Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: MbmDIezv91VUzqbwPk8UoBX4q/rGdbxg63zOd44C3kU=
Subject key identifier: 12:D1:44:59:B5:45:97:86:B3:88:6F:A4:DB:BB:4E:7D:A8:4E:E6:41
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 01A0C70F1DE9DF8F6B632FAB7D99FFB37892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 058A
Signing time: Tue 22 Sep 2026 03:00:51 +0000
Manifest this update: Tue 22 Sep 2026 03:00:51 +0000
Manifest next update: Wed 23 Sep 2026 03:00:51 +0000
Files and hashes: 1: dE8xQiANkczZ0tAFkQGK1c1TYTY.asa (hash: TqFGlNij6y9fV1mllromoWTFgsW2Z9/zlXhLCTPAEBE=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: gQohGEpECM/YUsv/pdEcQkGET8uswUnbaLY6etrP5WQ=)
3: lwdA6JuX3-pn18rffEN0nPoUEzg.roa (hash: 934Mdi6isovZuFn2f0j17OwEt11O6pbILLLQ1tR1JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0f:1d:e9:df:8f:6b:63:2f:ab:7d:99:ff:b3:78:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Sep 22 03:00:51 2026 GMT
Not After : Sep 23 03:00:51 2026 GMT
Subject: CN=12d14459b5459786b3886fa4dbbb4e7da84ee641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:32:3c:a0:86:d8:eb:66:df:4e:e5:f5:b1:
08:5c:58:df:56:71:f5:a3:c7:8b:93:82:cf:a0:63:
6e:b1:f8:ec:39:34:e4:0f:4f:c5:20:22:62:d4:a9:
96:09:c6:18:1c:7e:ea:e3:65:51:f3:d2:99:8e:1b:
df:ea:4b:78:40:1c:33:0b:df:22:96:fd:95:c9:b8:
a5:06:5b:60:cd:35:2c:41:31:d6:e7:27:b4:c6:fa:
08:6c:30:c2:b4:90:90:d8:11:0f:85:33:3b:39:28:
75:ee:49:bc:47:9e:10:94:c3:09:23:e0:5a:61:3c:
aa:d2:2a:93:3c:37:f0:1f:e3:0d:11:3f:a3:26:ff:
d3:47:3f:90:78:b1:f5:9f:c4:56:8d:89:78:67:4d:
d5:52:6f:2e:eb:97:9e:92:28:a3:ce:47:57:3b:e3:
38:4d:fe:a9:14:54:a0:eb:13:30:79:f4:a9:bf:20:
17:07:75:a5:3f:2d:d4:b6:ea:25:e8:62:bc:0c:ca:
69:77:3a:99:26:76:9f:6c:ad:92:c8:a2:84:41:73:
06:2a:02:ec:db:9f:b9:e4:85:d1:a0:94:9e:56:5b:
64:b1:65:50:b4:ca:14:53:99:db:c0:6d:e2:50:7b:
7f:58:15:5f:d3:c3:76:ec:4c:64:6b:3c:c1:69:49:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D1:44:59:B5:45:97:86:B3:88:6F:A4:DB:BB:4E:7D:A8:4E:E6:41
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d8:f0:23:3b:db:71:00:ff:a8:18:25:c6:34:49:b5:a6:f2:
d7:d6:95:86:28:4a:dd:9a:52:4e:79:91:24:39:8a:c4:7c:e1:
74:0a:ce:c5:db:50:d5:ec:69:1a:cc:b6:3b:06:09:e5:95:3a:
8c:2b:03:23:59:13:fc:36:71:20:68:40:74:c9:01:a1:99:51:
54:e4:c1:b3:41:25:37:68:c9:89:93:94:37:8f:39:87:3b:37:
e9:0f:52:ec:08:6a:d7:c7:1b:4c:e9:ea:79:72:8e:85:ef:28:
05:85:e5:02:4b:1f:b3:ad:9d:67:a4:f9:23:0e:7d:b1:9f:15:
56:52:5e:a0:6f:a8:c3:41:cb:56:a7:0e:32:1c:43:87:80:8e:
4f:89:e1:58:28:5e:ed:4b:5c:cf:a5:6d:c2:47:31:b2:7e:ff:
a0:04:34:5d:26:d2:b7:71:83:c9:99:d0:d0:bf:96:22:f3:4f:
69:5c:e7:8d:51:56:4c:68:98:f9:a7:bc:aa:05:c9:4b:81:64:
43:0a:65:20:de:68:e6:cc:d5:2d:98:6b:37:43:cb:c5:05:d9:
c7:fc:45:25:47:57:77:ce:5d:ec:04:53:06:41:51:77:67:4e:
44:a1:07:a1:69:71:e5:95:c6:7e:64:4c:8b:6c:48:51:50:28:
e8:a7:14:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:03:50 2026 by rpki-client