Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: jZGqSqeZStzkEAIJjATYTgeyL57MLhlac3+5eDqTpPY=
Subject key identifier: B8:E8:94:19:AC:17:9B:10:AC:A3:47:D0:9D:D7:DA:18:AF:5D:F1:2B
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 01A0E81D1F2F6EDA4C776B7BDBDEE5C6C556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0D90
Signing time: Mon 28 Sep 2026 13:03:37 +0000
Manifest this update: Mon 28 Sep 2026 13:03:37 +0000
Manifest next update: Tue 29 Sep 2026 13:03:37 +0000
Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: 3gC1pgEQceV7QDnnf9ZT/i1010AWWY7oi2rU8liwUB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1d:1f:2f:6e:da:4c:77:6b:7b:db:de:e5:c6:c5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Sep 28 13:03:37 2026 GMT
Not After : Sep 29 13:03:37 2026 GMT
Subject: CN=b8e89419ac179b10aca347d09dd7da18af5df12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9c:a6:8a:44:a9:a4:ae:4e:f3:7f:7f:d1:07:
78:c7:8b:46:2d:dc:8d:23:c5:ba:46:75:d5:a4:4c:
05:07:50:f6:65:68:12:fb:6b:6f:09:84:f1:1a:f9:
fa:35:22:d2:65:6a:5e:5f:d0:8d:8f:aa:0a:fd:04:
a5:cf:24:03:22:ee:0a:38:df:9a:17:d1:ee:2c:84:
a6:ea:3c:b7:e7:bf:84:19:68:ca:ed:ea:a8:38:3e:
52:ca:42:19:91:e0:14:08:c3:37:66:51:ef:01:93:
e8:3c:e6:db:58:89:20:98:db:92:be:e4:67:1b:94:
fe:4b:07:44:09:ba:39:8b:d7:ee:c7:95:fd:95:f2:
be:de:d4:0f:0b:93:02:7a:b9:d6:41:78:a6:31:a7:
1e:9b:33:ac:2a:b4:ed:36:54:ec:50:71:8b:d4:6c:
a0:0c:56:73:a9:0e:88:b9:7c:72:60:a7:c2:8a:34:
ac:fe:c8:1a:f8:aa:1c:ab:fb:ff:dc:b0:e2:bd:8a:
5c:c4:7a:8f:95:f5:22:d4:99:f7:c7:01:b4:02:29:
78:74:45:1f:5a:35:99:27:e2:d1:9a:e9:ce:5e:85:
bf:b0:4c:99:e7:89:f8:b4:f5:e1:7b:75:d2:f5:87:
87:35:f4:d5:69:34:3b:f0:65:f8:0f:f4:7f:fb:94:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E8:94:19:AC:17:9B:10:AC:A3:47:D0:9D:D7:DA:18:AF:5D:F1:2B
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:95:98:18:6a:82:c3:6c:12:d2:1c:d9:b4:1b:a2:62:94:eb:
09:87:5f:7d:46:f1:8a:e2:38:cf:1a:0e:d3:35:8f:a8:f6:5b:
e0:c6:9c:f6:c8:bb:6d:f8:d1:d0:3c:74:06:95:53:2f:4c:f7:
65:4b:2e:50:02:9e:33:1e:0b:75:dd:ce:8d:4c:e2:25:fb:00:
cb:3a:e4:46:f0:7b:a7:02:ed:a6:f9:39:e5:1d:ff:8d:77:df:
b7:df:92:84:16:ec:5b:da:27:4a:98:cb:3b:ad:3b:7e:25:85:
3a:31:98:ed:b4:c1:da:61:c6:f8:cf:10:5a:f3:08:fc:17:8c:
4a:60:38:ee:65:b3:4e:b4:1d:b6:36:9f:c7:e2:87:e8:5e:cb:
65:c1:b0:a5:3a:3b:d1:6d:71:3c:61:4d:2d:1a:a6:75:80:d5:
0f:06:82:8d:f2:96:42:a4:41:5e:76:1d:fa:9f:3b:8a:56:47:
c3:cf:36:95:1a:fc:98:83:73:65:30:78:10:c9:6a:e8:ea:34:
b2:97:eb:4a:2b:e6:27:14:a2:5d:67:49:f0:79:7c:bc:4a:b9:
e2:ad:fe:ac:80:82:41:c0:ac:e8:88:a6:65:45:b8:80:c0:4e:
cd:b0:50:7c:07:80:c0:81:61:d6:85:22:75:9a:23:f2:a3:c8:
51:a2:40:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:38:20 2026 by rpki-client