Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
File: hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft (raw, json)
Hash identifier: xa8WNlPMweZm9FM76hOzLQllFR/6mImb8bHKm7PJMCs=
Subject key identifier: 32:B4:88:6E:05:23:7A:C1:25:73:51:EC:EB:73:AC:F4:D8:99:4E:D8
Authority key identifier: 86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
Certificate issuer: /CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Certificate serial: 01A08A8C2FE57ED2426FAB45D1058634EBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:38 +0000
Manifest this update: Thu 10 Sep 2026 09:00:38 +0000
Manifest next update: Fri 11 Sep 2026 09:00:38 +0000
Files and hashes: 1: 1-KU3PGZxoqz7bmdb8n8zsPdaZ9M.roa (hash: nSK3MR0nKS3ZWnxeaioA0vYNesL1Z7ExVBEXWs1Aous=)
2: 1fFVsYcVAFE1N-aOz9LEMseJXuY.roa (hash: HOFFlz4KmOgHVJgVvTynlqcaj5gxbBYnLRmD8llTlRw=)
3: The51JB1jk7iu3SgU3iebbViaAo.roa (hash: IgvjzXkDcI1pUGZYnrs8Dyz1K9/Iv3JYSfz6oucCdSI=)
4: aoK4O5p5TThsIV3yaJN8jIRv9XE.roa (hash: nmrjfUmKSW8e+KfYJ4nX5j5UtlDSvUEZyvXS5XHSEm0=)
5: hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl (hash: TM0HPsqfDJIgVZ/Dp8K4d478am9aqBnCMuvevmyIDRk=)
6: tu5qw7pN2svVw6an55fp6xEDFXU.roa (hash: gsnHeRbF1wOKHvFgVL5LAFlPqq/3yDJyXu+yPQETjmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:2f:e5:7e:d2:42:6f:ab:45:d1:05:86:34:eb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b323f500e7c142a41ff9bf543991f0f25dc1b9
Validity
Not Before: Sep 10 09:00:38 2026 GMT
Not After : Sep 11 09:00:38 2026 GMT
Subject: CN=32b4886e05237ac1257351eceb73acf4d8994ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:85:7c:0c:c6:ec:3c:b0:6b:d4:35:e3:57:
df:1b:bb:ae:4a:d0:ed:ae:94:95:a6:44:ed:bd:dd:
33:0d:ee:9f:3c:a5:c3:d2:f7:15:51:a8:bd:a4:d0:
41:a1:74:97:05:79:86:90:3d:82:20:30:1b:bf:92:
ce:a7:e1:fe:7d:e2:2e:8f:3e:3f:af:ba:67:30:93:
27:5f:88:2d:9a:2b:e4:ed:fa:d5:14:23:ff:e5:14:
39:c1:97:fe:29:89:4d:5b:be:9e:79:25:8b:4d:c8:
89:a7:34:68:ea:6c:aa:d1:0e:19:c7:6d:19:0f:78:
23:3f:77:64:40:cc:5e:4d:28:65:d8:62:e0:69:7e:
3e:95:36:5c:81:fd:38:0c:5e:d8:ea:bd:d0:40:4a:
37:21:64:6c:a4:4e:f6:78:48:36:c8:9f:f3:48:b6:
93:e3:fe:ec:7f:25:cb:db:86:61:cb:a7:f6:db:1a:
d7:89:bd:c6:05:fb:f6:e8:36:58:27:71:7f:a5:c7:
e8:fd:2e:1f:ad:84:59:ba:c1:eb:af:c7:9d:dc:66:
5c:a4:ca:10:bb:a6:50:5a:8a:c8:95:04:83:89:85:
ec:cb:e1:aa:11:65:9a:46:c6:60:60:a3:75:ee:7b:
42:3f:df:5f:2b:ba:48:74:97:be:ef:75:28:f3:be:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B4:88:6E:05:23:7A:C1:25:73:51:EC:EB:73:AC:F4:D8:99:4E:D8
X509v3 Authority Key Identifier:
keyid:86:B3:23:F5:00:E7:C1:42:A4:1F:F9:BF:54:39:91:F0:F2:5D:C1:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrMj9QDnwUKkH_m_VDmR8PJdwbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/hrMj9QDnwUKkH_m_VDmR8PJdwbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8e:4c:68:ec:2d:02:9c:e2:c7:dd:d7:d1:21:c7:35:1f:7c:
6c:6a:05:24:2d:68:5f:d6:bf:35:90:99:4b:9b:2e:9e:28:73:
e3:04:9d:68:f0:b3:07:76:b9:ba:07:0a:9c:a3:b9:20:82:0a:
7d:c6:d7:52:e8:32:5c:d5:b7:d6:29:ee:ca:46:ba:9a:4e:f2:
eb:2b:4d:15:85:e3:2b:0e:b6:8e:14:99:b4:7e:d0:e9:65:79:
c8:52:63:d7:28:46:f0:94:f4:1b:57:87:c5:9a:87:f2:df:68:
25:38:d5:64:8f:38:9f:35:21:27:50:67:c2:20:cb:a8:c0:c1:
d0:d1:46:ce:4d:8a:7c:43:fb:e1:34:93:e9:7c:99:02:0c:05:
a2:95:34:e3:93:d0:71:ab:de:f5:18:3f:6e:a1:20:7e:02:52:
e4:a7:4f:00:5c:02:75:50:2a:d8:9d:ce:cd:ac:b8:cf:7c:24:
36:87:2e:14:11:0f:6e:d6:ac:a9:ab:7b:78:4b:87:24:fc:b4:
e0:7b:56:55:61:8d:3c:ee:92:38:d1:44:da:dd:62:a1:e7:a4:
bb:95:05:a6:ec:27:32:e7:32:21:33:47:5d:0c:1a:9f:ea:ca:
2a:78:04:dd:44:bd:38:f3:13:de:f3:a0:dc:30:5d:89:f5:bf:
e4:ce:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:09:11 2026 by rpki-client