Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier: 1jQJ1y+xTawZu7vwW8YJPr9vl9TZWeN3SL4SU3SS9mI=
Subject key identifier: 03:AA:37:71:3E:C3:4D:DA:23:5B:6E:1A:C7:8C:25:ED:DC:EE:9C:45
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 01A18D8AAA048E88FC17456601ADF2C6F99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number: 10A6
Signing time: Fri 30 Oct 2026 16:00:37 +0000
Manifest this update: Fri 30 Oct 2026 16:00:37 +0000
Manifest next update: Sat 31 Oct 2026 16:00:37 +0000
Files and hashes: 1: VvsA1Kl39BglFknild5eA4Dydww.roa (hash: NFyWQReCFe2c01EEjfpo/UVkTf+Rhd9xSOXiVKp36g4=)
2: aBDyjGwrCdw0ZsAF6gxxWeltN2s.roa (hash: hGBycryJxp+iPydgXu2M5eiw9T7WQoHfG6US6MutSqk=)
3: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: KYu2d2DmU3DcMiHMzc/hzhTUa3vcP1+zQDF0fd/gcEw=)
4: rb-CMpsRgp4MG_UrqROnerBNmLo.roa (hash: nFR4DTY5jeXMm+3EFDI/vTrdgkyRg8zqtIKzCPhxbjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:8a:aa:04:8e:88:fc:17:45:66:01:ad:f2:c6:f9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Oct 30 16:00:37 2026 GMT
Not After : Oct 31 16:00:37 2026 GMT
Subject: CN=03aa37713ec34dda235b6e1ac78c25eddcee9c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:08:17:10:40:10:83:b3:63:72:7a:37:80:
f3:06:e3:5c:ce:7d:7e:58:9b:21:66:9c:72:72:28:
ad:22:6b:3c:24:86:91:93:e2:cf:74:7b:42:95:ea:
80:bb:2f:db:97:44:8e:85:ae:a0:aa:00:33:e7:a3:
af:94:ac:64:eb:bb:23:26:af:6c:43:2b:ec:06:92:
62:88:2b:a9:93:57:0d:55:b5:4d:ab:c3:64:88:61:
0d:d7:c7:e9:9d:41:98:bc:e7:de:78:f7:e3:b4:60:
02:8c:39:3a:71:1c:3e:aa:12:44:83:f9:88:5b:2e:
42:51:8d:fd:3a:ca:36:82:ab:58:dd:fb:43:be:f0:
79:54:e4:b4:70:41:6d:80:8d:ae:e1:13:3b:09:ee:
8e:70:94:f0:58:13:c8:42:e4:92:80:96:71:f5:50:
61:c6:6f:cb:28:0b:7e:fe:72:bc:56:cc:74:5c:c6:
f4:93:7e:a6:6f:8b:21:e0:8a:ad:ad:d6:a6:e5:ad:
5e:06:0f:a3:63:55:8a:88:4a:93:98:83:90:5d:d8:
8e:e4:29:1e:fd:44:15:d8:57:83:85:3e:1e:b0:99:
51:97:d2:f0:7e:4d:2f:6c:89:8b:ac:31:8b:27:30:
69:95:f6:0d:a1:f2:a5:7d:51:f8:88:39:82:c8:fb:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AA:37:71:3E:C3:4D:DA:23:5B:6E:1A:C7:8C:25:ED:DC:EE:9C:45
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:26:c5:8d:8a:ce:3a:8f:90:d0:5b:ff:65:69:08:33:af:03:
34:b6:83:0e:9e:b1:57:7d:3d:18:cb:a1:63:42:ad:99:05:f3:
e5:36:39:88:70:ca:91:03:b0:f1:da:f2:f4:89:ee:82:a3:fb:
4b:2f:6b:c0:88:1b:d6:11:97:6f:1e:09:e0:83:9e:30:2a:31:
3a:6b:63:ac:6b:f3:23:3e:f4:b3:ec:aa:42:e3:ea:54:55:e9:
0b:f5:3e:09:07:b7:0e:a4:9c:c4:32:0b:95:d5:97:7c:25:84:
d3:0e:33:78:e0:66:c4:b0:8b:07:2d:05:1d:64:e6:b7:f7:65:
eb:fa:75:6b:71:50:54:f5:8c:ec:9d:3c:ca:c5:72:d3:1f:ef:
51:26:41:35:e4:38:89:80:25:bc:1c:53:bb:9b:9c:35:c6:bd:
1c:19:3a:3c:e2:02:55:bd:de:b3:9a:1a:77:9d:f9:97:df:fb:
fb:52:d6:36:f2:f8:34:a6:a6:8a:6e:4a:4a:e6:2e:6f:03:09:
50:bc:b7:c1:f2:12:0d:8a:f8:1c:88:94:8c:38:bf:35:73:c2:
00:8f:2a:9b:b7:94:2f:12:69:e5:39:38:a2:6b:63:fa:d8:44:
05:36:2f:31:83:19:6f:c9:5a:2d:d7:5d:bc:e7:9c:03:8a:ac:
d1:5b:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 00:02:23 2026 by rpki-client