Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier: ncvING/7tqg6UCo0xCROQ3oNtlfneABVFiYZI3If5iw=
Subject key identifier: AB:A9:2A:C4:50:00:D0:D8:4B:93:F0:6D:D9:DB:C6:A3:40:FA:B3:17
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial: 01A11A1960F0FC1703BAD6D009E373881BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number: 1926
Signing time: Thu 08 Oct 2026 06:00:32 +0000
Manifest this update: Thu 08 Oct 2026 06:00:32 +0000
Manifest next update: Fri 09 Oct 2026 06:00:32 +0000
Files and hashes: 1: OGRlDFmxFDMmmAQ2PHIbdYfiSWM.roa (hash: Qgj5b6VYtZqA5g1js1nnLsLpvoekztlGnv5F0hfyC1k=)
2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: KcWdBkCNk901OCIBcTFp14QAEWY2pacQF01GLSHk5bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:60:f0:fc:17:03:ba:d6:d0:09:e3:73:88:1b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Validity
Not Before: Oct 8 06:00:32 2026 GMT
Not After : Oct 9 06:00:32 2026 GMT
Subject: CN=aba92ac45000d0d84b93f06dd9dbc6a340fab317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:f6:fb:e4:65:d9:9c:90:32:14:1d:6c:a0:
df:00:e9:b5:21:f2:bc:b7:04:e9:d8:40:6f:c8:8e:
8d:40:b0:6b:49:c8:9b:b4:6d:07:4d:85:64:a4:15:
d8:a9:90:9d:cf:af:63:cf:9f:f4:37:07:bb:bf:f2:
b0:d7:4b:ce:2b:93:31:36:f2:25:85:e5:b9:54:ea:
65:45:36:82:3b:1d:ed:6a:81:93:54:5b:2f:3c:a9:
63:e6:b1:d8:15:4d:25:3d:b9:5b:d9:dc:b1:15:5b:
ad:4c:2c:72:5b:d7:61:e7:9b:36:32:b6:c2:c6:30:
11:86:a3:d4:c8:31:5f:2c:81:f8:2b:c8:37:05:0f:
2e:0c:39:5a:a5:40:c7:e1:7d:d5:a4:bc:76:bf:a0:
ec:2f:45:45:15:91:45:a1:db:ba:1a:e5:cc:7d:40:
63:09:68:00:66:61:7e:c6:71:1b:c6:a2:e9:66:d7:
b0:0a:0f:b3:b8:dd:e7:81:e6:7f:70:79:8e:93:fa:
cf:b3:e7:dc:35:45:3f:c2:e4:1d:4d:47:98:1a:21:
2c:4e:12:34:3f:bd:12:fa:4a:cf:ff:9b:51:58:96:
60:11:6d:2b:dd:f0:e5:1b:f4:9b:73:96:11:58:f5:
ce:3b:63:22:69:88:8b:1a:05:19:81:d3:cb:a9:78:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A9:2A:C4:50:00:D0:D8:4B:93:F0:6D:D9:DB:C6:A3:40:FA:B3:17
X509v3 Authority Key Identifier:
keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:10:a2:2c:52:c2:48:68:59:af:09:a8:39:67:b3:a9:4a:30:
27:c7:ed:74:43:d7:e3:ee:18:b1:81:a0:82:12:05:98:ca:e7:
50:e9:ff:0d:fd:b6:64:e7:6e:29:13:05:df:94:66:97:05:d2:
e5:ed:91:67:19:19:4e:6b:ab:54:4a:a1:6b:f7:48:29:4b:b4:
21:08:47:0a:09:7e:bc:d8:e3:0c:f3:f3:20:d6:9f:db:63:5b:
06:0d:41:44:69:78:a5:d2:4e:7a:ba:09:d6:7c:17:e9:dc:38:
06:42:e0:2c:6c:dc:13:eb:34:58:2f:43:36:bd:b0:1f:cd:94:
a6:27:de:09:e6:5c:be:e9:42:db:68:a6:52:0e:55:b6:f0:ad:
2b:6b:1b:af:30:4f:a0:fc:20:6c:82:69:58:ee:8c:a2:cc:a4:
b1:8b:33:02:e1:17:2e:8c:d8:09:2b:bf:17:45:79:a9:e5:dc:
b3:46:66:8a:b5:c3:82:89:72:75:f8:06:46:39:27:39:6c:03:
57:6f:96:da:9d:f7:d5:4c:06:c9:1c:93:54:16:92:8a:9c:c6:
dc:01:65:fc:65:fe:1b:59:ae:ea:b6:4e:ab:a2:28:3d:1b:e9:
81:ba:b0:b6:ce:0c:39:aa:60:24:02:b6:a5:11:70:0d:51:c7:
7d:c9:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:08:17 2026 by rpki-client