Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: oll3fz+HI362N02ob252lTtH4rK4f3PRxF0Wv3ZfIP8=
Subject key identifier: 2C:EA:04:5F:3F:4C:AD:D7:92:1A:17:D2:9A:FC:3B:84:B3:46:42:98
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 01A0C58E8A03B24E2B22CA3D0C0426679132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 171C
Signing time: Mon 21 Sep 2026 20:00:47 +0000
Manifest this update: Mon 21 Sep 2026 20:00:47 +0000
Manifest next update: Tue 22 Sep 2026 20:00:47 +0000
Files and hashes: 1: AskFBvRE4tY5tlit_Gy114m2J0A.roa (hash: J6ljvruIBCWnrpJURNZnlPx/uNcMw2gcnFDVYqRVqz0=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: KBPG91SwdAdG8JZAOfvkZcQur0R9uCWl8nDduWU4fow=)
3: mMleahkhBsxzGvTuhDg0yXEwF_w.roa (hash: qQecQrTvSIfunD3zEv/rPkBZ+0gt71EWgnmmdmDO4Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:8a:03:b2:4e:2b:22:ca:3d:0c:04:26:67:91:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Sep 21 20:00:47 2026 GMT
Not After : Sep 22 20:00:47 2026 GMT
Subject: CN=2cea045f3f4cadd7921a17d29afc3b84b3464298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:84:b7:76:70:48:b1:74:2c:9c:a2:3b:a9:
8f:07:18:4f:7f:e7:de:6d:26:ee:b3:8a:f2:cc:05:
52:9d:87:81:16:49:1e:0e:59:52:19:53:b2:f1:de:
f5:a1:35:9b:e8:67:7f:52:e3:40:4c:e3:2c:e2:df:
e5:be:aa:40:cd:f0:7c:d3:d7:99:5e:f6:f0:89:99:
f2:80:c8:9b:eb:9d:b2:64:15:17:8d:26:b5:53:39:
1e:7e:43:36:38:50:98:ff:26:03:cb:aa:7d:0c:c6:
de:a8:8c:61:52:65:d7:c1:84:0b:13:ba:17:dc:b2:
ca:6b:43:a3:fd:d9:b5:28:1b:1b:5a:bd:74:b1:de:
95:e5:68:3e:80:c4:40:94:64:af:95:7f:34:f3:20:
03:88:a3:a9:24:7f:9e:79:80:e6:e9:9d:b8:96:97:
24:e5:93:30:5e:a0:81:25:06:f8:83:b9:64:38:fa:
27:33:83:0c:a5:db:2e:b0:70:cf:cb:5f:62:dc:84:
5d:fd:28:e6:11:fe:ce:bc:52:1d:0a:da:cc:a8:7d:
ca:61:3e:28:87:cd:67:ef:8e:5f:b9:82:9b:e1:eb:
57:e3:85:3b:9a:15:fc:99:b7:f5:58:6e:03:05:3b:
27:35:06:64:c4:ce:8e:97:c7:1c:56:7d:45:43:54:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EA:04:5F:3F:4C:AD:D7:92:1A:17:D2:9A:FC:3B:84:B3:46:42:98
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e3:b3:e1:84:b9:51:00:b6:7f:e0:d0:9f:d0:77:79:eb:20:
57:d7:50:86:9a:1b:c7:cf:17:46:df:bd:bb:54:16:45:84:80:
59:fc:08:54:53:b7:95:b9:5a:a6:a8:34:45:79:95:6d:2b:cc:
53:18:6f:b0:9f:34:09:c7:ac:9b:a7:bf:78:be:fa:4f:05:b8:
40:66:35:1c:e5:e5:bd:5d:7b:bf:d6:79:7c:27:b4:3c:cf:20:
53:8f:85:8d:af:2e:d1:39:17:25:c0:ab:70:86:a2:11:ed:c4:
9e:84:78:4a:d0:5d:4a:8e:7a:b6:63:dc:e3:e9:7a:fa:cd:a6:
0f:c3:07:84:be:bd:9f:f1:f3:83:63:ec:6b:1f:89:be:b2:da:
e6:1b:85:d4:29:7d:7e:2e:21:44:be:29:27:d1:fd:81:73:ca:
b5:e1:7b:13:2b:46:90:45:82:55:68:7d:47:2a:bc:f6:40:6b:
1d:7b:a4:07:3d:67:a7:72:c5:9b:b8:ce:39:7a:bd:c5:5b:87:
67:53:dd:5d:95:ad:1e:a4:bf:78:86:70:cc:8f:1b:1e:8c:e3:
be:94:a0:9c:ce:c9:8e:12:4c:8f:da:58:d5:46:d9:6d:cd:86:
d8:0f:eb:79:41:ab:3d:03:e8:7c:20:26:f7:45:10:8d:84:5e:
3d:2c:e3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:56:29 2026 by rpki-client