Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: 0uwtx8bwxiNQWUSF9jfnjjInyRoLaq6ZLmeMlIZY4Zw=
Subject key identifier: 3C:B6:F4:C5:58:5E:CD:56:B5:68:97:C9:C8:2A:48:91:5F:E5:F2:5B
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 01A0CA47CD235CF1DC32DA8BF0354CD29E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 1900
Signing time: Tue 22 Sep 2026 18:01:38 +0000
Manifest this update: Tue 22 Sep 2026 18:01:38 +0000
Manifest next update: Wed 23 Sep 2026 18:01:38 +0000
Files and hashes: 1: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (hash: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g=)
2: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (hash: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: +KzGBW175QlWXEn6CVsL7ACq9NcGhQlk3L0xVXkKz0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:cd:23:5c:f1:dc:32:da:8b:f0:35:4c:d2:9e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Sep 22 18:01:38 2026 GMT
Not After : Sep 23 18:01:38 2026 GMT
Subject: CN=3cb6f4c5585ecd56b56897c9c82a48915fe5f25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:44:54:50:b2:c5:46:9c:fc:7c:f4:1d:ae:
df:61:65:15:20:92:46:f4:9a:9d:97:c6:83:97:37:
62:06:0b:be:7b:1c:8c:8f:de:5e:cb:01:85:be:b1:
78:95:7c:91:cd:d6:43:94:74:e3:46:17:ed:d9:52:
67:7c:19:a0:34:06:df:a4:9b:00:de:22:1d:1b:af:
c8:3b:1b:10:dd:83:f4:6c:62:05:dc:7a:6d:b6:52:
de:e5:1f:a4:20:fb:b2:1a:89:22:3d:ab:65:ee:98:
de:fa:83:d0:97:5d:f6:43:80:fa:c2:21:10:b2:cc:
38:25:48:a8:1d:fe:e8:d9:d7:27:ee:2e:97:93:30:
7f:9a:a5:8b:57:70:77:09:59:46:7e:a9:e1:5a:e5:
d3:33:3b:87:92:cb:f9:98:37:6f:90:51:c6:0c:5d:
32:d6:04:49:74:20:cb:d1:d3:83:fb:ec:5b:69:c2:
78:0a:40:f2:a7:25:69:d3:a8:6c:9a:1f:91:e6:4f:
8d:e9:49:78:0e:f0:30:29:d6:e7:53:8c:2f:f6:56:
a2:49:4e:e9:28:e7:a5:7b:dd:83:c5:69:d1:b2:8a:
b7:b5:0d:d0:76:94:5f:f9:ea:70:88:08:88:b7:c7:
d0:78:7d:51:38:f6:b8:27:9e:be:2f:ef:f2:ba:6b:
a0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B6:F4:C5:58:5E:CD:56:B5:68:97:C9:C8:2A:48:91:5F:E5:F2:5B
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:82:86:eb:2d:15:02:c4:6d:09:31:2e:c4:21:cb:94:f9:a3:
2d:74:9f:0b:51:f5:86:80:c3:05:3a:9e:1c:dd:38:70:a5:f3:
a1:88:e2:53:f3:39:20:fc:d1:6d:f6:54:03:4a:89:5b:f0:1a:
96:ec:f0:6a:6d:c0:00:2d:b5:49:0d:97:0e:5f:36:1f:34:34:
85:95:a4:a4:68:3a:c1:bc:a8:37:ec:1f:bb:c9:ea:ee:07:91:
d5:4a:4c:58:73:e1:95:fe:c3:b0:fe:69:41:c5:ac:2f:f8:0c:
c6:60:5a:72:0b:18:30:f6:1a:b9:c9:66:3e:41:b7:5f:c7:8d:
5c:e7:a7:08:fe:d6:e1:3a:89:4a:65:fb:49:d6:27:92:76:73:
04:52:67:7c:58:40:1a:50:f5:99:c7:6e:46:00:6d:a5:95:0f:
e3:1d:36:98:2f:d3:17:b8:b3:f9:d6:d3:bd:19:5b:6c:9e:53:
69:f8:1d:89:6c:dc:48:05:9c:38:d3:e6:c1:3c:00:cb:9e:cf:
ce:4d:0c:5a:a0:92:9c:e0:42:87:e3:ad:2d:f0:f8:90:53:c7:
0e:d6:af:d8:f0:33:12:d9:c0:b4:70:1a:f0:3d:ab:64:2c:b9:
21:72:95:04:88:ee:a8:7e:f6:a3:97:d0:65:4f:74:56:72:9c:
7d:01:f4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:38:56 2026 by rpki-client