Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
File: hkEGVA8wqdzfjvm-cv_vi9inLlw.mft (raw, json)
Hash identifier: 9Zv+X3TRZqGC0lYahCRvCjM0+nshp/Ooly6gQz7TSaw=
Subject key identifier: 3B:F6:D5:1E:4E:EC:4B:9E:1C:05:83:08:66:4E:2C:4F:14:5A:82:1A
Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Certificate serial: 01A13D1321B9A78878F3CA5512A48D7CED13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 01:00:26 +0000
Manifest this update: Thu 15 Oct 2026 01:00:26 +0000
Manifest next update: Fri 16 Oct 2026 01:00:26 +0000
Files and hashes: 1: YUe1ZMCdkqc_MHxs6Jml6xtaZmY.roa (hash: yfGpXBMwfuCn+DMxXYn3DWhF4inc0qBH11Kt+d+QCNw=)
2: hkEGVA8wqdzfjvm-cv_vi9inLlw.crl (hash: g7js8VK9u0BkvwLuN4uyPL8lsn/RYBdHd9iRWBp58xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:21:b9:a7:88:78:f3:ca:55:12:a4:8d:7c:ed:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Validity
Not Before: Oct 15 01:00:26 2026 GMT
Not After : Oct 16 01:00:26 2026 GMT
Subject: CN=3bf6d51e4eec4b9e1c058308664e2c4f145a821a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:6a:f5:48:3d:47:3f:f0:31:cf:1b:8c:c0:
50:9c:f8:60:87:fc:b7:b1:94:ef:af:ee:db:e6:b6:
d0:33:0b:ba:a3:74:95:51:44:83:e6:50:c9:a3:e2:
0a:e7:6f:6f:aa:7f:0f:84:e3:92:91:0e:c7:6f:af:
ca:89:76:e2:9a:03:15:cf:08:d9:78:4e:f3:22:09:
5f:23:5a:b0:3d:24:09:93:9d:17:5f:ab:3e:5d:37:
da:50:49:ba:e5:83:60:d6:41:ad:1b:ea:7c:97:09:
db:54:c6:90:2d:16:c8:dc:f8:ec:3e:15:3d:58:87:
f7:d9:99:7d:62:1b:72:a4:d6:42:4c:88:72:ce:5a:
55:45:e4:d3:ee:2a:5c:93:cf:76:b7:0d:1b:a4:e7:
a7:a3:a0:59:57:65:4d:c1:3a:2f:c6:92:21:f7:13:
3b:da:be:f9:25:ba:d5:57:f9:a5:97:73:56:50:97:
84:33:9b:72:5e:ab:a8:db:bc:23:f5:aa:27:d5:61:
14:21:2e:ed:b3:cb:07:97:39:3b:96:ca:63:d4:bb:
50:5e:e9:30:5c:96:20:68:10:f4:2d:f7:3e:a8:8b:
15:a5:db:6c:e6:43:8f:b7:c1:60:61:fa:7c:39:bd:
64:c1:e9:6d:26:31:61:4b:fd:c7:60:52:48:11:bb:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F6:D5:1E:4E:EC:4B:9E:1C:05:83:08:66:4E:2C:4F:14:5A:82:1A
X509v3 Authority Key Identifier:
keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b4:17:c2:3d:15:84:79:e0:a6:c2:cc:bf:5b:d3:c7:65:19:
26:b5:48:7c:f2:5a:88:28:b9:da:9b:cc:b9:bf:1a:d2:ea:d6:
b0:93:d3:a6:ac:a7:29:a7:a6:37:5a:04:95:2d:07:f1:b3:f0:
b8:71:82:3b:4f:c7:0a:33:3b:b6:aa:e8:40:56:87:b5:dc:0f:
e7:b4:0c:ba:25:7d:ed:d1:93:d1:f2:57:55:e9:64:38:cb:a5:
5d:8a:9e:6a:4d:ab:3b:e7:a1:9a:31:d1:45:61:6b:cc:6b:23:
58:de:dd:67:e2:17:c4:00:1f:44:66:bc:55:7d:ae:c6:f0:f4:
bf:0d:b4:7d:d6:88:1b:4b:f8:56:e7:39:c0:ee:d4:39:19:d9:
f2:fb:3f:ea:fc:0a:a4:2a:5c:4a:4a:5a:c7:9c:6a:2b:cd:dc:
a0:39:6d:69:6e:cf:ed:3b:59:f5:7b:97:f9:ab:21:02:47:e0:
5f:75:ba:22:c1:25:e0:7e:7b:64:1c:cf:1c:a3:3d:4d:dc:4f:
55:fb:ad:2c:f8:95:1c:1d:e3:e1:df:c9:b1:db:88:ca:ea:c2:
7a:77:ae:0e:d5:97:37:c9:58:31:f3:a5:8f:b8:49:57:03:cd:
4b:e9:e1:95:1a:8a:d6:5a:8d:7a:04:84:b3:e3:b8:24:4f:45:
ff:80:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:21:57 2026 by rpki-client