Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: aCQ99nyr29CsWFHyrVKEs5POkeGlNKIgjWIly1RQZUw=
Subject key identifier: 28:70:02:09:15:99:63:DA:3A:91:7C:DA:A4:38:AE:35:34:72:1A:83
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 01A0CCD9F6EED8F8848586A78B5DBE8FD782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 0779
Signing time: Wed 23 Sep 2026 06:00:31 +0000
Manifest this update: Wed 23 Sep 2026 06:00:31 +0000
Manifest next update: Thu 24 Sep 2026 06:00:31 +0000
Files and hashes: 1: 0vS9LuHI8LHmYBf-04B_4EqaTyM.roa (hash: 1w3MTNAtMdbpQhZieDMx1aqfKs/uZi4c3hurmf5nWQk=)
2: YqpC5sn3lPh34dXLCKoe6SIqByY.roa (hash: t3wpEBucnLMbpU9d5Q7NM5fRdV7jRAGiRx7mg/CI4SQ=)
3: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: 5CqOfys7SyLK1vGm81vIV36raGXTQPhrT0nmfM3DXAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:f6:ee:d8:f8:84:85:86:a7:8b:5d:be:8f:d7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Sep 23 06:00:31 2026 GMT
Not After : Sep 24 06:00:31 2026 GMT
Subject: CN=28700209159963da3a917cdaa438ae3534721a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:eb:14:47:99:1b:b0:6e:6f:b4:5b:a0:be:eb:
fd:80:9a:e6:ea:85:ad:33:b2:14:3d:d4:39:5c:ee:
d0:33:4e:31:02:89:da:9c:70:44:57:84:2d:05:c9:
c3:4d:61:9e:04:1e:0b:e5:1b:e2:2d:8f:c9:f7:e8:
99:3f:49:3c:6c:c3:87:1c:10:00:2c:73:1a:60:00:
25:ae:55:c5:f7:82:e3:bc:f7:63:51:45:2a:56:f7:
d7:da:3a:f4:96:75:6e:bf:b3:1b:54:58:25:b4:2f:
67:d3:8a:00:0b:5e:55:71:67:15:ca:50:d3:a6:a3:
fd:30:aa:9f:88:a0:05:7d:52:3c:6d:cd:ee:2d:dd:
5f:e6:47:ac:f8:60:f6:b8:c4:98:34:93:62:4d:9b:
8f:56:03:68:e0:03:2c:76:a9:03:5f:ee:78:58:e9:
1f:37:e1:1f:05:90:8d:74:68:f6:61:fd:2e:72:bc:
12:72:cd:dc:df:48:50:fc:ea:e5:82:70:60:ae:f5:
67:55:c1:f9:df:45:ba:c2:23:a7:42:cf:d2:a6:da:
24:31:b4:43:db:79:18:35:d8:0f:d6:bb:d5:f3:b1:
ad:21:58:7d:0d:e0:dc:fc:09:58:0e:d6:2b:ae:f7:
27:2d:f7:dc:14:55:aa:0c:be:98:37:7b:4b:9b:c1:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:70:02:09:15:99:63:DA:3A:91:7C:DA:A4:38:AE:35:34:72:1A:83
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:33:cb:6e:90:12:49:e9:f0:6f:4a:c6:72:9a:8f:b2:91:b9:
9d:41:1d:ed:0e:e6:07:41:a4:2d:cd:fa:d5:8b:bf:87:e8:97:
e4:dc:de:21:03:3a:13:9a:9b:e5:b4:4e:b3:ea:10:06:5d:49:
00:65:4e:62:ca:8f:34:54:13:ce:55:de:02:95:34:85:16:53:
26:56:2a:28:da:8a:40:1e:9e:be:28:c3:e4:b6:fa:13:e6:48:
b5:44:18:c4:06:29:55:ee:48:e9:fc:76:d3:dc:cc:03:d9:14:
ce:80:b4:10:d4:49:45:7c:e9:8d:91:a3:3b:22:b1:79:8c:fe:
c9:d5:d6:ee:76:bd:64:aa:da:19:bd:a7:92:22:58:c9:2a:2c:
c4:bf:9d:60:6e:7e:e5:a2:04:3b:83:22:a1:5d:a7:7c:bc:fd:
9f:b5:ec:6f:6a:8b:dc:31:5d:e7:a1:92:4c:34:df:5f:f7:e6:
bb:ec:46:07:62:07:33:a4:e2:19:43:95:ef:45:2d:c0:ea:f9:
af:56:9d:46:7d:fe:24:42:5f:d1:72:f7:98:e2:29:89:b2:c1:
27:80:93:b9:89:9d:be:15:73:ae:11:d7:3d:53:0f:51:21:43:
b1:23:24:99:b1:7e:8f:6d:a0:65:fe:c5:ff:f5:07:b8:c4:20:
83:a6:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:01:41 2026 by rpki-client