Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: 20pn7YM3fkjiVPMVRbeUcjy0gDRbhXVWxDuVS8xIMC4=
Subject key identifier: 48:58:03:EF:B5:8A:66:E1:D1:17:AD:76:C8:85:4E:3C:B9:05:DA:24
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 01A0C669C4A98561BF799A873E161398D790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 1373
Signing time: Tue 22 Sep 2026 00:00:15 +0000
Manifest this update: Tue 22 Sep 2026 00:00:15 +0000
Manifest next update: Wed 23 Sep 2026 00:00:15 +0000
Files and hashes: 1: FsEYUQUVL6IgAyC_3hTmIC05sYA.roa (hash: erfQp237zxf8AD8EH/ivbDYnw0vQY88Vf8ov2LTkk+Q=)
2: KhePy2KSChqSTO56xjFNB88Adhw.roa (hash: jSbx1Mp1yMnht16w7llcf9K2ZLPdIRkxkGJ6/eCHfII=)
3: Z-DKyWN4NlE9Oe6WxuczFCionOA.roa (hash: DCMKgnjrJbcUZjEDqwNnXXjpRG/93HbByWia9wwVNVM=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: XGNzshlq1o1MJU4oH6GrnKA3h4a5Z8YDKgveTsV7kbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:c4:a9:85:61:bf:79:9a:87:3e:16:13:98:d7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Sep 22 00:00:15 2026 GMT
Not After : Sep 23 00:00:15 2026 GMT
Subject: CN=485803efb58a66e1d117ad76c8854e3cb905da24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:84:1a:36:c4:6b:27:af:22:49:de:6c:42:
4d:a6:00:7d:0d:8f:1b:b7:dc:53:39:72:07:10:d0:
a5:42:61:16:fa:41:b5:b8:58:96:f6:7f:0c:b9:55:
2e:82:e0:69:17:1c:24:d9:52:a2:3c:30:ac:17:50:
6d:b4:3e:41:e9:eb:5a:24:6b:60:d1:1e:f0:04:44:
17:ea:c6:aa:15:ae:9a:a1:46:21:72:04:65:a9:2a:
f9:cf:32:8f:82:9b:21:c1:e2:81:f6:93:93:d8:9e:
be:53:fd:9f:c5:b4:63:d8:f6:8c:3a:2c:ec:2a:64:
2d:fe:53:55:f3:31:62:e9:1c:ce:35:e0:60:a4:63:
41:22:15:54:bd:8b:df:3a:1b:f6:c0:65:06:a7:b2:
6c:9c:a9:3a:8c:af:b2:be:72:67:ea:64:c0:6e:1c:
6c:bd:ff:bc:3e:bb:c1:77:29:4f:1f:97:53:e9:1e:
e5:6f:5b:f7:fe:8d:62:95:ce:45:47:f9:56:f0:ae:
6e:dd:cb:85:58:2c:aa:7f:00:67:bd:89:4d:9d:57:
d3:7d:3a:77:80:0e:d8:f2:fd:89:df:be:21:19:73:
2e:20:de:8d:85:a2:0e:1b:b6:5a:62:3e:a5:8f:02:
bf:e1:4a:be:1e:a8:dd:75:53:03:eb:1a:f9:36:7a:
54:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:58:03:EF:B5:8A:66:E1:D1:17:AD:76:C8:85:4E:3C:B9:05:DA:24
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b3:6c:69:8b:0b:3a:b8:b0:d1:a7:11:f2:bc:12:62:69:ca:
0b:60:7b:a7:6a:da:8e:85:6e:ef:2e:e9:17:31:4b:66:f3:59:
44:88:28:10:2c:a6:ea:a0:c7:ab:dc:68:56:7f:08:2e:f0:b2:
f4:aa:51:af:3e:8e:0f:a5:a4:60:e4:7a:55:ea:41:c6:e0:c1:
e3:67:a5:4d:7b:e7:e7:23:b0:ee:f3:b2:13:a6:98:42:56:cb:
b9:ca:82:49:dd:24:3b:98:aa:dd:a3:47:39:33:65:a6:53:da:
4a:9e:9e:da:b9:c9:65:a6:95:48:8a:d3:06:bb:02:1a:b8:c9:
46:da:62:9b:a0:b9:cc:2f:6c:6b:29:b3:f8:c9:fb:45:9d:fb:
0c:f9:d3:6b:19:d7:70:ae:75:e4:0c:b2:59:63:71:5f:66:9f:
dc:9c:d7:17:92:af:9e:15:af:de:35:19:f7:79:03:fb:cf:b3:
ec:e2:85:df:0c:d8:12:76:8d:3d:6d:35:ac:c2:ad:60:57:50:
11:09:9b:3b:f7:9e:6f:26:85:c1:32:13:45:27:90:56:9d:30:
4c:e7:8d:5d:95:c8:e0:63:cd:6a:32:ad:30:2c:f6:07:6c:92:
13:53:6a:e1:6d:b3:45:4f:a6:44:ac:cc:cb:2e:4a:e8:e6:af:
4e:85:79:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:55:54 2026 by rpki-client