Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier: x8NBZXIkRGGhJ1pEjijbyjKzMLqhju9GmCnIpiiBMRU=
Subject key identifier: DC:74:0C:A5:46:D3:E4:06:0E:54:D5:22:D7:FA:70:4E:10:0C:3C:8A
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial: 01A004029B7B4077220730DAB7DE71EDEA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number: 1896
Signing time: Sat 15 Aug 2026 06:01:14 +0000
Manifest this update: Sat 15 Aug 2026 06:01:14 +0000
Manifest next update: Sun 16 Aug 2026 06:01:14 +0000
Files and hashes: 1: OGRlDFmxFDMmmAQ2PHIbdYfiSWM.roa (hash: Qgj5b6VYtZqA5g1js1nnLsLpvoekztlGnv5F0hfyC1k=)
2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: jkLeM8jBJp/jLBvGcyy8/cxNaBR4WVQpHk5vRDGspIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:9b:7b:40:77:22:07:30:da:b7:de:71:ed:ea:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Validity
Not Before: Aug 15 06:01:14 2026 GMT
Not After : Aug 16 06:01:14 2026 GMT
Subject: CN=dc740ca546d3e4060e54d522d7fa704e100c3c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:26:17:c0:34:51:4a:ed:fd:f8:9a:26:66:
40:af:97:f8:0a:bc:ba:dd:85:05:8d:48:3d:39:b1:
1b:6c:90:c5:cd:55:fd:9e:17:bf:76:30:13:ea:78:
bb:59:b3:fb:4f:13:40:15:75:fb:3e:d8:b4:cf:04:
d1:4c:22:e6:ab:59:08:b9:3a:64:ff:a5:3c:fc:e5:
22:3b:a2:4e:d7:be:1f:61:f2:fc:ea:bf:57:0c:55:
c7:18:44:13:d0:36:f2:5c:32:5e:44:22:e3:c6:73:
11:e0:92:92:bf:3d:90:4d:a0:b6:65:60:c4:4c:9a:
3b:e4:5f:26:64:0e:81:a2:b4:14:d1:bd:f8:ef:29:
80:87:ac:6c:da:67:d3:ca:ce:b9:f4:f7:96:ce:6e:
1c:e6:be:fc:9e:1b:21:8b:0b:d2:71:1e:b9:66:24:
db:51:5a:1a:c6:ba:08:0d:1c:7a:e9:d2:4e:f2:e4:
66:0c:ed:fd:ab:3b:2e:dc:82:f3:7f:cc:4d:27:10:
12:e1:38:e9:82:58:9e:76:c2:8d:12:9e:e7:ed:10:
85:6a:7f:71:93:a3:e8:c2:3f:d7:dc:bc:a8:8e:9d:
5a:66:1a:78:cc:38:de:de:0f:06:af:2e:d0:42:f2:
3d:ad:dd:47:01:c1:1a:67:cc:2a:d5:8e:9a:2e:85:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:74:0C:A5:46:D3:E4:06:0E:54:D5:22:D7:FA:70:4E:10:0C:3C:8A
X509v3 Authority Key Identifier:
keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1e:ae:4a:fb:b8:00:d2:53:a3:66:72:7e:3e:57:98:26:40:
bc:6d:29:15:7f:01:1d:e9:a1:68:ad:c8:b8:4f:ca:08:8a:b3:
27:dc:40:ff:0d:0f:40:86:35:5e:5c:3c:fa:0f:5e:97:c7:3f:
99:14:4a:21:96:f2:78:60:0a:b0:6e:fb:74:cc:ae:31:ce:cc:
0f:98:13:03:1b:21:fe:da:21:a4:16:b6:ce:58:99:e8:07:14:
37:44:15:f6:5e:40:da:51:c2:2d:c4:9a:e0:89:a1:96:24:65:
e5:37:03:a6:db:58:56:21:03:2c:2f:95:f4:f2:15:3c:e5:5e:
6b:d5:e3:c1:74:2e:11:5a:ff:51:53:78:ed:2c:73:91:9f:e9:
45:3c:0e:2c:27:b5:ce:c7:a7:ba:db:6e:6e:a7:2c:aa:15:a6:
0e:4d:27:c6:12:d3:af:b9:96:10:b9:48:65:1b:48:65:7b:ee:
79:c3:35:d6:c9:94:8e:23:b4:62:47:d9:fe:ca:70:0f:e5:56:
7b:19:83:a4:3c:cf:3f:38:31:cf:bb:04:ae:1c:10:ad:46:31:
2d:78:d0:c7:dd:ad:74:1a:b9:67:c1:c6:43:ef:22:5d:03:fe:
ee:3c:db:82:ac:0c:a0:66:4d:81:2f:ef:54:7a:cc:17:5f:d8:
f0:cd:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 14:46:01 2026 by rpki-client