Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: eX49fKHWXCg0VmYo32T+RF4cYLBKoP9GIEIzeUoiFA0=
Subject key identifier: A5:27:30:C0:DB:96:34:79:DD:FD:BF:C4:C2:29:87:ED:17:7B:12:16
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 019EBFC91E3DBD97DFA6A74727514F5AC26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 09A9
Signing time: Sat 13 Jun 2026 07:01:29 +0000
Manifest this update: Sat 13 Jun 2026 07:01:29 +0000
Manifest next update: Sun 14 Jun 2026 07:01:29 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: F0CSddwiQdbkfmrKt2+duBUAj+DDVoItsSRaJIYW70Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c9:1e:3d:bd:97:df:a6:a7:47:27:51:4f:5a:c2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Jun 13 07:01:29 2026 GMT
Not After : Jun 14 07:01:29 2026 GMT
Subject: CN=a52730c0db963479ddfdbfc4c22987ed177b1216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:4e:c9:46:1b:11:cd:3a:28:dc:a8:5c:9a:
fc:0d:18:28:a8:15:29:d6:ab:01:70:f6:2b:7f:ce:
9b:c0:b2:82:3b:e1:0e:ce:bc:f7:99:f0:58:86:3e:
93:f5:4c:7c:8f:4d:f2:da:f1:b4:6f:78:67:72:3b:
e9:c6:c8:90:d1:2f:9c:cd:7c:38:c1:72:a1:9c:28:
01:86:6f:72:45:69:59:26:fd:ee:bc:36:b0:d5:3b:
f4:bf:6f:4a:2e:71:15:90:b6:2a:d4:87:cf:6b:dd:
ee:46:80:d6:87:5e:60:a9:9b:07:69:11:63:33:82:
cf:57:e3:09:1e:93:f0:cc:26:09:4f:26:73:4c:3b:
fe:f9:9b:94:bf:b6:17:89:d5:44:65:f7:80:73:d4:
d2:9c:ca:f3:de:d2:86:b8:51:58:04:35:9e:78:b8:
bb:65:b6:b3:ad:57:df:66:dc:d0:91:59:d7:44:7a:
82:2c:97:71:04:53:f0:9f:72:9b:e8:a8:a6:2b:0e:
be:f0:17:b4:1b:69:cb:a6:7b:97:09:fd:68:59:6c:
06:44:78:b4:82:3e:cd:f0:8c:06:3e:30:8f:87:ee:
3b:be:4d:f8:ac:30:15:1f:79:8a:15:2e:b5:4b:27:
28:e4:98:50:a0:fa:79:b3:be:4d:c1:cf:10:49:a0:
1a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:27:30:C0:DB:96:34:79:DD:FD:BF:C4:C2:29:87:ED:17:7B:12:16
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b4:6f:fc:6c:6b:79:85:0c:e2:df:18:3f:c5:c5:7b:18:1b:
ec:83:c6:35:81:03:be:a8:39:a2:a1:db:4e:ec:e2:df:79:7e:
23:88:25:0e:bc:f5:12:d5:c8:30:c7:51:5d:03:6f:67:49:92:
89:7e:40:9d:5d:6e:0e:fa:b5:31:18:f4:06:46:83:1f:1d:17:
83:3d:b5:3a:fa:84:a8:b0:92:13:89:9f:86:a8:63:90:bb:01:
c8:28:b2:f2:51:2c:86:5a:6f:63:a2:93:8e:a5:e0:04:ab:03:
3f:7b:c3:b9:15:bd:d6:52:e8:8e:b6:f4:9b:51:3f:ef:cb:c9:
64:c6:24:97:c5:b3:09:ff:a8:93:0d:ba:f9:04:7f:0e:f4:70:
58:62:68:f5:ff:e0:7f:77:f7:11:00:71:82:9f:e9:bb:f4:0b:
f4:b6:91:b6:fb:5e:27:ca:a1:05:5b:15:92:3e:14:71:f3:01:
30:3d:79:17:56:80:16:20:49:fb:42:32:f9:c8:66:52:bb:1f:
16:61:3f:82:3c:a4:34:cc:ae:bb:58:aa:74:cf:d4:d8:0d:9d:
61:e5:e9:25:33:18:8b:0b:99:f3:59:b0:6e:c2:ca:f5:f0:75:
4c:84:aa:6a:14:16:de:7c:fd:d2:ad:18:fc:3b:34:30:6a:73:
02:bf:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:55:18 2026 by rpki-client