Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: JJjIvaDI1GqFjzs+u+c4rjD/XKfbyt+SqiUJosgx0HU=
Subject key identifier: A3:A6:6D:4F:62:7F:38:7E:34:D6:E9:87:A8:AB:93:6A:36:FB:E8:7C
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 01A0CD47FA10C9D81EEEC309021093B379DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 16FE
Signing time: Wed 23 Sep 2026 08:00:41 +0000
Manifest this update: Wed 23 Sep 2026 08:00:41 +0000
Manifest next update: Thu 24 Sep 2026 08:00:41 +0000
Files and hashes: 1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: TI927vX4dYmfuKCzR8lDDTY4WSueAVr9HQ/wQGuz2X0=)
3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:fa:10:c9:d8:1e:ee:c3:09:02:10:93:b3:79:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Sep 23 08:00:41 2026 GMT
Not After : Sep 24 08:00:41 2026 GMT
Subject: CN=a3a66d4f627f387e34d6e987a8ab936a36fbe87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:65:b0:ed:09:a5:f8:c2:3a:4d:34:0d:64:48:
c2:a9:6d:f9:86:2d:e3:f5:45:7d:72:ae:74:40:80:
ed:30:94:47:29:11:ac:ae:35:c5:95:83:1c:10:27:
54:b2:1a:37:5b:e8:12:9c:95:c5:3d:26:95:c1:92:
71:2a:80:f2:3e:16:1f:9d:93:07:2d:41:e3:0a:8b:
78:95:c9:f7:f8:84:c9:fd:f2:39:0c:4e:8c:c3:1d:
09:c7:83:50:73:5c:2d:d5:77:a7:72:8a:71:60:05:
dc:a0:ac:91:bf:c3:09:c3:0c:4b:85:3b:1c:c2:b8:
a6:4a:77:ab:dd:b1:fa:ba:f3:6d:81:38:82:7b:50:
d7:90:04:85:d9:02:f7:f8:4b:62:1c:8c:2e:4d:4d:
5a:1d:5f:a6:3e:77:12:d2:f5:8c:59:66:85:19:9d:
3e:a9:ae:59:43:32:6e:8b:5d:69:96:4b:62:05:05:
ac:69:94:6d:d2:ae:eb:42:51:54:23:c3:63:f6:11:
c7:ac:a2:70:db:23:55:b6:b4:9a:45:ee:2e:6c:4d:
e7:5a:52:11:76:1a:0b:9c:94:8d:02:e3:3b:69:61:
5b:5d:23:d1:91:23:59:9d:1a:fb:2d:28:6b:ef:30:
c9:78:9e:78:49:45:90:52:02:28:77:e6:31:17:f1:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A6:6D:4F:62:7F:38:7E:34:D6:E9:87:A8:AB:93:6A:36:FB:E8:7C
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:31:a2:05:2f:67:58:2c:0d:e8:17:a4:e8:96:f6:cd:b1:d7:
de:c4:ad:46:48:9a:eb:af:ae:d7:ff:9d:1b:fa:08:18:ae:32:
4b:b1:99:55:ed:ac:11:92:2a:b3:c1:a2:1c:80:88:9c:0d:05:
a6:7e:7d:79:97:8b:3a:16:ab:42:e3:a7:84:93:3a:8c:c5:88:
a4:92:52:6c:3c:8e:39:b6:ca:64:8a:00:5c:cc:da:a0:65:f8:
7c:f7:59:5b:e2:54:a7:d6:16:15:b4:15:90:2c:f6:53:8e:48:
95:5e:93:5c:6b:ad:20:09:4d:ff:a5:9c:e0:5a:37:1d:79:05:
b8:8d:9e:ab:f9:00:e2:ef:7b:aa:1b:38:4f:db:81:7a:df:1f:
aa:53:d5:00:e3:af:f4:72:ea:0d:88:64:02:36:15:3a:5f:a8:
2c:48:ae:95:30:1f:11:ca:37:3e:04:b5:8b:98:e6:6c:c6:e6:
c5:f5:55:05:40:a2:ca:92:75:72:93:29:cc:91:15:c9:25:ca:
8d:29:dc:5f:fc:b5:24:70:29:4c:0e:33:0a:b2:a8:44:1c:19:
01:29:c2:47:09:7e:b1:89:90:43:88:4b:0e:42:6c:ac:4c:82:
8c:f8:d7:e0:33:13:41:30:1a:55:5b:98:dd:b2:56:22:57:6e:
c8:91:c5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:56:47 2026 by rpki-client