Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
File: hD2p5CaP63YPx9FbFdrIBCEAhE0.mft (raw, json)
Hash identifier: 6x2r2mWP+MuSK3ZGa4Zaoe+jxl6Tf7dELgkYxpJhuYY=
Subject key identifier: 6F:64:EA:92:44:A4:C8:51:FC:E7:72:7C:1A:0E:CE:02:48:68:16:78
Authority key identifier: 84:3D:A9:E4:26:8F:EB:76:0F:C7:D1:5B:15:DA:C8:04:21:00:84:4D
Certificate issuer: /CN=843da9e4268feb760fc7d15b15dac8042100844d
Certificate serial: 01A126F9EE177EC055866724C60AED44A99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD2p5CaP63YPx9FbFdrIBCEAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
Manifest number: 0112
Signing time: Sat 10 Oct 2026 18:01:15 +0000
Manifest this update: Sat 10 Oct 2026 18:01:15 +0000
Manifest next update: Sun 11 Oct 2026 18:01:15 +0000
Files and hashes: 1: hD2p5CaP63YPx9FbFdrIBCEAhE0.crl (hash: Yw1Hxutw3Tt2MKkmuISRbLqHBdceONfyh2P0ejReW+U=)
2: rr4RQ-DCDBuAfMwBxiVc7Iv6mmA.roa (hash: HtTDo1JiMJWwkQ/8kVU3J37roBmSdVOD0uWibm9pNdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD2p5CaP63YPx9FbFdrIBCEAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:f9:ee:17:7e:c0:55:86:67:24:c6:0a:ed:44:a9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843da9e4268feb760fc7d15b15dac8042100844d
Validity
Not Before: Oct 10 18:01:15 2026 GMT
Not After : Oct 11 18:01:15 2026 GMT
Subject: CN=6f64ea9244a4c851fce7727c1a0ece0248681678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:ea:83:27:b3:c6:73:94:8c:b5:dc:f4:93:
0a:c4:54:6f:5e:18:6d:3c:84:a8:31:8c:f0:3e:7b:
48:6c:4a:3c:41:75:cf:c3:97:45:9e:9d:12:b2:f8:
95:82:2d:26:41:b6:66:29:17:c7:42:10:e5:46:ea:
f2:9e:41:4c:53:68:3a:c0:a8:bf:c8:dc:96:d1:f8:
df:fe:66:3e:e7:bd:50:f5:f0:4d:32:df:fa:d9:d2:
19:79:02:9e:be:7a:c2:2b:51:06:44:5b:13:a9:62:
02:31:56:4c:e2:02:25:81:8a:79:ac:2c:08:c3:f1:
00:f0:8a:df:78:a6:fc:62:f1:f8:57:d0:44:7c:34:
b9:d0:c2:bc:a8:61:c2:0b:b0:93:f9:92:6c:36:c4:
c5:0a:07:57:ef:97:eb:aa:27:dc:f5:1a:ae:75:90:
0b:af:ac:d9:d3:0c:53:22:60:ba:b6:57:c2:e0:0c:
dc:c0:63:3e:58:ee:8d:06:59:26:ce:38:c4:3d:c7:
8a:0c:f8:8c:81:a0:7b:3f:10:33:db:4e:02:c0:6b:
0f:ec:6c:c1:7d:89:49:6b:fd:4a:2e:13:e9:ed:86:
ab:db:a7:68:29:98:70:c9:37:53:18:cd:d1:68:89:
e6:41:46:af:66:b2:fb:d9:84:e6:e9:eb:91:89:a8:
9d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:64:EA:92:44:A4:C8:51:FC:E7:72:7C:1A:0E:CE:02:48:68:16:78
X509v3 Authority Key Identifier:
keyid:84:3D:A9:E4:26:8F:EB:76:0F:C7:D1:5B:15:DA:C8:04:21:00:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD2p5CaP63YPx9FbFdrIBCEAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:71:24:cb:2e:63:1b:e1:a5:6c:d4:c6:f6:34:2b:0d:39:ca:
db:80:0f:c4:fa:33:e8:21:ce:ec:68:61:04:d8:e4:7d:c4:3a:
e8:6a:50:5d:63:a3:56:57:0e:c6:6f:52:c1:45:86:63:08:39:
75:c9:43:e5:79:e0:cd:43:cf:60:bb:7b:06:c7:d1:9f:16:e1:
51:e2:56:a8:7f:12:bc:0f:2c:11:68:86:df:3a:8e:7c:ad:b4:
ed:8c:28:98:c4:df:e4:fd:f7:74:86:04:df:54:7c:2f:fe:d1:
29:c2:41:90:96:e4:12:01:9a:6d:bf:fc:7a:91:92:95:5d:8f:
77:a1:16:64:cd:01:3a:51:f2:ac:b8:5d:5c:44:01:20:63:3a:
11:ab:2a:85:c6:56:bf:9e:6b:bc:10:18:87:2f:02:b2:ea:e4:
54:c6:2c:2d:d7:4d:e4:f1:d6:be:63:1e:96:45:9f:9f:17:bd:
8b:df:3f:96:10:bb:22:db:58:2c:f7:55:2f:3d:3d:86:37:47:
67:90:fa:6e:e5:16:aa:8b:da:dc:ed:36:23:94:05:99:1f:43:
8c:2b:97:33:21:be:f8:a1:c5:4b:e6:17:2d:17:5f:c4:00:df:
a5:b9:76:22:25:f9:38:2d:26:d8:4d:4a:85:45:a4:ba:7f:51:
8c:35:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:35:28 2026 by rpki-client