Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: jF3rOtO7Dy2Lpm02BhLDf+RK4OF0Kwu2LCtiDqJbKU8=
Subject key identifier: 97:DD:47:43:E4:EF:9D:70:88:C7:E4:27:95:EC:B6:B8:D9:70:E1:24
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 01A0DEE1695DEF48DB62797C3502ABACECFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 02F6
Signing time: Sat 26 Sep 2026 18:01:49 +0000
Manifest this update: Sat 26 Sep 2026 18:01:49 +0000
Manifest next update: Sun 27 Sep 2026 18:01:49 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: n5YvL66qynKkRHk84vCK+/PrCOthyJnwfraqUOv/GhQ=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e1:69:5d:ef:48:db:62:79:7c:35:02:ab:ac:ec:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Sep 26 18:01:49 2026 GMT
Not After : Sep 27 18:01:49 2026 GMT
Subject: CN=97dd4743e4ef9d7088c7e42795ecb6b8d970e124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:78:d8:be:bc:2f:c0:8e:7d:b8:e6:a8:53:2a:
dc:cc:16:02:87:1f:75:7b:2e:cb:e1:ea:01:1b:ea:
0b:8f:b7:1d:a5:83:c3:16:00:01:38:48:39:c7:fd:
22:a6:97:3a:d9:5c:f3:90:22:70:57:57:14:38:81:
ac:ec:42:f5:25:9a:42:4b:3d:11:c0:43:c5:a9:2a:
23:fe:ce:63:c2:6d:b0:5a:9f:12:a0:bf:4f:d6:73:
3c:c9:43:53:21:6f:5b:56:b1:b6:19:4c:cd:4b:c4:
0e:b8:a5:53:c2:94:4b:43:45:17:59:61:7c:f4:29:
72:66:b4:23:77:45:3a:57:c8:2f:e2:43:0b:98:24:
f2:5f:bf:10:ef:e8:4f:bc:2d:88:c3:25:f8:02:ca:
11:90:e4:38:43:94:00:a7:46:1f:bb:d9:a2:85:82:
eb:a4:ab:58:4d:fb:93:9b:0f:5e:f7:9e:17:c8:1c:
bf:ee:1f:73:a2:b7:97:01:f2:8e:2e:ff:ae:4a:72:
a8:5c:6c:92:67:48:d2:4e:f0:c0:95:0f:35:b3:85:
c7:4a:4d:83:26:df:4f:a5:45:b7:0f:2d:0f:d8:92:
34:64:08:10:0c:7d:81:a9:7c:2a:81:e6:44:2c:6c:
b0:bd:96:97:81:66:ee:a5:4c:a6:f7:86:bd:3f:3d:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DD:47:43:E4:EF:9D:70:88:C7:E4:27:95:EC:B6:B8:D9:70:E1:24
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:4e:8e:42:98:23:89:29:f4:71:31:19:a6:ec:69:ae:11:5c:
fe:42:0e:fb:ef:75:cd:be:a0:b4:ee:e9:72:43:1e:bb:36:57:
a9:59:68:8a:70:31:c4:91:60:44:12:f7:6a:be:ed:3b:60:19:
a1:13:1f:09:ff:6a:19:22:b2:9b:c7:dc:21:1e:b3:a9:30:8c:
38:59:60:39:02:ef:27:2f:c1:87:88:ed:c7:b1:58:0e:41:90:
96:1d:6b:c1:dc:48:e7:c3:b0:04:3d:b1:da:d8:d5:52:13:46:
3d:ad:2e:fa:8c:af:51:db:b1:f5:ab:15:9d:10:bf:0d:de:53:
fd:86:4b:cd:46:12:6f:cc:b4:fa:1d:51:c5:b9:45:e2:76:bf:
ac:23:ee:d5:a7:64:88:b9:23:d4:af:1a:db:1e:0c:fe:a7:d0:
ff:4f:e7:cc:08:78:8c:82:89:b8:34:b7:2a:0b:00:eb:2b:00:
34:c3:16:b1:24:cf:ca:67:4a:64:66:89:5c:36:cb:e1:ec:b8:
6a:06:68:b2:08:c6:04:d9:e9:79:27:e1:01:3e:4e:8b:d1:34:
45:8d:11:26:39:83:64:3d:8e:31:0b:3e:3a:01:cd:c3:b4:bc:
de:3a:61:8b:4f:1c:45:f5:25:88:73:44:94:60:7d:65:40:5b:
03:10:a2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:04:13 2026 by rpki-client