuARWkPtYnT1uKUz3ktFATW2ee9fHMFGdyFYXITCOm8=)
3: jCfveam_XFqY1WaoDM8mc53l0-A.roa (hash: oYsXoD5qrvfH3xJxru02r9mxYtA0m3BelZFuFCg04Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:42:fb:a7:22:c6:f5:76:a9:90:f2:e7:82:11:64:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Oct 11 00:00:40 2026 GMT
Not After : Oct 12 00:00:40 2026 GMT
Subject: CN=6803ecc36f204686f207e1f9c08f46b597fa50ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:f4:6d:1d:a0:87:b6:9d:56:ab:45:14:01:
25:69:79:03:c8:88:83:fe:1e:1a:ba:0e:7c:24:d4:
4b:79:8e:f1:bf:d8:10:63:f2:33:69:42:51:9d:61:
5b:fc:f1:56:46:71:78:45:c6:96:42:16:6d:08:ed:
67:e7:b5:be:ad:02:f3:45:58:bc:10:0d:a6:5b:16:
b6:f7:c9:e3:61:c2:86:f2:22:e2:cd:d1:2c:b2:67:
f8:1e:c9:e2:53:89:24:1b:9c:43:b1:8e:84:dd:e6:
ed:ef:f1:ac:f2:2b:e7:ed:af:ca:f6:09:7f:8b:6a:
76:b4:09:d6:ca:d0:59:98:76:fc:d5:06:1a:2b:df:
1e:4f:38:e1:b1:a4:7c:27:3c:53:0f:74:85:9d:ca:
d3:b4:87:e2:12:65:b5:92:d6:03:46:91:57:00:ae:
f4:c6:0f:c0:62:80:ac:d9:32:84:b2:d0:82:d0:cd:
89:81:ff:67:ac:47:bb:2a:fd:12:5e:1b:73:ee:53:
18:2a:ee:4c:b3:a5:e3:16:b2:27:5d:50:9c:48:bc:
c6:0d:6d:f5:4c:9e:4d:b3:af:7d:2c:41:f3:f2:ff:
fb:28:59:1f:44:56:98:9c:83:e5:e5:1d:51:d9:2f:
12:25:e8:1e:19:1d:de:cb:d2:90:e3:1f:4b:dd:17:
d5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:03:EC:C3:6F:20:46:86:F2:07:E1:F9:C0:8F:46:B5:97:FA:50:EC
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4a:aa:fe:5d:b3:23:43:20:e3:1c:cc:82:ae:5f:c2:66:84:
15:8a:e8:c5:a9:56:2d:e6:24:ca:5c:c9:7d:6c:65:d4:79:21:
03:eb:21:b7:a4:ae:22:75:8e:17:54:07:49:b6:c9:84:e7:80:
02:80:52:0b:2a:36:b5:ff:22:47:11:8a:d2:3a:1c:76:8d:49:
ee:96:14:23:da:0b:42:96:d3:fa:6b:4f:3f:73:8e:cb:76:a0:
3b:25:79:c8:c5:63:3b:e1:c3:67:1f:24:dd:93:e4:9b:21:98:
c4:18:68:c9:4b:22:73:d8:fa:25:b9:79:66:03:4a:7c:8c:d2:
ba:5c:48:e1:7e:90:79:bb:b9:9a:59:9a:a8:0d:85:0f:2c:b6:
f4:7b:e5:be:28:8a:41:9f:62:4c:1a:7c:a3:91:9b:05:2c:a1:
f1:22:08:82:d7:a3:ae:a7:01:a9:ac:9b:61:e8:25:8d:f5:2e:
a8:58:3a:f3:db:dc:a3:cc:cb:5e:89:55:dd:96:38:5d:bb:bd:
74:6e:d3:ad:f9:f2:0f:f4:27:5f:b2:26:aa:c0:1d:cd:fc:2d:
6b:3a:fd:51:46:4d:55:f5:b7:cd:24:40:11:eb:22:44:c1:fd:
32:93:e2:77:73:4e:17:b5:30:da:83:52:cf:a9:82:ae:a1:51:
8f:cf:7b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:56:17 2026 by rpki-client