Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: 2oD+ECKstkeHl5N24XrGp6k4dYN+F8Ix2QyhZaSlcTw=
Subject key identifier: D2:2B:96:42:83:FE:D2:88:B6:7D:00:65:2D:4A:25:C2:F9:06:03:09
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 01A1306AD78F1FCC8B58919ABDF2ECCAE324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 03D8
Signing time: Mon 12 Oct 2026 14:01:10 +0000
Manifest this update: Mon 12 Oct 2026 14:01:10 +0000
Manifest next update: Tue 13 Oct 2026 14:01:10 +0000
Files and hashes: 1: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (hash: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: jF9Av0e8LoVT9nOCERxibzT2o8jRBjXrHpoXAnRDIsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:d7:8f:1f:cc:8b:58:91:9a:bd:f2:ec:ca:e3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Oct 12 14:01:10 2026 GMT
Not After : Oct 13 14:01:10 2026 GMT
Subject: CN=d22b964283fed288b67d00652d4a25c2f9060309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:9a:f3:17:1e:cf:8d:6e:05:f2:c3:61:2c:
ba:bb:fc:0e:5c:70:b8:63:d5:94:54:d7:c9:55:1d:
58:cf:1e:17:24:ea:6b:83:31:6e:73:9a:ae:c9:d4:
09:10:03:cc:00:84:9e:93:25:34:61:1f:0a:e0:76:
36:61:31:7c:c2:66:31:1b:1b:44:69:15:7a:b9:60:
fe:19:05:79:e1:ab:0e:d1:5d:82:65:fc:14:9f:c7:
aa:fd:72:9e:67:ba:ae:c6:10:13:15:2d:34:3f:57:
8c:1b:85:b4:17:6a:7c:ab:81:69:0a:67:a5:0b:bf:
a5:e8:bc:30:8d:0c:45:26:5a:6e:e6:fa:a0:7b:b5:
e3:b4:88:5e:66:e9:c2:5a:74:59:e4:7b:24:00:e6:
0d:79:aa:80:b0:0a:0b:62:3f:8e:89:61:f5:99:c9:
a5:e6:09:b4:03:19:6b:7a:83:3c:e9:2a:48:2f:e9:
92:58:0b:bb:d3:d7:b9:bf:2b:96:7b:65:a1:53:01:
ea:21:5f:20:42:d3:8a:4c:6f:74:c6:a5:d7:24:22:
87:f1:b0:66:e3:ff:6b:f5:6d:7d:cf:3b:ba:22:38:
10:57:24:26:b8:8e:1f:87:5c:26:ce:ce:17:d4:eb:
a8:07:88:41:bc:0a:18:98:9a:75:5c:78:ac:93:0e:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2B:96:42:83:FE:D2:88:B6:7D:00:65:2D:4A:25:C2:F9:06:03:09
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:68:4a:40:1c:60:17:d6:ae:a2:06:db:0a:93:aa:2e:1a:6e:
1f:61:b5:64:ba:75:a8:5b:d9:ae:cd:d7:c2:01:76:5d:43:ae:
42:38:e5:c2:b1:6a:71:85:ab:b0:2c:12:3c:11:ee:0d:86:3e:
da:eb:f9:da:9b:d7:0d:94:4c:2d:d7:cc:8d:82:73:00:36:b7:
bb:7c:a5:75:6d:e4:f7:47:7f:bf:81:18:8f:6c:7e:95:e8:60:
d3:fb:d7:a1:48:98:58:1f:91:5e:96:7e:b0:19:13:58:bb:a1:
af:89:f8:64:dd:99:3f:7d:29:c9:35:69:18:fb:5f:18:f0:4d:
10:3e:02:b9:bd:06:f4:96:ba:64:72:05:5e:1d:a6:7b:f1:2e:
22:8b:c7:82:52:0e:3c:e8:e1:e1:eb:96:bb:d3:d1:5c:8b:7c:
3e:d1:b2:6e:21:72:dd:e8:9f:4d:a1:60:21:a4:b8:15:8e:be:
3a:7d:7c:1d:00:25:75:0b:89:19:ea:cc:0e:bc:7c:f3:4d:c4:
3f:8b:61:74:0e:95:86:95:9d:62:59:ac:75:d3:20:81:ab:36:
96:b1:3c:96:9f:dc:dc:f3:d3:25:21:db:27:0e:34:55:48:a3:
6f:37:ce:f5:07:26:35:16:17:b7:5c:7e:55:db:98:92:2f:33:
74:57:cf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:56:31 2026 by rpki-client