Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: Meo8FmZdr5GPNiWIauWzHFARjj/kTrZa9a9PF2THb6E=
Subject key identifier: 9C:52:4B:46:57:DB:AB:68:18:41:AC:7E:7D:FA:3E:75:A0:C0:1B:3B
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 01A1DD5E1AF8C3025A0F219AECEFAAE0584B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0B46
Signing time: Sun 15 Nov 2026 04:01:34 +0000
Manifest this update: Sun 15 Nov 2026 04:01:34 +0000
Manifest next update: Mon 16 Nov 2026 04:01:34 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: fMsEizFSEt5fMHsI7S/l8WfGMz6bcoeNG/8X4PJSPZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:1a:f8:c3:02:5a:0f:21:9a:ec:ef:aa:e0:58:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Nov 15 04:01:34 2026 GMT
Not After : Nov 16 04:01:34 2026 GMT
Subject: CN=9c524b4657dbab681841ac7e7dfa3e75a0c01b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:fd:89:ec:95:2f:dc:dc:7b:ab:a4:03:71:
65:32:82:3e:09:61:7b:ce:6f:7a:f5:88:59:4e:1c:
e4:df:3c:65:84:58:ea:19:06:92:3b:a3:b8:11:de:
a8:77:65:c5:69:60:4e:c0:13:1b:6f:ef:f7:1f:28:
9f:93:f0:8a:c8:0c:d0:e4:f3:6b:b2:81:77:8b:7f:
46:fe:78:8e:cd:7a:b6:c7:7e:4a:eb:8b:3c:d0:8b:
2d:f3:0f:da:b4:8f:38:45:46:1e:73:5a:a4:1c:dc:
b9:39:08:7a:6e:57:fd:5f:44:5f:c2:79:dc:85:99:
ed:12:6e:3b:a5:ec:30:7f:60:19:0c:31:77:8c:32:
81:df:1a:9e:e1:a4:b5:63:0e:bd:29:74:bc:72:57:
67:3f:ff:36:a6:b9:1b:62:01:c5:e7:46:f7:89:a3:
d3:12:93:d6:83:cf:c7:f1:63:6b:84:ac:97:0a:5c:
e5:62:98:1a:14:03:aa:c9:68:b2:c7:a8:06:26:f6:
50:f3:67:3a:a4:47:fc:dd:f6:79:bc:ee:1f:5c:c8:
ff:ab:24:8f:29:34:8d:ca:0f:11:d9:76:9a:1b:ba:
fa:c4:be:11:7e:a1:3f:c1:08:f1:d3:b5:b1:6c:8c:
91:a7:13:18:5c:ab:4b:dd:1c:9d:65:4a:e3:ce:3f:
f9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:52:4B:46:57:DB:AB:68:18:41:AC:7E:7D:FA:3E:75:A0:C0:1B:3B
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ae:21:b1:c9:6c:20:ba:ca:5b:11:af:17:d9:c0:fe:45:f0:
86:04:ca:df:50:9a:25:04:60:b1:2a:23:a2:2b:04:5c:03:39:
c6:17:92:dd:98:5a:9f:cc:e0:81:ea:b0:e1:99:32:fc:0b:3a:
01:88:77:ea:51:ca:a1:d3:ee:a2:57:44:d1:fc:7f:99:b8:82:
5e:70:23:95:9c:4e:ac:c6:04:31:a6:81:71:66:dd:62:4d:62:
de:5e:77:d0:d9:85:fc:b2:a0:2f:1f:7c:69:51:be:18:ec:dd:
17:22:82:78:5a:d4:28:1b:c3:8c:92:dc:a0:71:25:9a:ce:2a:
fe:36:59:b3:45:59:71:66:59:56:e8:c8:28:aa:47:81:e8:4f:
bb:4f:54:eb:73:44:f1:d0:42:21:e3:52:db:4c:5f:b0:2e:ea:
36:8b:1c:84:d2:1b:e3:b5:57:e4:6c:2d:00:bb:7f:df:8e:b7:
9a:2b:39:23:31:3b:09:8e:18:9f:3e:75:bd:2f:a0:10:00:5d:
dc:54:3c:67:9b:4e:b5:ab:0e:e2:d7:38:65:15:02:35:d8:1b:
c0:07:da:84:be:29:7a:17:22:b0:b2:41:8e:6f:25:6e:87:e3:
36:dd:54:20:90:6a:1b:4b:14:4d:4c:46:90:17:5e:00:38:b8:
79:f8:da:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:33:08 2026 by rpki-client