Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: kbsuZ7NiQn9vALVXtTmG5FEpcpFPcDjTIxVq4vc/QUg=
Subject key identifier: 2E:FF:EB:F5:CA:39:0E:C6:AF:C3:EF:8C:34:21:F0:93:CC:7F:C2:0D
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 01A16BDAF80927F4C72A6643C73BABF55608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 1A8B
Signing time: Sat 24 Oct 2026 03:01:14 +0000
Manifest this update: Sat 24 Oct 2026 03:01:14 +0000
Manifest next update: Sun 25 Oct 2026 03:01:14 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: c7CnEAjs1qwqgofz5JsHUgOty7wfTmIlfK49t4SxHqE=)
2: q8Sc-hb4z8RPWefbF866BBRja54.roa (hash: c2mi+bk32KaktYwhBDhcFoed5UYVyYxJQtaR6VL5ZBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:da:f8:09:27:f4:c7:2a:66:43:c7:3b:ab:f5:56:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Oct 24 03:01:14 2026 GMT
Not After : Oct 25 03:01:14 2026 GMT
Subject: CN=2effebf5ca390ec6afc3ef8c3421f093cc7fc20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:01:66:72:9e:49:6f:de:e8:33:6d:b6:dd:
fe:da:6f:95:76:01:8a:f3:b0:41:2c:10:2f:ff:c7:
c0:42:7a:ef:af:a3:27:59:43:4a:ca:fd:f8:a9:fc:
f2:d3:c8:8f:d9:71:e8:eb:b4:cb:5f:14:c0:6c:7b:
4e:42:35:a3:a4:6a:f0:22:b5:fc:44:77:48:95:40:
1b:1f:1c:23:43:f2:a7:1e:78:13:2b:53:cc:b3:bd:
af:4c:50:41:bc:07:d5:d2:2c:db:2e:7c:a7:40:ac:
5e:43:4c:a7:f1:0a:69:4f:0a:18:04:3a:e8:30:6b:
3c:a0:a9:d1:b3:39:b6:01:80:6a:5c:ad:8e:5d:f3:
e4:a0:80:41:13:9c:a5:97:a9:31:34:0b:ef:4f:2a:
8d:7d:d3:cd:70:6b:b0:60:8c:35:c4:b4:8b:61:b6:
57:5d:cc:a9:40:00:d6:58:97:55:57:d8:4e:68:6f:
60:66:7e:ab:83:c5:68:4c:d1:93:0e:1e:71:0d:5d:
0d:5f:d8:67:19:65:e5:34:d4:21:53:a8:66:5f:dd:
7a:a7:2f:c0:c3:83:c8:2e:c2:f0:a2:34:84:de:c6:
1a:c9:b9:ea:6c:5b:e6:dd:43:b5:4e:fe:d6:98:68:
62:94:60:c1:09:f0:ff:d6:02:64:2c:c1:d7:5d:02:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FF:EB:F5:CA:39:0E:C6:AF:C3:EF:8C:34:21:F0:93:CC:7F:C2:0D
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:2f:f1:6d:57:50:49:cf:b2:8c:d1:ef:bf:6f:ef:7d:c6:30:
11:d2:57:5a:17:2c:e4:80:e3:3a:17:98:93:5f:4c:0e:5f:09:
f4:e3:18:3e:1a:3c:32:c0:ac:35:bb:8b:20:0a:61:6d:63:88:
45:94:44:32:8c:c5:29:5a:fa:a9:0e:c0:f1:32:df:ec:82:65:
2e:6f:ac:4f:5b:45:82:c0:2a:2d:e7:a8:3c:86:f1:10:bf:96:
67:8a:46:c6:59:3f:28:15:ea:9b:c3:54:a1:53:8c:60:d3:47:
31:1e:ec:44:19:52:71:24:93:52:92:0b:ad:be:e2:92:f7:cc:
b4:21:64:38:e2:35:c4:70:ec:5d:ec:b4:76:7e:f2:a3:df:16:
82:94:a3:39:64:8f:1b:8a:49:8b:0d:29:a2:cf:e6:1e:aa:c6:
88:d1:b9:e4:84:a9:2a:00:76:ea:3d:25:90:86:bd:58:ba:97:
fe:7c:06:01:bd:8e:a9:76:7f:e6:72:24:d6:57:28:47:9c:1a:
ee:ee:e8:48:fc:22:dd:e8:5c:22:bf:99:36:28:f9:72:db:93:
93:e9:87:5b:74:5b:64:dd:cb:5d:7e:0a:3c:fa:09:15:52:11:
0a:9f:ae:15:7e:90:a8:48:d1:39:13:f1:ae:a0:bd:bb:6d:0c:
4f:97:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:09:29 2026 by rpki-client