Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: HOEYvAFvuNET1vRKF3v5gd3krtR/D4Vwcvs+DstiUe4=
Subject key identifier: DB:9C:0C:0B:A6:05:47:DB:4C:6E:C3:87:51:26:5C:47:F2:8B:1C:9B
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 01A0DA96DAD9652FAEC7C160E8D3E647AAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 22:01:54 +0000
Manifest this update: Fri 25 Sep 2026 22:01:54 +0000
Manifest next update: Sat 26 Sep 2026 22:01:54 +0000
Files and hashes: 1: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: 6gBliCiQS/ov0ToZ5Kw8k7Nzn47tXXyKayfvn03qKZM=)
2: heDWIjAtV4Dfu6bhg1J9nZcl5qo.roa (hash: zW/+lZ7RfSWqiEzqmlzW/11hnbmw6v/qc+vi/mY5ysc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:da:d9:65:2f:ae:c7:c1:60:e8:d3:e6:47:aa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Sep 25 22:01:54 2026 GMT
Not After : Sep 26 22:01:54 2026 GMT
Subject: CN=db9c0c0ba60547db4c6ec38751265c47f28b1c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9e:09:4d:92:7d:93:fd:de:12:74:b7:9a:94:
7b:39:7e:2e:32:37:cb:83:0a:df:a9:be:d6:16:9e:
c3:be:a6:41:0a:96:96:60:26:93:db:f2:11:86:c1:
c8:45:ca:33:c7:69:c6:c9:66:f7:8d:21:38:96:89:
74:61:ab:ba:f3:8d:21:38:f6:9d:77:67:b9:e9:d5:
d1:02:ed:ad:9b:a9:a3:fc:cd:71:73:8f:f7:ac:d1:
c9:24:c3:5a:6a:eb:19:49:78:0b:7c:7b:d2:55:71:
c1:cc:76:97:3b:f9:1b:5c:c7:a5:f2:00:59:cc:04:
34:30:35:17:73:91:1e:8b:80:3d:e8:4c:38:01:78:
20:b9:7f:25:47:6a:36:05:f8:5e:53:4a:cf:f2:63:
9a:17:15:7f:d4:18:c8:c2:a9:39:03:ef:0a:0f:16:
97:bc:33:8c:c5:a8:f5:bc:73:ad:48:64:06:86:97:
b5:e7:c7:71:4f:f8:9b:3e:71:ab:aa:ee:e1:3f:8e:
85:28:17:04:16:fa:dc:9b:6c:25:63:c2:49:01:10:
0f:e8:fb:16:ba:c7:b6:be:5e:a3:7a:c7:2b:0b:f7:
3b:2e:cc:e1:57:2c:c2:71:bb:89:21:88:9c:51:3d:
83:f2:10:c1:88:c0:9a:6a:2d:ba:d5:df:c6:27:b7:
20:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9C:0C:0B:A6:05:47:DB:4C:6E:C3:87:51:26:5C:47:F2:8B:1C:9B
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5a:e6:9b:38:68:d0:06:3b:88:18:a3:35:89:4a:a4:95:89:
bd:e7:9d:b1:bf:ca:f4:89:be:41:93:2b:44:7b:30:9c:59:24:
0e:26:32:3e:9c:30:b1:08:92:ec:55:26:80:15:74:25:46:f7:
6e:ce:9d:c1:b4:8d:ab:9a:b4:6a:69:85:f0:56:53:d5:25:1a:
b1:b2:03:59:28:68:ef:0f:f5:b5:95:bc:28:30:18:db:15:4d:
bb:5f:62:59:aa:69:54:b1:7f:d6:b8:ce:fc:68:c7:0d:4b:07:
61:c3:3c:2a:cd:1d:3b:32:e7:b0:d4:3f:02:8c:22:9b:57:21:
44:1f:62:cb:05:b5:27:60:08:ea:7a:df:cb:c0:46:c8:27:4e:
d8:6b:3b:af:8e:ca:e2:26:85:01:98:09:30:11:55:35:62:47:
37:bd:3d:45:74:aa:32:dc:a5:2c:74:dd:1a:df:66:1c:d0:98:
ed:a4:6b:a1:95:4a:f4:dc:70:55:1a:6b:af:12:e4:2a:5b:f6:
63:3e:70:14:e7:34:d7:d4:d5:04:89:cb:f0:b5:7f:73:7a:c6:
fd:54:b1:a8:a1:87:a6:67:fa:c3:20:d9:41:61:b0:58:cb:67:
96:63:34:58:1e:58:84:64:4c:63:11:8d:ac:02:2b:17:2e:1a:
67:f9:0d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:58:41 2026 by rpki-client