Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
File: hB_ManHx4Ri9ybHAa8yAEb09ML0.mft (raw, json)
Hash identifier: fmX7/fj1zJwWdmnrtaoKVUHewMhdFYRnWzHqrSSATBg=
Subject key identifier: 85:D6:2E:1D:95:66:09:95:B0:FA:43:42:EB:3B:0F:71:33:E8:E2:F6
Authority key identifier: 84:1F:CC:6A:71:F1:E1:18:BD:C9:B1:C0:6B:CC:80:11:BD:3D:30:BD
Certificate issuer: /CN=841fcc6a71f1e118bdc9b1c06bcc8011bd3d30bd
Certificate serial: 01A0E3636E6303E70B4F3D7669D553FD6EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB_ManHx4Ri9ybHAa8yAEb09ML0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:02:19 +0000
Manifest this update: Sun 27 Sep 2026 15:02:19 +0000
Manifest next update: Mon 28 Sep 2026 15:02:19 +0000
Files and hashes: 1: 7wuJBsTlCvMrXFT2hL5huDS2k5I.roa (hash: ORzrQnvsufAfber3BkyjXEBdXtY1ExPpP1tmxd/MKAI=)
2: hB_ManHx4Ri9ybHAa8yAEb09ML0.crl (hash: NOnmd2UAdbYTN/vXenji5AtXTSr3rqSOg86P9znREOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hB_ManHx4Ri9ybHAa8yAEb09ML0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:6e:63:03:e7:0b:4f:3d:76:69:d5:53:fd:6e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841fcc6a71f1e118bdc9b1c06bcc8011bd3d30bd
Validity
Not Before: Sep 27 15:02:19 2026 GMT
Not After : Sep 28 15:02:19 2026 GMT
Subject: CN=85d62e1d95660995b0fa4342eb3b0f7133e8e2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:65:d6:9f:19:ff:a8:03:d4:a9:05:37:80:
bb:5f:aa:be:02:a9:bd:5d:dd:00:57:69:37:09:90:
5f:45:f8:a7:f2:51:04:01:e5:73:e3:c0:3a:b1:5a:
ca:60:73:3b:e7:a6:13:1e:0a:d8:45:39:96:4e:06:
4b:f1:9f:bc:3e:df:38:bf:b6:fa:90:d2:73:67:2c:
b0:e2:6a:ef:9c:d5:17:71:77:10:ff:16:e5:b4:bc:
f4:a3:30:88:9c:ec:88:4e:ad:9c:00:9a:29:83:f7:
a9:18:e5:09:f1:7e:7b:70:ae:b5:ae:cd:93:3e:02:
5d:c1:cd:8e:a9:70:a4:e4:99:40:6d:5b:4a:6b:e5:
9f:a0:8b:97:10:58:18:62:23:30:b0:c0:95:f2:e2:
f2:a5:f3:23:96:85:08:2e:21:82:9d:db:eb:48:e9:
71:e5:b3:c9:04:47:30:94:18:e8:e8:6b:7d:98:14:
a6:da:eb:e1:f7:51:d2:5e:f5:86:e9:b2:9c:f4:6b:
1a:d4:20:29:dd:e2:9c:5b:62:95:4c:de:7d:76:6d:
e2:9c:1d:c5:7f:74:82:12:73:ee:26:fc:a9:d9:1b:
d3:32:07:75:2b:28:77:de:e4:ec:b8:83:e7:e8:a0:
4e:33:b4:1f:6b:4d:2e:86:d1:87:9c:fa:d2:ef:28:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D6:2E:1D:95:66:09:95:B0:FA:43:42:EB:3B:0F:71:33:E8:E2:F6
X509v3 Authority Key Identifier:
keyid:84:1F:CC:6A:71:F1:E1:18:BD:C9:B1:C0:6B:CC:80:11:BD:3D:30:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB_ManHx4Ri9ybHAa8yAEb09ML0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:af:56:b6:0e:3c:06:b8:6c:34:4a:50:ad:26:2d:9f:6b:ad:
9e:81:42:51:0b:d9:84:d2:a1:b7:ed:e3:a2:28:22:b2:cd:92:
ad:18:78:d8:55:4e:d8:b8:f2:fc:d1:a5:34:45:30:03:26:74:
92:d1:86:7e:1d:e2:c3:4b:74:0d:02:4f:d2:21:86:3f:0b:52:
cb:ab:81:92:9e:00:7b:0e:2d:d0:6e:bf:b9:88:e0:93:aa:49:
04:f3:60:48:6f:83:da:6a:0a:70:16:f0:bf:cd:09:fa:48:cf:
bc:80:93:78:1f:5e:8e:c2:67:b3:32:db:60:96:44:71:ce:14:
a7:c7:49:d9:a7:ad:8c:e0:24:87:2c:c8:94:2b:83:7a:09:2b:
41:a0:be:34:00:8b:8c:52:45:1c:69:8c:df:01:16:ae:d7:f2:
97:f1:17:58:cb:1f:b0:68:c7:07:0e:1f:c7:91:f1:83:83:71:
0e:cb:09:e3:75:d1:17:73:96:cd:e6:2d:7a:e3:49:1f:f8:e4:
ea:74:91:03:6a:27:08:e6:f3:26:e0:da:5d:d3:12:1f:bf:5d:
be:9b:f5:3f:14:16:b0:81:a6:76:13:9d:a6:11:f1:d8:fc:d0:
e8:28:1a:0f:2d:38:89:dc:61:da:05:d5:21:30:b6:db:d2:a8:
6e:ff:c3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:53:58 2026 by rpki-client