Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: 2/BM9l7C2SPL4QCKL1th0TraPUm5N/JH4cdh9LuUMfs=
Subject key identifier: E5:76:2B:F8:2D:1E:04:FD:2D:57:B8:6B:48:51:F4:7B:6A:87:17:3E
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 01A0ADBDAA24E6F72EB8E3BD43BC66261838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 15AB
Signing time: Thu 17 Sep 2026 05:01:23 +0000
Manifest this update: Thu 17 Sep 2026 05:01:23 +0000
Manifest next update: Fri 18 Sep 2026 05:01:23 +0000
Files and hashes: 1: WJgbjZB87tJLoahMumVDjucLblI.roa (hash: YviU04V4NEhTzYiRRcQuelFb9gp3nZ2OardyM6DZLlI=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: YKeBRp3wseHMZnfONPzSiwlmXiuJt0ZmX1F6sIQ9uUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ad:bd:aa:24:e6:f7:2e:b8:e3:bd:43:bc:66:26:18:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Sep 17 05:01:23 2026 GMT
Not After : Sep 18 05:01:23 2026 GMT
Subject: CN=e5762bf82d1e04fd2d57b86b4851f47b6a87173e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:b2:1e:54:a7:fc:05:a1:50:79:56:4c:98:
4d:4a:6e:21:e5:9a:64:21:d9:7d:d4:8f:a4:97:32:
c6:bc:41:70:db:34:3a:1a:90:6f:54:38:a8:34:f0:
5b:f2:06:94:3a:eb:99:6e:3a:70:44:96:91:a7:c1:
3e:d8:fd:ba:8f:de:05:ec:44:77:20:61:39:21:4b:
fd:60:5f:0f:55:5e:05:d9:b3:b3:9d:ad:d9:4b:97:
95:25:d1:d3:7d:7e:37:6f:cd:6c:23:c1:ec:34:37:
21:26:62:fc:7f:ba:17:f8:e6:b1:4e:48:8d:34:2d:
ac:7b:02:f5:2e:50:3a:12:eb:6b:00:23:e4:5e:d2:
44:e1:a4:b9:af:78:f9:05:f3:f2:95:22:e5:aa:7c:
a5:84:9b:b8:75:e5:a8:d5:1c:82:a6:69:ad:62:8e:
97:d9:2f:bb:e7:ad:fd:de:55:b8:29:c2:d3:d6:d5:
9a:00:7d:c0:67:f3:54:ce:97:b3:c3:91:88:1d:fd:
77:12:14:0d:1b:b8:ea:eb:d8:1b:30:dd:46:14:7c:
3b:c4:15:be:f5:73:83:42:72:ee:86:26:0c:25:03:
7e:fb:28:ce:76:27:67:c0:bf:3a:b8:6f:5c:a1:5c:
88:d7:04:cb:b2:d8:5c:4f:15:f1:6a:0f:30:46:f1:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:76:2B:F8:2D:1E:04:FD:2D:57:B8:6B:48:51:F4:7B:6A:87:17:3E
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fc:cf:1e:00:ef:4b:c3:5a:e2:e8:ed:a6:48:5d:1a:4f:bf:
73:1b:69:75:18:9a:63:68:d1:b0:01:9e:37:41:4f:f6:3f:d3:
b7:db:93:ae:59:74:80:8c:83:f9:ca:97:96:83:9b:45:a2:19:
68:b2:24:9d:d2:c5:8e:8b:05:2d:da:11:bc:02:9b:75:37:09:
4c:4f:1f:71:cb:5e:cb:ff:bc:dc:88:bd:11:91:91:a2:3a:11:
c3:5f:4f:f5:e0:e0:d4:d6:63:d2:79:11:27:fa:f1:22:3d:98:
e1:cc:2c:71:11:08:f6:9c:48:88:f2:1f:c0:b4:8a:37:e7:50:
89:85:38:20:75:af:0c:30:bd:87:b8:7d:55:d3:30:02:fb:b0:
c0:ea:f7:06:71:d1:24:ef:5a:f5:aa:82:e9:d8:d5:87:55:5d:
a3:e7:a5:3b:40:9a:3b:40:bb:fb:36:ee:3c:96:48:ae:7d:62:
e7:3a:52:5e:4e:e5:fa:ba:65:8e:12:72:af:36:12:89:09:10:
c8:3c:73:37:e2:31:67:8f:71:d9:4e:c5:93:e2:e8:f4:2d:6b:
e2:32:c4:f4:6c:9c:c7:79:c6:34:a0:5e:46:5b:70:e1:06:65:
cb:a0:ba:85:6e:15:fa:8a:d0:c9:7e:87:55:03:2c:34:29:b5:
a3:c5:74:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:57:21 2026 by rpki-client