Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: Zstcj2Dl1sh/JElPcJeBsRPmnqPs/whZQnsvjGQwivE=
Subject key identifier: 11:A7:89:F3:05:6D:2B:0C:A6:EA:0A:F1:60:13:EF:14:96:D8:E4:C3
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 01A0D0EE11D8ED3403E52228377F81FFA7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 01:00:58 +0000
Manifest this update: Thu 24 Sep 2026 01:00:58 +0000
Manifest next update: Fri 25 Sep 2026 01:00:58 +0000
Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: iUUayZ0LZwyGCM+BrATut5NTZi8l7SoMLR8g4SvweQ0=)
2: z_fYCrrGSV54cj1knb3xBk4SK5U.roa (hash: EFlql6uKuI4YQL66OtBnNw+c0chssYW8DVC7ieJRlbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:11:d8:ed:34:03:e5:22:28:37:7f:81:ff:a7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: Sep 24 01:00:58 2026 GMT
Not After : Sep 25 01:00:58 2026 GMT
Subject: CN=11a789f3056d2b0ca6ea0af16013ef1496d8e4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:6c:32:aa:d6:0e:fd:78:3a:b2:cb:f6:79:
27:43:73:95:09:d9:0d:79:d8:e3:b9:a6:49:c5:2d:
f6:5f:7b:1c:9f:d5:97:61:7b:c8:68:c0:fa:a3:09:
b8:92:55:7b:a1:34:88:cd:95:d6:7b:15:5f:a7:12:
09:aa:fe:ae:1e:23:bd:d8:9e:99:52:76:45:dd:de:
21:3a:a7:09:31:4c:5f:15:93:79:25:9e:e8:a9:ea:
60:35:e0:ed:06:9b:7f:ad:28:46:ba:d9:ae:e5:65:
9d:04:75:99:0a:9e:16:06:2a:7b:62:1f:e0:08:47:
05:ac:cf:c4:9d:ac:40:6e:98:a7:7b:f0:5c:a0:70:
c0:98:0f:d0:78:76:3d:08:02:93:8c:71:cc:02:3f:
26:2f:b8:df:1c:3a:1c:ee:c2:ab:0b:ff:bb:05:31:
5a:a0:3b:84:2f:04:3d:44:8f:ef:3a:bd:26:35:19:
08:af:e2:89:7d:0a:5c:bd:0d:09:51:9a:c5:c5:50:
c0:5c:d1:56:b7:fb:d2:87:bf:75:33:b9:9c:2e:12:
23:71:2c:f5:79:93:3a:50:bf:b8:69:11:3c:ab:98:
59:ba:60:74:54:43:37:15:fa:55:c2:15:1c:77:c4:
66:05:33:24:49:9c:21:4b:55:3b:89:6a:fc:a7:0a:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:89:F3:05:6D:2B:0C:A6:EA:0A:F1:60:13:EF:14:96:D8:E4:C3
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a2:f1:7d:fe:25:79:f1:3a:fc:c7:e5:f3:1c:88:e0:30:b8:
05:11:19:c7:3b:e9:c6:53:7b:87:c4:fa:7b:d3:c6:1f:9d:21:
13:59:a3:73:26:c6:c0:80:fb:ed:6d:b5:55:6a:49:f4:9c:0f:
9a:5f:ed:f9:c8:d4:a4:2c:2d:30:8d:15:ac:87:1b:a0:46:b5:
80:1f:5d:c4:45:74:6c:8a:00:f6:e7:4d:27:7f:85:9d:23:fe:
84:dc:af:e1:ca:41:11:2c:64:a6:c8:8b:46:8b:d5:de:07:37:
6b:39:a4:f2:05:d2:0a:7f:4a:99:2d:0c:78:c2:7c:4a:15:81:
fd:9d:ad:e3:6a:35:a5:32:53:0b:39:0a:54:24:db:4a:ae:24:
8a:35:44:37:80:0e:d7:ad:e7:e0:f4:89:9c:9b:be:65:d1:b1:
87:75:01:4f:58:9a:97:90:0f:19:4a:bf:c4:b1:71:a5:11:5a:
ca:ac:a9:9c:0b:83:76:ab:58:40:7a:f7:d3:12:12:08:4f:53:
7d:ef:44:93:63:d7:fa:2b:2d:56:2f:20:af:72:0a:3a:27:65:
2f:de:e5:9e:ec:a4:ce:d5:47:59:92:29:4a:c5:48:33:24:43:
11:70:8f:31:d1:da:b4:f2:26:96:7c:e5:23:7b:1e:7b:fc:24:
03:b8:6d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:30:21 2026 by rpki-client