Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: 6CcwO/G5Ip3iD2LQbVMvk+a7OrcWIAHR0c42VdKjPGU=
Subject key identifier: 20:E2:9C:CE:B2:EB:6D:7D:64:A9:18:68:36:CF:38:75:B6:A6:59:4F
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 01A0C93490A6186F844607CB79B516F91763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0AB7
Signing time: Tue 22 Sep 2026 13:01:00 +0000
Manifest this update: Tue 22 Sep 2026 13:01:00 +0000
Manifest next update: Wed 23 Sep 2026 13:01:00 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: IjkXwz+p9SPTGOEOeegfkNbzUNcXg55UQliqyiB0+Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:90:a6:18:6f:84:46:07:cb:79:b5:16:f9:17:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Sep 22 13:01:00 2026 GMT
Not After : Sep 23 13:01:00 2026 GMT
Subject: CN=20e29cceb2eb6d7d64a9186836cf3875b6a6594f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:45:d8:99:19:ba:69:97:e2:52:f7:fd:12:
24:ba:ed:ee:4e:6d:82:73:28:45:ff:3b:19:95:2e:
fd:ab:05:4f:95:a2:25:67:f9:eb:c2:93:57:5f:cd:
76:a6:ac:b5:38:20:4e:f9:d8:8c:a3:b4:eb:8d:aa:
a3:4d:09:30:e3:d0:87:32:54:b0:02:f6:a7:51:72:
4d:27:43:5f:a5:e1:fe:6e:b7:96:92:10:01:ef:1a:
45:74:c4:f3:00:83:8e:73:08:cf:4d:e3:d2:92:49:
72:ba:a4:34:47:0b:27:8c:37:0e:8c:23:d1:6c:b1:
59:a1:95:c7:f3:49:78:6c:d2:7c:f8:f4:72:08:5b:
32:df:3a:73:99:b0:70:34:91:08:c4:5a:59:1d:04:
d7:5b:e7:80:6d:c5:fe:75:d3:6d:d9:d4:19:06:ef:
17:a8:be:6d:b8:f7:4e:b2:a6:bf:b3:69:2e:82:c0:
f8:bb:07:55:33:fb:21:b7:d7:d7:b4:c2:db:f4:1d:
af:f7:00:26:34:22:2b:f8:a1:42:bf:11:ff:20:03:
b3:5e:66:f5:f2:99:7a:81:62:c6:e8:8f:45:0e:9a:
fe:26:69:f4:6b:d5:a3:73:f1:68:aa:73:68:86:32:
c8:20:d2:57:17:72:98:ff:46:2b:59:ca:a7:7f:56:
c3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:9C:CE:B2:EB:6D:7D:64:A9:18:68:36:CF:38:75:B6:A6:59:4F
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:79:0a:52:bf:65:33:44:8b:5a:57:ca:62:29:a6:ee:16:85:
0a:8b:d8:d9:ca:ec:5e:8a:7f:7f:c4:b5:00:57:0b:76:1d:a6:
75:0a:47:40:e0:76:f3:4f:66:3f:5e:ba:0d:f6:29:e4:44:b0:
67:90:16:7b:d0:77:69:fa:b6:f8:56:e2:e0:68:9e:8d:5c:f0:
ce:78:3b:0d:d6:6b:4d:d7:7e:eb:80:08:1f:67:5e:80:21:48:
88:bd:57:f6:48:83:44:77:47:78:3a:f9:b3:03:49:1f:78:ed:
e8:3a:6c:47:a1:17:d6:3e:a3:13:5b:f7:74:98:06:08:25:d5:
2f:7a:ad:8a:ea:3c:3c:ed:dd:2a:6f:be:14:d9:78:a4:8e:0f:
4c:65:ae:8e:8d:00:bf:a4:18:f4:71:d3:ad:04:01:6f:94:80:
4a:88:70:52:b0:8b:ee:b0:cf:cc:c8:49:46:fb:20:47:75:e2:
64:24:f2:30:e7:2f:bf:12:b2:0d:d5:76:12:90:f6:fe:09:be:
7d:2f:ba:66:bd:de:61:03:5a:40:2d:2a:3a:e1:89:34:98:11:
fc:e8:c2:9a:a5:ac:8d:34:33:a0:cb:e7:03:01:64:13:72:6b:
e9:2b:58:6c:aa:d5:b4:a2:d3:ef:30:10:58:fd:99:1b:06:1a:
c3:f2:6e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:54:22 2026 by rpki-client