Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: MPBXUWSmORvK9Zc/ASr1S/D69RG/QBLDfcPGblLQiWg=
Subject key identifier: 4C:BA:4B:61:E2:62:2E:1F:06:3A:78:27:DA:50:75:F7:35:DA:39:D1
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 01A0C88EFF65990850ED933790397FEC5D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 10:00:09 +0000
Manifest this update: Tue 22 Sep 2026 10:00:09 +0000
Manifest next update: Wed 23 Sep 2026 10:00:09 +0000
Files and hashes: 1: VlpI70dDa3SXtasYtMfEiBmSD6c.roa (hash: ZCpP7KsMiePX2xsWWMvyuZvFGbNzVM1llSJjyzmPYlQ=)
2: cuqHyO4V93ncme-J7Fr8-_3DTvU.roa (hash: RSEzdn3Ri0wlzenvwY/b18Rq2sLeWzRaHbLOuqaUorY=)
3: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: 2ipSHIUBdf5i3tmmdgKpVigQn7wy9mGnqXnYHtBBI1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8e:ff:65:99:08:50:ed:93:37:90:39:7f:ec:5d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Sep 22 10:00:09 2026 GMT
Not After : Sep 23 10:00:09 2026 GMT
Subject: CN=4cba4b61e2622e1f063a7827da5075f735da39d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:22:5c:65:2b:69:bd:1f:75:50:8f:8c:14:
42:b2:ec:8a:0f:92:8a:19:7f:cc:d3:6a:fe:c4:6e:
a9:4e:16:6a:24:d1:b2:cd:15:f0:09:54:74:58:a7:
fd:c6:94:8b:b5:7a:fc:42:e6:c4:6f:aa:8e:ea:ee:
19:4a:41:43:fd:9a:26:81:28:93:c0:b4:6b:e2:a3:
4a:9f:49:c9:74:1c:aa:89:f1:55:20:59:ae:fd:ee:
b2:db:c6:d2:25:80:09:6c:91:a1:cb:e9:a0:1b:3e:
89:22:7a:49:3f:d2:66:64:5a:6c:95:81:6c:0d:d3:
f8:34:b1:1d:03:1c:42:72:0b:72:5a:08:11:90:f4:
79:eb:7d:2a:0a:ac:49:9d:d2:96:f1:be:a7:af:f9:
3a:e0:37:7e:d1:b6:79:99:db:06:bf:f3:d4:d4:5c:
91:a2:da:a7:2e:b3:b0:b1:71:25:2f:68:c3:fd:dd:
d1:ae:ba:d8:de:d7:59:61:e8:da:ad:1f:8c:a2:1b:
e1:1c:27:e9:b8:29:a3:9d:87:85:a6:a9:c7:95:76:
00:32:46:60:26:3d:83:01:8e:1c:73:d7:bb:72:fc:
23:10:db:22:8b:6a:41:f4:1f:e6:f2:67:77:fa:01:
d3:16:1c:53:55:62:da:da:ba:19:2b:b4:7b:3c:5e:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BA:4B:61:E2:62:2E:1F:06:3A:78:27:DA:50:75:F7:35:DA:39:D1
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:85:69:09:6d:05:69:4b:9c:0f:94:70:91:fa:c0:94:07:8d:
4b:7f:56:57:23:d7:fe:2d:6f:88:dd:28:30:51:21:0b:3a:fe:
48:8e:1a:66:b8:cf:9d:4c:27:23:39:9b:b2:85:65:70:9c:70:
26:17:b8:b2:96:0b:43:15:54:d7:d7:bd:b5:b2:dc:42:c4:04:
48:cf:59:03:4d:dd:68:e5:fe:2d:3d:29:12:24:22:56:b7:f9:
68:8e:b0:85:d1:7d:73:a6:93:6d:e6:f6:96:4d:50:ae:25:e1:
51:c2:0a:62:a4:60:b2:fe:21:e0:24:60:0d:ed:ab:66:9d:89:
24:92:f4:66:e8:3e:fb:71:aa:7e:c2:3c:48:81:8b:16:ec:60:
e0:f8:e2:fe:0e:9c:c5:47:b4:1a:76:a9:d0:31:83:35:a5:09:
22:a6:bd:82:53:37:d9:02:21:2f:06:4b:f4:11:55:c7:89:10:
ba:28:c7:0e:86:09:3a:6e:5a:38:09:db:40:51:2d:da:59:ee:
21:9d:df:4e:43:d1:a8:79:3d:22:a8:3a:39:72:47:23:73:34:
38:2b:d8:1a:9f:32:78:69:70:26:9a:94:8a:42:5a:89:8c:ac:
3a:7a:9b:62:70:7c:d1:02:6a:e4:a3:f2:e2:1d:5e:89:e8:0d:
00:03:fd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:58:25 2026 by rpki-client