Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
File: hLDKyDjyguBClI-dKyzVdU0ujEc.mft (raw, json)
Hash identifier: 9BMil4ZSl5lbPOB4jwvHhxG0wtf202We9ntMdkMzQmw=
Subject key identifier: 94:B2:35:36:F8:BB:5B:D2:CB:09:FD:8C:48:A8:D5:77:55:9D:D1:9B
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 01A001A5E21A6EBD29282B1EAF76DECD55A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 19:00:43 +0000
Manifest this update: Fri 14 Aug 2026 19:00:43 +0000
Manifest next update: Sat 15 Aug 2026 19:00:43 +0000
Files and hashes: 1: VlpI70dDa3SXtasYtMfEiBmSD6c.roa (hash: ZCpP7KsMiePX2xsWWMvyuZvFGbNzVM1llSJjyzmPYlQ=)
2: cuqHyO4V93ncme-J7Fr8-_3DTvU.roa (hash: RSEzdn3Ri0wlzenvwY/b18Rq2sLeWzRaHbLOuqaUorY=)
3: hLDKyDjyguBClI-dKyzVdU0ujEc.crl (hash: s58tuFVr3cEnbKv7SLg0MDu2JTil0Adt2G25TBs5p68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:e2:1a:6e:bd:29:28:2b:1e:af:76:de:cd:55:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Aug 14 19:00:43 2026 GMT
Not After : Aug 15 19:00:43 2026 GMT
Subject: CN=94b23536f8bb5bd2cb09fd8c48a8d577559dd19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:03:23:01:bc:10:36:19:80:02:52:0d:3a:
7f:4c:73:98:1e:05:28:fc:95:8f:2a:a9:fd:3c:db:
4d:dc:93:34:46:01:fa:d1:7c:31:fc:7c:e9:26:a2:
98:59:31:5a:f7:be:78:3d:27:26:de:2a:63:a0:c8:
47:b2:2f:42:96:c5:1d:25:59:05:94:75:ef:e9:d4:
db:52:54:ac:74:c6:7e:bf:84:31:ea:21:ed:b5:3e:
a5:db:71:f0:62:75:b1:31:42:21:65:75:41:cf:0e:
09:ff:96:19:60:05:c6:bc:0a:03:e6:8c:85:b9:48:
3d:62:8d:0a:6e:02:6a:33:84:45:d9:68:9e:b1:3a:
00:6a:9c:e7:4d:ac:32:5c:e2:ce:22:fb:be:c4:e3:
30:9f:d2:37:b0:ac:af:84:ea:d8:7e:9c:43:cb:9f:
87:65:05:99:de:5c:99:28:93:5f:67:8c:fc:e5:bc:
a2:17:de:8b:fd:09:47:d5:f6:75:0f:54:69:cb:17:
b6:d4:e7:ac:99:98:92:fd:3a:34:3e:b4:e8:04:e1:
10:66:8e:57:6f:5b:a5:80:8a:62:ac:18:9b:c6:b5:
82:aa:68:a1:c0:63:39:3c:f2:10:e6:1a:1a:10:92:
05:f6:64:f9:6a:98:28:b1:d6:a9:53:11:fe:f8:cb:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B2:35:36:F8:BB:5B:D2:CB:09:FD:8C:48:A8:D5:77:55:9D:D1:9B
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:da:b0:f9:00:97:c3:76:e2:0d:7f:06:45:a3:99:30:40:9c:
64:b5:68:8a:c0:ea:c5:a1:c7:35:d5:db:f0:79:f2:d2:66:9d:
b1:3d:a4:ce:9d:f1:f5:55:8b:17:98:fa:2f:90:ad:fc:b4:4a:
83:95:e2:c5:0e:e1:9b:3c:c1:d7:b5:d0:ce:8a:18:e3:ae:05:
41:04:72:04:35:60:ff:c5:94:2e:fe:05:31:be:59:13:0d:81:
c2:64:55:33:da:5f:49:c7:d1:e6:cd:f1:ca:ce:4b:bf:bd:38:
76:c0:b2:ab:1e:f5:3a:74:26:50:83:c5:af:e1:0d:49:7f:34:
13:67:51:37:10:f8:c7:01:f0:2b:18:43:5d:d1:66:1f:b6:79:
6f:64:91:5d:c9:a1:d0:9c:22:0d:4c:a7:36:e9:2c:d5:30:f5:
29:27:13:a7:89:eb:fd:b4:9e:70:83:46:06:61:83:3c:eb:99:
ac:98:c1:7a:fb:e4:10:71:ff:c1:54:f3:08:92:95:17:a7:ec:
c2:e6:51:5e:18:7a:1f:2f:e7:d6:4e:1c:95:7b:cf:ac:76:42:
0e:6c:12:d0:50:ca:fb:5a:60:8b:50:72:ec:f3:1c:00:9e:9a:
db:dc:5b:f4:ea:d3:46:da:f9:e2:0f:09:c1:75:d0:60:e3:44:
4f:93:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:16:14 2026 by rpki-client