Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File: hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier: flIys+LmYc9wAyOPk5vWJoJ/IMqlVCeor/sjdTKYsGY=
Subject key identifier: 24:5A:7A:94:C6:75:9C:AB:4A:CF:B4:2E:AF:78:89:86:50:D0:DD:DD
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 01A08B31A18299D1CFBCDDA8269B1F3BAF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 12:01:20 +0000
Manifest this update: Thu 10 Sep 2026 12:01:20 +0000
Manifest next update: Fri 11 Sep 2026 12:01:20 +0000
Files and hashes: 1: 6wLeIQ39c0qgX0Vja7MdBYJAMn8.roa (hash: nC6rexnNHi4WNC4B4GVKP/4QaiD+SkPn2gOVHs21A7Y=)
2: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: Hi2FMCQduP8m80rGpdSb5hYgKWR9YztBVqUzWJzNuZU=)
3: pZGlbrvPRrDTvWn_feYW76Iq3BI.roa (hash: j/VDUcf2k6fyYHL9cYumkvnabaWqMQDCybh7xh24GlM=)
4: uz-5eh8ij7CKyL1gCG3agXaZfdI.roa (hash: MLGYmgTbm9R3gQ6lW9l1/n4SxkT8aKZvJY9FygoVZ1Y=)
5: vrzJKe06Kv3pGusg7vo_4lpx3jQ.roa (hash: hLnvHO8i7CwgpM8QFslqTR7QsmT/3aqV/BvJ6FLuFCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:a1:82:99:d1:cf:bc:dd:a8:26:9b:1f:3b:af:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Sep 10 12:01:20 2026 GMT
Not After : Sep 11 12:01:20 2026 GMT
Subject: CN=245a7a94c6759cab4acfb42eaf78898650d0dddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:0a:70:2a:11:85:3d:0e:34:cf:8b:2f:68:
b4:c2:a7:89:75:26:e0:a2:c5:7d:9c:5e:8a:b5:d3:
cc:15:67:78:08:96:0e:6f:56:62:bf:af:1a:f0:2d:
ea:ac:3f:07:a4:27:19:f9:be:a5:ee:96:75:4a:72:
17:10:08:5e:11:00:fd:ed:81:1e:a2:1d:5f:ef:79:
ff:21:71:ce:02:35:44:90:0a:b4:c6:ae:db:ff:2e:
1d:d0:77:06:7d:1e:57:e6:68:45:d8:fd:ab:6c:ad:
a8:b4:90:a6:12:7c:b6:eb:dd:aa:24:a3:d5:22:a9:
22:7f:b9:17:79:3e:3b:3e:00:8a:66:f6:67:bd:f8:
96:37:82:f0:4a:7a:40:40:35:aa:be:7f:0b:54:a5:
56:09:75:f3:97:a7:fc:01:81:9f:c3:c5:e4:bb:ae:
c7:27:46:ce:eb:84:e5:9c:fd:d6:48:a4:7e:fc:e1:
b0:5c:a7:ce:19:b5:d6:bc:b3:88:a8:c4:c8:a1:24:
ad:f1:de:46:b1:0e:ee:ca:3b:7b:df:4a:0d:ec:73:
96:f9:bb:14:53:f8:5a:3e:2e:5a:37:1f:e3:d5:f4:
23:b9:b3:42:00:d1:a5:c0:3e:d6:a8:1e:b5:26:4f:
e9:dc:4d:3f:b1:c7:4b:0a:a6:6d:a9:6e:93:88:09:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5A:7A:94:C6:75:9C:AB:4A:CF:B4:2E:AF:78:89:86:50:D0:DD:DD
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4e:d8:31:ac:a7:e2:70:80:18:06:53:66:5d:06:fe:33:9f:
e5:dc:f5:68:ee:a2:7d:2a:d7:f2:a9:3c:b0:1b:14:a9:45:6d:
b4:03:bd:c9:33:5d:4a:76:4d:5e:83:39:c9:ab:26:80:c0:7e:
f2:4b:e9:86:e0:fe:5b:09:91:76:d2:af:65:df:57:8d:d8:77:
0d:33:a4:37:62:88:f4:af:13:78:73:a1:62:4a:7a:63:be:37:
d4:c0:df:02:58:54:21:da:30:ce:3c:3d:b8:90:d1:74:37:3e:
9e:e0:fb:5e:ea:98:22:90:91:72:5f:14:ad:b2:f8:31:81:14:
89:7a:f3:96:2e:64:9d:1f:65:4f:f1:9b:6f:a5:b4:fc:ea:c9:
0f:f6:9d:f0:08:6c:95:37:20:9e:b6:52:bb:7e:40:bb:78:94:
1c:5d:09:5c:83:a0:24:0b:f5:8c:97:5a:09:45:63:f4:ae:db:
c6:cc:33:14:10:5d:a6:22:ee:50:e8:cb:a2:52:7c:fe:ce:27:
f0:7c:dc:80:95:44:1a:da:4c:38:1c:39:19:51:97:d1:64:c3:
ba:40:60:42:38:ba:71:b3:b9:08:0d:2d:b0:09:51:6e:6d:a6:
25:48:10:d3:07:19:03:97:7c:83:9e:94:6b:bd:88:42:0d:a7:
37:0c:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:29:20 2026 by rpki-client