Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: LjzpDg154sd6eNDbFNYHcrnTjyECOu9yM4P9qYzGGNM=
Subject key identifier: AC:2E:A3:DA:9F:0E:8B:81:63:5D:78:C1:94:99:AB:3C:6E:07:1C:06
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 01A0C2562FB5E199DFB637DE931C54A8C496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 1A6C
Signing time: Mon 21 Sep 2026 05:00:23 +0000
Manifest this update: Mon 21 Sep 2026 05:00:23 +0000
Manifest next update: Tue 22 Sep 2026 05:00:23 +0000
Files and hashes: 1: 867F4OQuQLWhRY4aKxKeoxD01B4.asa (hash: +fRCR0HY7fbE+pyBbt7W5yHcfIjIo6aJjDfzPZQv280=)
2: au_k5KTkHwmYgyGwQL9kaGDMGdc.roa (hash: TQ4e7aFpXjYOcX/z8GmwxlZOtaffODMat2Hj3Al3L2Y=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: dmi57p7l6iMI5lb9zstwG86FxntgFEnGL4+X13nLGmA=)
4: iqLo87tMFOB-XBrWIzdU46MRBuE.roa (hash: IzYBLEWXA56LUWCfb8F/l/nPeES5nSXV/ENxm4IRlhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:2f:b5:e1:99:df:b6:37:de:93:1c:54:a8:c4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Sep 21 05:00:23 2026 GMT
Not After : Sep 22 05:00:23 2026 GMT
Subject: CN=ac2ea3da9f0e8b81635d78c19499ab3c6e071c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:6b:54:3b:16:32:75:c0:2f:bd:1e:dd:0d:
73:e5:c6:6c:8f:63:29:cd:60:96:67:d2:e6:dc:7d:
59:b9:6f:e7:33:6c:a9:d0:a2:b9:12:14:30:7d:97:
55:80:9e:d3:45:cc:ec:e0:1e:7f:18:09:58:3e:79:
72:6a:a8:f9:5c:64:c2:1c:09:b9:ad:73:19:33:4f:
06:ec:d6:45:92:0e:bc:61:c1:cc:80:a4:34:42:46:
46:d0:f7:c9:a8:3d:cc:8f:9c:07:9f:7b:49:7e:9b:
4e:57:97:f4:3d:67:1c:34:b3:ce:66:1f:39:11:58:
92:a7:f8:f2:55:50:d7:59:f0:d2:fa:15:31:0a:36:
92:8d:da:e2:52:16:a1:15:8a:a9:7a:cc:08:4f:85:
11:f7:35:22:a9:b9:27:c1:56:7e:3c:ce:09:b1:03:
c7:3c:cb:61:a8:e1:5f:2f:2f:1c:eb:0e:ff:78:11:
34:3b:b1:0e:75:90:47:66:6c:aa:f8:85:77:f4:07:
cd:ad:98:ab:b8:9d:7f:51:63:ee:7e:77:8d:00:0f:
d3:6e:10:14:70:56:6b:d2:34:bc:a1:8d:e3:48:8f:
4d:ab:5b:f9:db:84:11:83:e7:0d:52:04:fc:1f:b1:
ac:29:29:fb:f4:9d:a4:4f:5f:80:b2:b6:6a:93:16:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2E:A3:DA:9F:0E:8B:81:63:5D:78:C1:94:99:AB:3C:6E:07:1C:06
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:46:02:bb:69:1b:74:51:f2:40:71:91:60:d4:45:d0:ac:bc:
d1:df:45:af:a0:55:4e:f1:fe:fa:4a:cd:89:f4:a5:c1:21:ca:
3a:b8:a6:b5:36:71:6b:9e:84:c3:c6:fc:8b:a9:fc:a3:47:82:
6d:dc:22:5c:05:0b:7b:e9:9e:f6:08:42:2b:a7:24:ec:b4:e7:
a6:a6:5a:84:84:95:0e:0b:e4:21:a7:a8:8d:9b:95:64:cc:73:
36:36:19:c1:4f:c2:dc:7a:bf:be:1d:18:ea:97:11:c4:e5:1e:
d5:0c:ba:cd:11:3c:d5:7d:f4:96:19:dd:9e:bd:97:c8:7e:4c:
f1:31:e0:b5:6f:cf:29:e0:d6:a1:e9:0c:4c:5c:8a:2b:03:dd:
76:64:aa:3d:f2:49:a9:3d:bc:fc:7e:bc:df:5d:1b:e3:d3:fb:
9a:14:bd:b1:70:2d:ef:78:4d:b4:d5:10:e3:25:2d:85:0a:d5:
50:27:7b:ed:f0:6f:64:3d:59:81:29:bd:54:2c:43:bf:2e:bd:
c6:c7:9b:ec:42:10:8f:1e:57:62:0f:ba:d2:a4:62:88:97:1f:
a6:a1:11:b2:5a:10:f4:da:ce:51:f3:77:79:e0:a4:77:45:7c:
cf:69:aa:4d:0b:c6:04:1e:e3:90:5c:0f:ff:66:24:61:6f:d2:
3a:3f:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:52 2026 by rpki-client