Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: D06g0Bb1B9jYhzbzu3bDAxMjBZANXVZkynhl8fFA2bk=
Subject key identifier: 22:F5:28:C8:79:9E:AA:61:9D:BE:3B:40:54:6C:E9:9E:35:AC:63:03
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 01A0CAEBD74CA8B41FE6661919656C656CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 1A3E
Signing time: Tue 22 Sep 2026 21:00:48 +0000
Manifest this update: Tue 22 Sep 2026 21:00:48 +0000
Manifest next update: Wed 23 Sep 2026 21:00:48 +0000
Files and hashes: 1: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (hash: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: Se2z4sLCu/1MWY4p9FLOwzc1XimQwOr8l0sssm5ezdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:d7:4c:a8:b4:1f:e6:66:19:19:65:6c:65:6c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Sep 22 21:00:48 2026 GMT
Not After : Sep 23 21:00:48 2026 GMT
Subject: CN=22f528c8799eaa619dbe3b40546ce99e35ac6303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:e0:e7:ea:39:0d:c0:a6:aa:29:fb:cf:b5:
46:ea:3a:39:6e:71:30:68:fe:66:e8:9e:7d:1a:c6:
26:92:4c:c8:8a:6f:40:0a:6e:0e:d9:7e:5b:d1:6e:
b1:a9:72:be:0f:6a:45:e2:27:8b:25:b2:1a:b2:25:
47:0d:9f:0c:8b:e8:24:0d:d0:2d:72:be:45:6a:04:
ee:fc:cf:76:90:9a:2d:b0:13:30:b5:be:91:38:33:
aa:79:e1:fd:3c:af:35:bc:78:18:cc:6f:6a:52:00:
47:7e:b7:ce:3e:8d:57:e6:df:4c:7f:ad:a5:44:20:
f0:2a:12:47:6d:0e:60:d3:88:1a:75:1c:85:4a:ab:
51:54:36:dc:12:94:b5:64:1e:47:ea:15:cf:b4:31:
a7:f8:a8:1e:55:3f:22:3d:2b:ef:1c:70:41:db:c9:
24:77:42:68:9b:cd:ad:3a:63:50:5a:0c:d6:59:1b:
e5:d7:b0:e1:87:b1:f1:77:23:47:2a:4c:45:c2:d4:
bf:fa:d3:47:58:5d:77:aa:0b:c8:e6:d6:1b:49:ac:
2c:4a:39:fb:58:60:70:46:d9:e0:d1:49:e6:bf:76:
4c:bd:36:d2:fa:72:b6:1a:d3:df:8f:5e:fa:46:d4:
4a:a0:a2:72:2f:0e:63:30:8c:d0:23:4a:bc:88:f0:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F5:28:C8:79:9E:AA:61:9D:BE:3B:40:54:6C:E9:9E:35:AC:63:03
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ee:8f:69:62:8d:e9:eb:a8:a8:ff:48:54:27:ee:74:b0:4a:
4c:6a:9d:37:db:ae:5c:84:2a:8b:f9:65:45:08:c5:26:42:4f:
b3:e6:79:b9:7f:46:1e:a7:24:91:b9:5d:cf:2f:91:44:e1:6a:
bc:b9:5c:df:30:c6:50:6c:5c:c5:84:fd:39:92:87:52:00:48:
c7:63:24:25:46:78:b0:47:ea:79:e1:b1:62:61:24:66:7d:b3:
31:8f:d6:01:23:4d:e8:9b:7d:18:5b:87:1f:77:a6:55:9a:85:
de:56:0e:f5:54:53:03:b1:80:75:66:b6:0c:6f:5b:a5:16:e1:
5c:ab:39:fc:6f:79:33:d3:06:c5:88:a5:4e:fb:2a:23:af:e7:
26:02:c6:e3:61:be:75:a4:af:4a:43:b3:e9:85:44:a6:1c:56:
20:51:b8:56:ab:ec:3c:73:c4:c8:f9:9f:43:f3:9c:94:e0:dd:
99:db:b6:a5:00:e0:57:e6:e9:1d:91:d9:75:0d:3a:35:e0:c0:
cc:bd:d3:61:98:c6:8d:1c:62:57:80:95:b4:82:11:6c:8e:bc:
82:51:64:b5:f7:0f:2a:0a:8c:10:e8:5d:4a:c2:f9:83:31:84:
f3:ec:b0:4e:cc:09:4a:d8:78:5e:ef:ee:9e:41:6a:1c:77:e0:
75:41:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:58:56 2026 by rpki-client