Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: eUEJDj0pyRa+j2Rf6H6MFutTgR+ZzOKUAQDHo6xneiM=
Subject key identifier: DF:06:8E:E5:A0:12:CE:D9:CA:B3:F5:86:1E:4F:EE:62:B7:EF:FC:B7
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 01A0C6D7EA948EEEEF0689FB419678899642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 1508
Signing time: Tue 22 Sep 2026 02:00:34 +0000
Manifest this update: Tue 22 Sep 2026 02:00:34 +0000
Manifest next update: Wed 23 Sep 2026 02:00:34 +0000
Files and hashes: 1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: 8r94tgbFOIY/ON/dFjCgv3afPOmQJy91Tai1tGAFU9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:ea:94:8e:ee:ef:06:89:fb:41:96:78:89:96:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Sep 22 02:00:34 2026 GMT
Not After : Sep 23 02:00:34 2026 GMT
Subject: CN=df068ee5a012ced9cab3f5861e4fee62b7effcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:9a:ab:8c:e9:eb:75:f9:68:79:36:7d:3c:
3c:14:f2:ee:05:f8:ab:7b:b0:ed:4e:5f:ad:df:9f:
18:68:c7:f0:a3:73:0b:d4:ef:da:4c:7d:92:d8:f3:
e5:9a:16:f8:19:ba:25:39:eb:e5:e7:a7:51:1f:e2:
4e:3b:27:b5:6a:4f:6a:25:8b:a0:6a:0a:05:26:69:
73:57:b2:43:dc:50:cd:c7:ea:75:fa:19:c7:a6:d6:
90:f9:99:0d:26:da:87:c0:f9:65:5c:7a:63:cd:17:
c3:fd:77:58:3e:ca:4e:95:3a:11:4c:91:67:ed:70:
54:99:f3:81:4f:bd:9b:63:67:ce:12:d1:05:53:7d:
e8:a2:ea:9b:93:45:e1:ad:8e:fd:8c:a6:c1:7f:1b:
1c:89:24:d3:fb:c9:54:3a:1b:96:35:74:60:4e:82:
1a:c2:07:50:03:76:ea:6b:94:e9:80:4b:80:f5:45:
10:53:3a:a2:f0:da:d9:fc:9b:9a:ce:1e:3a:29:ce:
8b:69:44:ac:9b:04:7e:07:91:89:79:b1:5a:03:05:
79:85:06:22:a8:36:0d:ab:03:29:d7:6a:a5:18:21:
4c:3d:4c:f3:36:14:aa:5b:18:e9:d6:3c:f2:86:e8:
8b:0e:33:b6:2c:49:91:70:8f:83:8b:a5:1c:11:52:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:06:8E:E5:A0:12:CE:D9:CA:B3:F5:86:1E:4F:EE:62:B7:EF:FC:B7
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:9c:7f:06:e4:37:1a:f6:71:7d:9b:bd:71:31:5f:3e:d1:fd:
55:f5:61:a4:5c:17:a4:24:42:85:8f:3d:dd:6a:7f:35:ca:13:
72:ca:7a:9d:fe:a7:48:f4:df:8b:16:fe:5c:98:97:c4:4c:a5:
45:45:05:90:2a:e0:67:18:01:60:3c:45:a6:7d:92:40:9e:8a:
5c:21:a3:25:94:b8:75:8a:81:ab:fc:3a:d6:c2:4b:c3:0b:ba:
8e:ba:6b:f0:77:8f:62:d9:70:c8:68:83:25:5e:5a:3a:78:25:
70:43:80:d3:c0:fd:ab:dc:3f:21:01:5d:0d:b2:97:c6:78:16:
d8:33:d1:ab:67:bc:a4:e5:d5:92:8a:05:eb:eb:47:e8:e3:f3:
34:88:6c:b2:e2:4e:1a:ea:ef:01:10:e7:55:f9:e8:fd:a5:81:
53:a3:0c:cb:89:79:b5:af:71:02:9a:3d:08:0b:c5:dc:05:d7:
80:2e:49:9e:70:81:52:58:10:e4:90:de:48:78:9f:2c:09:a9:
28:68:c9:90:14:66:97:62:73:f7:a5:2d:21:61:3c:75:0a:9e:
d1:ac:fe:fa:bb:ec:25:b2:07:e6:b7:26:f2:e6:56:2f:32:b2:
77:7a:aa:de:30:f9:e1:c4:1c:ba:4a:65:b0:2d:8f:3a:27:a6:
2f:9a:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:45:33 2026 by rpki-client