Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
File: hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft (raw, json)
Hash identifier: 9hpSzNNzXq/u8/zcjV2ImNwzlFT55CQJmR2SJ4M+M6M=
Subject key identifier: F8:11:34:97:89:0C:7C:9E:51:36:40:1D:C1:92:EF:5D:1D:81:3A:F9
Authority key identifier: 86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
Certificate issuer: /CN=863841506d026131965057409a1604a5671f0541
Certificate serial: 01A0C745BC1340BC0CB3218FCE389AA637E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
Manifest number: 082F
Signing time: Tue 22 Sep 2026 04:00:31 +0000
Manifest this update: Tue 22 Sep 2026 04:00:31 +0000
Manifest next update: Wed 23 Sep 2026 04:00:31 +0000
Files and hashes: 1: A_-FW985zbY15HsoQHY3jzaLsqE.roa (hash: eSJY0BewKa72GIdMnrs7+2x+KiKuirCjSmv68OLB6u4=)
2: hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl (hash: /M6QBTyQIKePF9vn8s1EF/euLZZ8Wkp1K+iVcEnAlHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:45:bc:13:40:bc:0c:b3:21:8f:ce:38:9a:a6:37:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863841506d026131965057409a1604a5671f0541
Validity
Not Before: Sep 22 04:00:31 2026 GMT
Not After : Sep 23 04:00:31 2026 GMT
Subject: CN=f8113497890c7c9e5136401dc192ef5d1d813af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:db:75:d1:17:5a:4e:d4:fb:f7:e8:a9:4d:
66:03:3b:9d:df:9f:ec:0a:3c:73:53:2f:7f:fa:5f:
40:8c:33:77:b0:c5:60:e1:d8:bc:d0:a3:74:25:be:
11:86:14:47:69:a2:c5:0f:c2:8d:97:f8:3d:95:c1:
a1:11:f4:bf:96:92:cd:95:c2:d9:7a:ab:69:9c:a3:
74:db:5b:49:14:0e:93:78:0a:04:e6:bc:b7:15:5b:
a5:67:ea:60:6a:f2:42:17:37:e9:f7:08:4f:96:4f:
41:24:b2:5a:60:7b:3d:7c:e0:f2:c0:80:35:57:74:
88:18:2a:be:44:a4:bf:f4:8c:a5:ed:c2:25:ff:8a:
3f:6d:8c:45:54:9d:6d:7d:b5:06:84:f4:12:62:0d:
3f:8a:dd:d4:e8:32:a3:64:3b:be:ca:8d:c5:31:03:
96:d7:0d:d0:69:26:d2:3a:7d:56:d3:c2:45:5d:df:
25:27:6b:7f:c9:54:36:13:ee:f9:14:50:60:57:8d:
4a:b2:f2:23:e0:78:79:9a:7f:51:b8:16:55:a1:6c:
1c:3e:34:52:88:e4:01:e1:e3:47:b7:58:80:4b:e5:
c4:13:47:55:1a:c6:64:69:13:a8:16:77:cf:3b:3c:
6f:db:3a:b1:9f:9d:ff:2c:10:f7:42:c4:7c:26:60:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:11:34:97:89:0C:7C:9E:51:36:40:1D:C1:92:EF:5D:1D:81:3A:F9
X509v3 Authority Key Identifier:
keyid:86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ee:fc:1c:a3:97:c2:02:fe:1b:50:d6:e6:db:52:d8:87:a4:
69:cb:a7:aa:3d:56:1e:19:61:9a:e2:5b:17:24:08:23:21:7e:
98:35:cc:24:61:41:66:e6:88:6d:b6:c7:9b:09:fa:60:62:38:
ba:9b:5f:85:a4:29:63:e8:fa:d4:96:f1:5a:5b:3d:3a:8a:ff:
53:42:53:aa:c1:94:c1:44:a0:5a:a5:38:a1:20:4a:d1:b4:25:
d9:4f:c9:81:68:a5:1c:05:2e:56:f1:6e:65:2a:af:30:11:17:
5d:41:86:fa:be:f3:06:05:e5:00:3d:3d:3b:e3:dc:69:1d:c1:
36:6b:4b:1c:b9:62:10:7e:82:7d:12:0a:77:ca:64:dc:bf:33:
36:de:87:bb:19:13:8b:46:e1:dd:fa:61:46:db:2e:94:81:51:
ed:13:2e:d1:e3:31:56:b7:03:cf:ae:98:09:38:7e:42:36:5e:
d6:e4:4d:fb:c1:81:06:61:de:99:9f:67:fa:e6:16:97:49:6a:
d7:e1:9b:c8:40:4d:aa:9e:9a:3e:56:fb:1e:5a:46:10:08:ba:
05:93:b3:e3:cf:bd:dd:b3:16:7c:ee:05:4f:e4:4a:e2:52:16:
3a:ef:59:ad:b7:0a:01:bc:b2:a7:e1:ad:25:69:5b:29:ff:14:
94:6e:23:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRbwTQLwMsyGPzjiapjfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Mzg0MTUwNmQwMjYxMzE5NjUwNTc0MDlhMTYwNGE1Njcx
ZjA1NDEwHhcNMjYwOTIyMDQwMDMxWhcNMjYwOTIzMDQwMDMxWjAzMTEwLwYDVQQD
EyhmODExMzQ5Nzg5MGM3YzllNTEzNjQwMWRjMTkyZWY1ZDFkODEzYWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU7bddEXWk7U+/foqU1mAzud35/s
CjxzUy9/+l9AjDN3sMVg4di80KN0Jb4RhhRHaaLFD8KNl/g9lcGhEfS/lpLNlcLZ
eqtpnKN021tJFA6TeAoE5ry3FVulZ+pgavJCFzfp9whPlk9BJLJaYHs9fODywIA1
V3SIGCq+RKS/9Iyl7cIl/4o/bYxFVJ1tfbUGhPQSYg0/it3U6DKjZDu+yo3FMQOW
1w3QaSbSOn1W08JFXd8lJ2t/yVQ2E+75FFBgV41KsvIj4Hh5mn9RuBZVoWwcPjRS
iOQB4eNHt1iAS+XEE0dVGsZkaROoFnfPOzxv2zqxn53/LBD3QsR8JmDdOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgRNJeJDHyeUTZAHcGS710dgTr5MB8GA1UdIwQY
MBaAFIY4QVBtAmExllBXQJoWBKVnHwVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xZjE1NjMtYjMzMS00M2E5LWI5Y2Mt
M2JmYTA1MDkyMDFmLzEvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xZjE1NjMtYjMzMS00M2E5LWI5Y2MtM2JmYTA1MDkyMDFm
LzEvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATu78HKOX
wgL+G1DW5ttS2Iekacunqj1WHhlhmuJbFyQIIyF+mDXMJGFBZuaIbbbHmwn6YGI4
uptfhaQpY+j61JbxWls9Oor/U0JTqsGUwUSgWqU4oSBK0bQl2U/JgWilHAUuVvFu
ZSqvMBEXXUGG+r7zBgXlAD09O+PcaR3BNmtLHLliEH6CfRIKd8pk3L8zNt6HuxkT
i0bh3fphRtsulIFR7RMu0eMxVrcDz66YCTh+QjZe1uRN+8GBBmHemZ9n+uYWl0lq
1+GbyEBNqp6aPlb7HlpGEAi6BZOz48+93bMWfO4FT+RK4lIWOu9ZrbcKAbyyp+Gt
JWlbKf8UlG4jCA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:36:59 2026 by rpki-client