Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: r9GGMNJWvmmPKaaBpnMWhO6icyexEJTgWpWW2DinPaI=
Subject key identifier: 6F:8E:BA:FB:E9:65:CA:95:D5:2C:B5:C6:59:67:12:3A:13:ED:9B:28
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 01A18450B1A4CEA42AFCA12A47D9D2A97588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 1A9E
Signing time: Wed 28 Oct 2026 21:00:43 +0000
Manifest this update: Wed 28 Oct 2026 21:00:43 +0000
Manifest next update: Thu 29 Oct 2026 21:00:43 +0000
Files and hashes: 1: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (hash: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: GEGMvCbPDcKr3HE1KD6gQN6c0GClx/XXZfCattwO5Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:50:b1:a4:ce:a4:2a:fc:a1:2a:47:d9:d2:a9:75:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Oct 28 21:00:43 2026 GMT
Not After : Oct 29 21:00:43 2026 GMT
Subject: CN=6f8ebafbe965ca95d52cb5c65967123a13ed9b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:4a:a1:d0:a6:61:26:92:71:5d:c2:c5:2d:
08:6c:11:75:53:34:cc:c6:81:99:de:ca:f6:b6:db:
bb:3b:a5:62:cc:39:15:e9:80:5a:31:af:cd:1d:af:
f8:57:c8:47:0e:b7:b8:65:78:0c:82:27:8b:70:20:
ea:bc:11:49:fc:01:e4:5c:2b:3c:d4:f3:d3:a0:62:
ff:4a:56:56:7f:26:cd:c3:17:43:3f:3d:bd:6a:3d:
12:06:fd:df:2a:54:7e:9c:3a:9b:9b:e0:90:49:9b:
39:e7:7d:2a:4f:9f:35:91:15:7e:61:13:df:ae:a2:
ab:c5:14:ce:de:67:0f:6d:62:9b:4d:65:f0:c6:a9:
e0:4b:6e:24:19:e3:76:13:c5:00:47:a1:4f:e2:e1:
b4:f8:29:13:3b:06:5c:9c:08:aa:08:ee:cb:b7:6b:
ce:07:24:32:b6:f0:93:86:c2:69:80:ca:5e:2b:03:
d8:cc:56:8f:54:44:67:88:f8:68:02:92:92:7f:12:
81:c8:c4:38:7b:2b:43:8f:02:39:53:1c:9c:0a:69:
ac:18:9e:bf:9c:a1:a1:9b:d5:a5:26:24:48:d6:11:
7c:19:e4:67:f8:8b:d9:02:57:9f:fe:5e:68:10:1c:
62:63:38:41:2e:2e:6c:6f:1c:04:36:1c:01:21:19:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8E:BA:FB:E9:65:CA:95:D5:2C:B5:C6:59:67:12:3A:13:ED:9B:28
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cb:73:77:51:c3:59:62:42:68:db:ba:74:c9:bb:74:a4:e9:
09:0b:79:aa:10:8d:a1:9e:e1:16:e6:c1:c0:ec:d0:41:19:65:
c1:48:56:3c:fa:c6:67:f6:a3:d0:8c:0a:6f:c1:90:52:c5:3c:
32:8c:ef:ab:31:36:e7:6c:e4:26:13:b0:6d:2a:55:d7:d7:b4:
45:f6:f5:c0:b5:00:f9:03:f4:0f:bb:4b:a1:a7:a3:74:d3:a7:
90:d6:16:d4:b2:3c:7b:94:84:75:f9:c5:18:38:85:30:2c:46:
c4:f6:cf:3b:4f:9f:e4:08:7e:db:08:24:03:c1:db:f5:c6:bb:
21:48:f8:13:28:4c:fa:6d:a5:16:eb:29:4c:6a:b5:a0:7f:a5:
2e:8e:93:41:eb:3c:a8:c6:d5:4e:52:48:4b:5d:30:9e:fb:f6:
e4:99:2e:3e:28:20:98:69:13:5c:42:e3:61:d8:93:80:5a:8e:
26:40:f0:31:55:e7:3b:c7:43:57:fa:24:b3:10:b2:70:c0:e9:
a6:10:e7:9f:08:42:4a:63:8e:27:2b:fd:a0:02:a0:77:88:e4:
06:60:48:e8:e4:47:92:99:61:a6:06:07:17:be:07:87:df:72:
eb:fb:ac:da:9f:95:a4:e6:00:ad:b3:f8:3e:8f:f9:fa:79:28:
77:d5:25:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:16:29 2026 by rpki-client