Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: jVLMXw+iwEgcUVTLI5AOCmvzk5SiWE31l8oVj5wXxGQ=
Subject key identifier: 0B:CB:DE:8C:EE:E6:A4:EA:6E:A6:D3:FA:78:A2:73:C9:32:CF:01:47
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 01A0894294B607DDA992BB8962B2853A4BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 08CE
Signing time: Thu 10 Sep 2026 03:00:36 +0000
Manifest this update: Thu 10 Sep 2026 03:00:36 +0000
Manifest next update: Fri 11 Sep 2026 03:00:36 +0000
Files and hashes: 1: AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa (hash: M5yAFXUAqTlGP6Djc4hTf8xHqNDR8r1HdPQdOiU2KQ8=)
2: RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa (hash: Q11lItRU7b2xFDCN9amHeShSUMnSL5ED5A7C2wNVlbE=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: +pAlgfVFSexafhcCagWI2MnlcYMJ/zBnhYAVSZ/AQEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:42:94:b6:07:dd:a9:92:bb:89:62:b2:85:3a:4b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Sep 10 03:00:36 2026 GMT
Not After : Sep 11 03:00:36 2026 GMT
Subject: CN=0bcbde8ceee6a4ea6ea6d3fa78a273c932cf0147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:d6:6d:16:b6:f1:10:21:c4:03:8e:b5:ae:
6a:73:a7:88:1b:cb:7c:ce:26:d2:fb:34:7f:fe:de:
b2:fc:c3:2f:dc:78:84:5f:c5:60:45:5e:fa:4c:89:
a4:97:cc:10:05:a2:bf:fd:89:f6:bd:73:5f:69:89:
54:c3:a3:90:3e:67:f6:01:c8:ef:62:0e:ac:3a:de:
42:9a:57:3a:dc:35:15:7e:8a:8c:0a:05:0c:df:89:
f7:e5:23:33:70:78:2d:31:c1:a4:0d:b2:20:82:41:
a7:da:69:38:91:99:0b:c1:12:8d:9b:da:77:6e:26:
0e:f3:be:25:fe:81:f6:41:16:9d:63:76:fe:26:8b:
9c:ec:3d:ae:8e:8d:9f:9d:5a:64:83:c3:6f:39:6e:
13:68:21:a6:46:a0:d1:c0:10:e4:2e:e6:65:20:19:
e9:10:23:5e:f9:ae:8c:ce:91:21:9e:03:dc:0f:06:
5b:58:92:2f:13:01:62:22:96:3a:7c:55:b6:85:cf:
75:d7:0f:be:bd:17:44:2e:cf:e4:26:37:90:1d:4e:
b1:3c:43:c0:79:82:32:b2:98:6f:7c:6e:87:31:2b:
52:b1:1a:03:4f:af:1d:97:77:a2:5b:b2:31:34:b8:
21:8d:a3:8f:3b:4c:91:36:a9:69:0f:f0:c7:3d:fd:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CB:DE:8C:EE:E6:A4:EA:6E:A6:D3:FA:78:A2:73:C9:32:CF:01:47
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:30:bd:d4:a9:6b:4b:14:16:f6:7f:05:2e:3f:ce:c0:80:99:
3a:9c:a7:e4:8e:8b:d3:ad:92:2f:45:ec:02:a3:fe:8f:04:e5:
d9:b2:84:16:3a:a5:cf:69:e1:50:4c:b2:96:05:5a:cb:45:42:
d1:2c:34:76:55:93:2d:0c:43:fe:21:90:05:ad:3a:0a:14:b5:
25:6d:45:e7:f3:60:65:1e:2f:97:c6:58:38:52:f3:e3:d2:a6:
41:06:b2:a2:12:70:27:57:77:fa:6a:86:96:4d:99:cf:83:fd:
b6:c1:07:ad:00:5f:ff:94:80:ee:9e:14:8f:a1:1b:69:96:e9:
6c:78:ce:d1:7f:6a:47:18:81:0b:2b:c0:c0:d0:71:23:21:7c:
45:39:d7:bf:84:72:e0:8a:c9:f3:83:b5:8e:8f:2e:0c:b1:9c:
73:35:02:ab:c7:f9:28:18:46:4c:d9:6d:55:87:c4:fd:49:e6:
4b:b0:b2:fd:7b:0d:12:73:25:a7:cc:c6:f4:bd:e3:29:e7:85:
18:b3:3c:a9:6b:38:cf:bb:44:2d:7b:61:f6:44:75:9f:4c:32:
30:23:6a:41:38:92:ea:70:f4:bc:4b:00:34:44:d4:ea:6f:d8:
ad:7a:54:f6:a4:70:95:24:c0:ce:6c:43:e7:70:de:2c:6b:c8:
3e:c1:b6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:32:24 2026 by rpki-client