Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/a32b21-5987-4b83-8569-e7d1859d2478/1/0hbHHUvT0weLQFrXfclUvAnHgo0.mft
File: 0hbHHUvT0weLQFrXfclUvAnHgo0.mft (raw, json)
Hash identifier: nD364VePbsvyOly5BcHL+sQbvoBVDTjDJZd1W/bbCAE=
Subject key identifier: 2A:89:E4:26:72:24:06:C5:0C:16:6D:29:77:16:8D:10:A3:2F:37:5C
Authority key identifier: D2:16:C7:1D:4B:D3:D3:07:8B:40:5A:D7:7D:C9:54:BC:09:C7:82:8D
Certificate issuer: /CN=d216c71d4bd3d3078b405ad77dc954bc09c7828d
Certificate serial: 01A04017EC8CC67260929ACBE804B1034A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hbHHUvT0weLQFrXfclUvAnHgo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a32b21-5987-4b83-8569-e7d1859d2478/1/0hbHHUvT0weLQFrXfclUvAnHgo0.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 22:01:44 +0000
Manifest this update: Wed 26 Aug 2026 22:01:44 +0000
Manifest next update: Thu 27 Aug 2026 22:01:44 +0000
Files and hashes: 1: 0hbHHUvT0weLQFrXfclUvAnHgo0.crl (hash: knvRIBO9bJWMmBCRMv3RiNMwZyQbbeznvNcJKpxgVvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a32b21-5987-4b83-8569-e7d1859d2478/1/0hbHHUvT0weLQFrXfclUvAnHgo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a32b21-5987-4b83-8569-e7d1859d2478/1/0hbHHUvT0weLQFrXfclUvAnHgo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0hbHHUvT0weLQFrXfclUvAnHgo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:ec:8c:c6:72:60:92:9a:cb:e8:04:b1:03:4a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d216c71d4bd3d3078b405ad77dc954bc09c7828d
Validity
Not Before: Aug 26 22:01:44 2026 GMT
Not After : Aug 27 22:01:44 2026 GMT
Subject: CN=2a89e426722406c50c166d2977168d10a32f375c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b1:d4:52:02:9a:92:ad:8e:97:b7:4c:63:8e:
a4:40:79:2e:e9:71:c4:6a:f4:44:16:5e:45:0a:12:
0b:6f:e3:52:ff:82:28:d0:68:75:b7:87:a6:06:e8:
61:24:83:03:8a:e5:d2:44:22:23:50:ce:15:9b:66:
35:e8:21:69:14:1d:a5:0d:38:a1:ca:14:9b:32:02:
b0:1e:de:f4:fc:76:16:ca:59:66:ff:19:65:06:36:
8c:63:4d:bf:33:9b:fd:30:37:85:c2:6e:b5:82:ad:
f3:e9:8d:1a:85:64:07:8c:c5:af:8d:ce:fe:7d:5c:
f9:0e:e9:0a:8f:8b:2d:41:e3:af:83:cd:1a:70:c4:
d4:60:44:16:bc:b5:28:64:cc:91:74:be:bc:40:78:
dc:ed:f8:38:dd:8d:a0:35:1e:26:fa:e4:65:e2:6e:
e6:ea:92:20:c3:54:22:64:41:53:41:b6:7a:b9:87:
a7:32:0e:ba:89:44:d8:41:7d:81:58:36:a5:0e:36:
8b:4b:74:7c:1d:b5:83:16:a9:e7:da:f6:fb:32:13:
63:72:fd:c9:f3:92:54:d6:42:df:08:45:32:2a:5e:
38:ab:96:88:d5:55:ac:6e:bb:b2:37:9f:44:b0:54:
2e:d6:6d:3c:ca:b3:c2:81:8e:07:29:0b:54:18:6d:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:89:E4:26:72:24:06:C5:0C:16:6D:29:77:16:8D:10:A3:2F:37:5C
X509v3 Authority Key Identifier:
keyid:D2:16:C7:1D:4B:D3:D3:07:8B:40:5A:D7:7D:C9:54:BC:09:C7:82:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hbHHUvT0weLQFrXfclUvAnHgo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a32b21-5987-4b83-8569-e7d1859d2478/1/0hbHHUvT0weLQFrXfclUvAnHgo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a32b21-5987-4b83-8569-e7d1859d2478/1/0hbHHUvT0weLQFrXfclUvAnHgo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:67:c5:7a:c5:ad:d9:cf:42:f6:5d:99:ea:7f:eb:3c:7b:9d:
9e:21:db:b6:ad:96:ac:b4:75:27:55:36:45:ef:0c:7a:8d:4d:
60:18:8c:93:b3:58:fa:44:e9:d4:c3:7d:d3:af:a0:72:0a:9b:
b5:87:ee:3d:35:12:a4:3d:09:07:76:5d:58:64:97:41:9c:53:
01:0c:88:66:b1:93:07:20:44:76:a9:93:71:21:25:08:62:8c:
f3:17:55:cc:ef:f5:72:39:c5:0b:15:64:10:73:dc:32:9d:e7:
56:68:10:bd:ce:a9:fb:f8:59:6c:17:de:37:6b:ba:af:12:0e:
00:24:c9:8c:59:7f:56:3a:4c:58:4e:7c:c8:fa:ae:16:d8:3d:
7c:af:db:c1:02:d7:82:d5:cb:be:60:c6:f5:37:5a:88:3b:f5:
3a:78:99:26:2c:4f:79:73:90:78:54:c1:32:f3:fa:44:2a:d2:
30:fc:ea:b5:46:3e:13:54:9a:ef:d8:89:12:c8:fe:ed:09:16:
c0:d8:d8:4e:3f:db:de:f7:0d:55:6b:e3:da:e0:b7:2f:5e:0f:
3d:27:d4:a1:54:db:88:b6:44:0f:5f:43:24:f1:ed:5a:26:38:
c5:71:74:30:e6:f0:d3:27:20:aa:2e:ae:a3:4c:1e:72:07:91:
e7:62:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:23:24 2026 by rpki-client