Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft
File: hHyRt2JrFwQf6KdfOVgdo6L_5do.mft (raw, json)
Hash identifier: AbHzqZb/Np+1qQqkzct/sRCXdQgv7beO/c5+bfL/2cc=
Subject key identifier: 0C:F5:62:54:D2:5B:9A:47:ED:94:A4:1E:8B:C4:BE:00:19:6B:DB:27
Authority key identifier: 84:7C:91:B7:62:6B:17:04:1F:E8:A7:5F:39:58:1D:A3:A2:FF:E5:DA
Certificate issuer: /CN=847c91b7626b17041fe8a75f39581da3a2ffe5da
Certificate serial: 01A0DC167C1CC70ECF047B3CB8A420D50146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHyRt2JrFwQf6KdfOVgdo6L_5do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft
Manifest number: 9C
Signing time: Sat 26 Sep 2026 05:00:56 +0000
Manifest this update: Sat 26 Sep 2026 05:00:56 +0000
Manifest next update: Sun 27 Sep 2026 05:00:56 +0000
Files and hashes: 1: cB7PC28F3bY-m09DAAeWUi3RUiA.roa (hash: 3lEL6EkP5eBl9884xVL0N/vy5L6Tqe95mpKiy8EOZ7s=)
2: hHyRt2JrFwQf6KdfOVgdo6L_5do.crl (hash: E5VCMPgwFa1fxEAyUv3CgPwYgyQiaXh8v05OBDAORV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHyRt2JrFwQf6KdfOVgdo6L_5do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:7c:1c:c7:0e:cf:04:7b:3c:b8:a4:20:d5:01:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847c91b7626b17041fe8a75f39581da3a2ffe5da
Validity
Not Before: Sep 26 05:00:56 2026 GMT
Not After : Sep 27 05:00:56 2026 GMT
Subject: CN=0cf56254d25b9a47ed94a41e8bc4be00196bdb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:e5:cc:1f:43:77:2d:79:af:6c:d1:19:63:91:
4b:74:e4:48:58:b4:2a:6c:5b:c1:89:a1:f7:50:19:
f0:14:64:99:4a:7d:a5:f5:45:95:38:af:dc:00:56:
bb:83:df:8d:32:82:09:ba:51:89:43:78:09:9c:69:
67:5e:54:9e:e4:9f:fd:e0:4c:7d:d0:97:60:c6:68:
e3:b0:98:ec:d8:22:2e:7c:11:26:ea:b1:2e:f5:d1:
67:21:04:43:bf:b1:55:25:5f:b6:59:94:95:b2:1e:
09:01:fc:6d:f1:5f:bf:d1:9a:3f:2e:b7:39:82:a2:
73:d4:f8:e2:c8:51:7f:e6:46:b0:07:fa:6c:28:37:
52:7e:2a:b1:a4:b8:57:98:39:0f:f8:f9:e5:24:26:
f6:1a:c3:99:67:f9:c7:56:ba:2f:43:c4:7d:6a:e5:
02:1e:49:ec:b5:68:27:4f:9c:44:7c:f8:7d:7d:18:
e5:e9:42:90:fb:e7:95:23:f8:60:ba:b2:d3:21:88:
fb:73:10:3b:2e:37:9c:db:c2:5f:d7:84:80:c9:44:
7e:12:97:8e:fc:a2:8c:74:88:fa:fc:15:f9:41:91:
2e:4f:60:50:15:fb:95:0e:d4:d7:64:ce:f1:59:6b:
e1:77:3c:3f:9b:21:42:86:f7:ce:d3:a1:63:2e:33:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F5:62:54:D2:5B:9A:47:ED:94:A4:1E:8B:C4:BE:00:19:6B:DB:27
X509v3 Authority Key Identifier:
keyid:84:7C:91:B7:62:6B:17:04:1F:E8:A7:5F:39:58:1D:A3:A2:FF:E5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHyRt2JrFwQf6KdfOVgdo6L_5do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7d713b-12b3-4190-820a-71c455574179/1/hHyRt2JrFwQf6KdfOVgdo6L_5do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e7:02:cf:e3:4e:fe:84:82:99:fe:cc:35:ef:ad:2c:1f:aa:
bf:ef:a9:34:fb:18:0b:54:b1:b5:1c:8e:54:94:65:f7:ee:3b:
c4:ea:ee:45:75:96:4b:bb:1a:6d:0c:89:52:5d:72:6e:36:3b:
3c:d8:07:db:fa:9a:97:2c:17:92:36:88:0f:92:65:db:84:1e:
80:6b:7d:a2:ac:7a:47:60:ad:56:f3:ef:ce:58:27:60:16:6d:
33:31:7e:be:c8:2c:f7:24:88:21:0d:c9:46:a1:2b:75:37:93:
61:a2:7b:7f:7b:f0:3d:8c:0d:9a:94:4d:ad:96:92:17:05:ea:
69:6e:c5:19:39:2c:82:82:c0:50:61:a6:40:02:ec:d2:4a:19:
a9:ac:a0:77:39:44:e1:91:2e:45:39:ea:66:89:ca:4a:ee:fc:
e4:48:ae:2e:8e:30:87:50:d2:88:34:f6:8a:94:ae:36:b5:75:
04:b6:f1:8f:a2:cc:78:03:10:44:d1:a3:89:98:99:97:e9:d1:
cc:33:73:52:ab:40:f0:78:49:87:95:96:ee:6d:ee:aa:2c:21:
50:5c:29:e2:e5:eb:6d:94:ab:ca:fa:ed:fe:ce:43:90:36:6d:
a5:db:54:a1:b8:a5:97:bc:3b:0d:1c:ca:1b:4c:75:b0:4b:0b:
d8:03:5d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:46:27 2026 by rpki-client