Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
File: hlsHwonfa8nHYttDKboM48Up_ss.mft (raw, json)
Hash identifier: IBXqpbc6XCT8O5ArNBS8ST7SFIdAPUGFLNGAYm4cvK8=
Subject key identifier: AE:88:3E:75:A3:4C:E7:8C:BF:4C:4B:89:35:A3:92:03:2B:D0:1B:FE
Authority key identifier: 86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
Certificate issuer: /CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Certificate serial: 01A0CD7E7A1F9397EA1447FEBF9651165B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
Manifest number: 0460
Signing time: Wed 23 Sep 2026 09:00:13 +0000
Manifest this update: Wed 23 Sep 2026 09:00:13 +0000
Manifest next update: Thu 24 Sep 2026 09:00:13 +0000
Files and hashes: 1: c-6Hu0Q6KVByexb7ai3zy809xac.roa (hash: veDFchcM2SNVuwzCbLkM0CwAD1EuPwvwRgb+dufQVR4=)
2: hlsHwonfa8nHYttDKboM48Up_ss.crl (hash: zmQBgu1o2jIr7b7MBwvbhs9u3qK9fzqrdYQtoPhVuWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:7a:1f:93:97:ea:14:47:fe:bf:96:51:16:5b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865b07c289df6bc9c762db4329ba0ce3c529fecb
Validity
Not Before: Sep 23 09:00:13 2026 GMT
Not After : Sep 24 09:00:13 2026 GMT
Subject: CN=ae883e75a34ce78cbf4c4b8935a392032bd01bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:20:19:b0:a3:4c:ff:4f:9a:f5:14:32:54:
e5:b1:67:69:0c:bb:1e:0e:39:ba:8a:3b:dd:22:c8:
0a:c0:20:54:9b:26:58:8a:6d:d2:3d:05:64:40:7a:
66:cd:34:51:4e:a0:6b:e1:ea:0b:2b:c1:0c:43:53:
f1:0d:1e:c4:b9:cb:0a:00:d2:bd:b3:ab:aa:fb:1f:
37:17:bd:eb:66:db:2a:a5:54:d7:ef:3f:30:75:f7:
e8:e4:81:db:01:14:9b:f7:97:51:28:e1:1f:bf:2d:
19:5c:ae:66:00:e9:8f:76:03:00:00:8f:fb:a0:82:
26:9f:29:6b:8d:17:26:40:9f:67:f0:e8:ee:c0:08:
90:5e:b6:00:f9:9b:00:94:97:cc:e8:ae:cc:af:c4:
e8:3a:34:08:dd:62:03:8d:f5:7f:41:ad:3a:10:23:
cc:ab:7c:d2:69:c3:dd:eb:54:fa:2f:95:98:3f:39:
02:57:5d:d3:d0:8d:f8:a9:40:dd:24:73:68:d9:e5:
03:5b:b1:a3:3b:49:ba:93:08:7d:cd:ba:62:e1:7a:
e9:23:af:cd:67:95:ec:37:45:c8:86:a4:a1:33:05:
80:82:04:60:8f:7e:34:a9:c1:2d:5a:ff:93:50:b5:
85:cf:96:36:08:51:bf:e1:24:92:b8:f8:84:c8:86:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:88:3E:75:A3:4C:E7:8C:BF:4C:4B:89:35:A3:92:03:2B:D0:1B:FE
X509v3 Authority Key Identifier:
keyid:86:5B:07:C2:89:DF:6B:C9:C7:62:DB:43:29:BA:0C:E3:C5:29:FE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hlsHwonfa8nHYttDKboM48Up_ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4d1ab6-465b-4276-bc4a-2afa303e495d/1/hlsHwonfa8nHYttDKboM48Up_ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:94:1d:13:f8:92:b6:14:1c:1e:e5:15:8c:fd:4a:e9:98:0f:
87:c9:74:96:8d:5e:03:5e:7b:e2:56:31:31:62:0b:34:86:c5:
64:7d:db:f2:cc:8f:b7:5b:d8:a3:88:12:0f:dd:a7:7c:6a:30:
1c:87:11:7e:0d:8a:79:5d:bf:40:b7:d8:a3:09:37:39:22:7d:
6d:5a:d0:47:69:71:8e:a3:b5:07:c1:d8:ea:39:ec:74:b5:73:
bf:c6:c0:cb:34:91:78:23:be:ff:8b:94:b9:17:d8:31:79:d0:
73:e8:71:dc:00:60:1e:a5:06:b2:e5:71:73:80:f5:e3:cc:e7:
8c:c8:86:90:23:ca:e0:5c:e0:59:f6:c3:bb:0d:ee:e4:4a:cc:
0d:22:a5:59:0f:5a:2f:80:50:b7:05:ef:b0:c2:db:51:7c:90:
0f:01:0e:29:4e:93:87:57:70:e2:75:f5:29:dd:e0:6c:d8:3d:
01:8a:a6:a6:fa:d9:cf:e9:53:00:46:62:7d:97:45:84:0c:26:
00:3a:76:0e:5e:ac:8d:66:71:66:55:f1:e0:f8:a3:b9:d3:be:
aa:65:bf:2f:06:73:fd:0c:2e:fa:66:d9:a0:08:b9:98:ec:83:
e3:c8:16:b2:3f:7b:99:4c:a5:7f:37:a0:b6:fc:a0:e3:19:2f:
66:f4:90:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:08:24 2026 by rpki-client