Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
File: hp2fc3396q0-lfhm6NMqZsT4oLI.mft (raw, json)
Hash identifier: bOFRwyItWkjgiDR80dpdBMEmDHWmDhwIMYjQokBwmdA=
Subject key identifier: 0B:F4:90:44:53:53:B7:80:0F:6B:B2:78:7E:86:6B:A5:48:84:DB:0A
Authority key identifier: 86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
Certificate issuer: /CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Certificate serial: 01A0C09EBBED2623EC24C36E3A8C3C107186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
Manifest number: DD
Signing time: Sun 20 Sep 2026 21:00:23 +0000
Manifest this update: Sun 20 Sep 2026 21:00:23 +0000
Manifest next update: Mon 21 Sep 2026 21:00:23 +0000
Files and hashes: 1: 7Tyv75qflu1MI2EbiYIYOe-EMOs.roa (hash: VD2V/Wqx8qVUzX6JNvOF1zN+nPxKD5Y7QjXuUoG/ZVc=)
2: hp2fc3396q0-lfhm6NMqZsT4oLI.crl (hash: biVnX6UsboIArCMHHskPra8Vpq3E3ctLMpCp3s12q4o=)
3: ylnh5jHJGqU5w3NKWDSXLJQlbV8.asa (hash: DhXmkIGv0YJ5BrhiAQaTPI3U/c809JbcweCxcOd5t5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9e:bb:ed:26:23:ec:24:c3:6e:3a:8c:3c:10:71:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Validity
Not Before: Sep 20 21:00:23 2026 GMT
Not After : Sep 21 21:00:23 2026 GMT
Subject: CN=0bf490445353b7800f6bb2787e866ba54884db0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:5d:6a:e0:32:94:e4:74:6e:6f:0b:1d:6c:
d1:4f:e0:7d:09:d5:23:e9:1a:91:36:af:1d:54:66:
05:bc:4d:de:a1:4e:22:8e:49:14:e9:6d:e2:87:7b:
6c:7d:a9:9d:86:10:6f:82:45:dc:b2:db:e4:e8:f0:
44:15:34:5f:29:fe:36:ac:e8:78:ec:22:6d:35:86:
dc:e9:8f:e2:23:08:9b:a9:59:13:d9:fb:01:c6:16:
1a:32:b7:69:2a:4e:aa:fa:7b:ca:9c:de:06:37:95:
7c:f7:22:06:ee:4b:cf:96:71:a2:eb:1e:41:38:23:
e4:cf:02:f7:0b:d1:bb:6e:1d:aa:fe:94:a3:55:a7:
e8:fb:54:2d:02:7c:ad:5a:0d:78:d6:90:8e:0f:ba:
26:78:16:4b:41:47:cc:42:0c:fa:55:61:be:13:1b:
de:58:35:54:86:03:9a:0c:96:f7:ee:f3:1c:06:56:
94:4d:86:a2:f0:f4:04:34:9d:7b:52:3f:77:86:83:
61:fc:aa:2b:8d:44:ea:fd:26:5c:93:37:e8:3b:a4:
b4:08:1f:e7:b6:73:c5:7b:17:a7:0e:a3:5f:f0:aa:
47:e3:80:8f:66:eb:cc:1c:1d:96:0b:13:83:9b:2f:
db:24:e6:dc:74:f4:44:7e:73:cd:23:11:46:c9:ba:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F4:90:44:53:53:B7:80:0F:6B:B2:78:7E:86:6B:A5:48:84:DB:0A
X509v3 Authority Key Identifier:
keyid:86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:13:dc:5e:a7:30:63:19:99:b1:55:36:0c:eb:a6:3f:7e:90:
0b:b8:1c:df:a9:6f:87:be:69:ef:1a:1d:1d:08:52:72:78:18:
e0:6d:1f:cb:1d:8d:28:1d:b1:ec:d3:12:48:49:86:f9:30:e7:
ec:f1:51:ee:09:db:47:d3:d6:26:60:9d:c4:7e:93:56:9d:e2:
a6:d3:9e:cc:81:ed:b4:00:bb:e9:3d:4f:c5:5e:14:d6:c4:f1:
18:da:1e:53:72:69:3e:7f:e2:bf:38:fe:32:21:48:4a:85:df:
9c:8d:b7:34:1e:29:66:6d:18:03:e0:76:b9:35:1a:cc:5e:1c:
4d:b2:2b:62:7d:63:83:ed:3e:d2:c6:43:b9:ae:04:ea:8b:a2:
9f:82:f8:d3:b8:a3:58:34:28:7c:5a:7a:c7:de:06:c1:d8:b1:
33:bc:b6:90:c5:ef:7a:11:f4:6b:ec:81:30:41:49:4c:6f:5f:
15:68:0c:b2:86:00:a1:36:bc:86:9f:42:d2:56:17:f7:73:6b:
21:e8:cd:9f:bf:98:23:8c:b3:3d:ca:6b:69:de:2f:c7:b9:53:
c5:4f:71:08:8e:70:0e:b1:81:6c:8b:68:b0:0c:c0:77:8b:1d:
db:6e:b7:61:92:3e:c6:e6:33:82:c4:bf:14:6e:d1:7b:6e:52:
96:12:13:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:16:22 2026 by rpki-client