Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier: KBVJeqvGszFqjqYHgCvxoJlo6sHXeTZ752rDn9hQpic=
Subject key identifier: EB:39:BD:20:EE:52:A8:58:CE:C2:32:F1:34:D6:7C:91:5A:29:43:17
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 01A08AC36F4E3ED2D0989BE48733E3E1B213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number: 1020
Signing time: Thu 10 Sep 2026 10:00:58 +0000
Manifest this update: Thu 10 Sep 2026 10:00:58 +0000
Manifest next update: Fri 11 Sep 2026 10:00:58 +0000
Files and hashes: 1: VvsA1Kl39BglFknild5eA4Dydww.roa (hash: NFyWQReCFe2c01EEjfpo/UVkTf+Rhd9xSOXiVKp36g4=)
2: aBDyjGwrCdw0ZsAF6gxxWeltN2s.roa (hash: hGBycryJxp+iPydgXu2M5eiw9T7WQoHfG6US6MutSqk=)
3: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: e0oal7IknbBa0kCsRoMB+/68CgIoR6wHEeABJrDw4UQ=)
4: rb-CMpsRgp4MG_UrqROnerBNmLo.roa (hash: nFR4DTY5jeXMm+3EFDI/vTrdgkyRg8zqtIKzCPhxbjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:6f:4e:3e:d2:d0:98:9b:e4:87:33:e3:e1:b2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Sep 10 10:00:58 2026 GMT
Not After : Sep 11 10:00:58 2026 GMT
Subject: CN=eb39bd20ee52a858cec232f134d67c915a294317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:77:28:59:78:ce:e6:ad:2e:0d:82:40:67:
21:af:88:2e:9c:f2:6c:ce:d6:7b:fa:89:38:9f:6e:
4e:70:94:37:09:73:0e:09:f7:62:5a:cc:a6:a4:7f:
3f:1b:e8:4f:cd:f9:62:db:6a:f6:34:1a:b9:69:d4:
ba:6e:1f:7e:79:29:72:2d:a0:ad:4e:24:e5:f2:fc:
d3:28:c3:96:d3:f1:f5:18:50:71:73:ce:da:04:d6:
c5:54:57:b8:ee:ab:92:cc:ac:88:dc:6a:aa:e9:93:
75:08:f9:f3:18:d4:e6:c9:e0:ac:1e:b0:1b:b3:df:
bf:86:8c:de:e8:7b:22:0c:89:79:77:b0:5f:59:65:
e7:77:5f:06:90:e4:c6:ab:f1:1d:6a:e2:f4:0d:dd:
5d:67:d0:72:9a:cb:32:cb:dd:f0:46:84:ff:12:28:
33:4b:02:f5:d2:66:9a:f5:f8:8d:97:28:a1:10:91:
ff:2b:3b:03:1d:97:a8:62:dd:9d:2c:7f:13:e8:f4:
b5:dc:ac:09:4d:45:67:61:c8:0a:ee:db:c0:eb:cc:
ec:56:88:bf:c3:e0:2c:36:28:44:a2:bd:c1:fa:37:
c5:bb:ea:cd:36:6d:28:9e:4b:5c:9c:04:10:59:24:
ca:26:66:a0:98:05:b5:a5:4d:76:56:45:ae:fb:88:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:39:BD:20:EE:52:A8:58:CE:C2:32:F1:34:D6:7C:91:5A:29:43:17
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:23:95:e8:84:41:23:e0:8e:bc:4c:09:e9:d8:90:bf:1d:c8:
87:90:2d:b4:29:dc:37:47:c6:0b:a3:1e:67:9b:25:d6:31:4a:
73:a7:87:b2:81:18:8a:99:b4:6b:4b:a0:81:57:8b:b1:49:37:
f7:14:df:c6:bc:28:e3:a7:4b:ee:6b:2f:82:1d:73:66:70:cb:
e5:c9:30:f2:55:6b:24:17:0e:2c:53:8c:28:e8:06:ca:63:30:
3c:0f:10:ed:95:a8:55:cc:9e:75:fc:87:2a:9a:da:9a:a8:d6:
46:6f:6c:76:f3:34:36:9a:36:ad:8e:ae:da:dc:3b:b1:fd:a2:
b4:0b:e2:6b:2c:61:b5:75:b9:f2:0a:0b:44:80:35:09:12:ae:
19:aa:89:18:88:db:e8:3b:59:b4:c9:68:52:e4:d1:d2:81:25:
8a:5a:0e:99:20:76:ae:65:c5:43:59:16:bd:5f:ac:76:48:15:
cf:3b:91:b2:63:58:73:8b:a9:bd:1f:03:28:6f:24:76:01:5f:
e9:a7:ca:ef:29:48:a7:57:ff:01:46:d2:a1:79:61:a3:cd:1c:
77:5d:63:a1:b9:31:ed:f9:09:26:95:5a:b9:27:d7:83:b2:d2:
da:b9:e3:aa:7d:98:24:bc:da:b9:df:88:33:62:b1:19:2e:f7:
1a:4e:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:25 2026 by rpki-client