Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: ZStnhULrjgSyHt725Dk0WoQmRrEZ0hhKNFWh/YZsAXc=
Subject key identifier: 93:91:29:3D:6D:C7:2F:0A:BF:F9:7A:1B:5C:4D:C3:40:A7:BD:FD:4B
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 01A174DD6950469C67D09E151FC3EA9C190D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 07D0
Signing time: Sun 25 Oct 2026 21:00:29 +0000
Manifest this update: Sun 25 Oct 2026 21:00:29 +0000
Manifest next update: Mon 26 Oct 2026 21:00:29 +0000
Files and hashes: 1: 0vS9LuHI8LHmYBf-04B_4EqaTyM.roa (hash: 1w3MTNAtMdbpQhZieDMx1aqfKs/uZi4c3hurmf5nWQk=)
2: YqpC5sn3lPh34dXLCKoe6SIqByY.roa (hash: t3wpEBucnLMbpU9d5Q7NM5fRdV7jRAGiRx7mg/CI4SQ=)
3: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: TfUgd9OmAEK/XET3onbAzlhPuEkXu7xoJEq9qj9KnNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:69:50:46:9c:67:d0:9e:15:1f:c3:ea:9c:19:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Oct 25 21:00:29 2026 GMT
Not After : Oct 26 21:00:29 2026 GMT
Subject: CN=9391293d6dc72f0abff97a1b5c4dc340a7bdfd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:6d:ce:29:5b:5b:4a:95:fb:d8:87:76:72:
3a:c7:3d:9d:ee:b1:97:bc:f9:df:18:23:c1:05:ec:
cc:60:32:6d:a2:89:d2:7f:ba:c8:44:44:24:79:20:
c3:7c:c8:06:61:33:8c:c4:18:ea:10:f5:34:6f:1d:
04:25:0b:18:13:bf:72:78:e1:99:9e:69:ba:79:6d:
25:73:33:70:fb:8f:c2:91:3c:53:81:52:73:10:27:
84:be:24:2e:15:08:e7:93:a1:70:04:db:76:aa:d1:
af:98:56:16:e6:8a:8b:6a:86:13:49:87:70:de:eb:
c6:bb:e5:1d:52:81:8b:74:49:6a:d2:60:09:dd:75:
c1:04:8b:6e:b1:6b:e0:98:ae:7c:fa:64:b6:22:9d:
98:5f:62:1b:4a:3f:9d:1a:db:7c:e7:8c:dd:22:c7:
ea:01:38:db:5f:26:83:ec:16:1e:fd:40:8e:ac:dd:
3a:b5:2a:02:9d:9e:dc:c2:74:0a:c7:09:e4:e0:d5:
e1:26:54:df:e2:7c:9c:38:30:31:68:6f:63:9f:d9:
4d:73:52:0a:18:82:56:75:bd:d7:22:b6:3b:e0:3a:
6a:66:99:3d:31:b5:f6:bb:10:82:3b:c1:56:af:39:
78:e3:80:14:01:31:58:8c:28:23:5d:dc:79:a5:46:
15:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:29:3D:6D:C7:2F:0A:BF:F9:7A:1B:5C:4D:C3:40:A7:BD:FD:4B
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0a:35:7e:97:ab:4b:7d:3f:a1:10:76:57:e2:7d:c2:62:5a:
b2:bd:ea:a9:9e:fd:67:df:33:3c:e5:a3:62:f3:3e:6d:b0:d5:
4b:5c:8a:26:58:1e:55:a7:18:68:33:d9:49:96:ec:12:76:20:
d9:7c:58:03:95:36:8b:06:c0:4a:3e:45:54:eb:6c:d1:31:d5:
12:c8:0a:a9:74:19:e4:ba:55:a1:ec:a8:9e:36:fc:9c:5f:1b:
9d:25:12:53:e4:d5:9f:0b:29:7b:63:ff:4f:f6:7f:f3:be:2f:
18:4c:53:36:2b:8f:44:4f:a6:75:8e:c1:76:ad:f9:0c:e5:c9:
08:d7:6a:47:3d:71:83:18:82:98:72:db:c2:18:01:fe:23:b7:
98:6d:f9:6e:2b:58:af:4b:7c:2d:0e:b3:e7:f9:e8:fd:55:e9:
4c:1a:06:35:dc:3d:46:7b:e3:f2:a0:71:a1:a9:52:9e:f7:94:
ac:ec:2e:2b:aa:69:e8:b1:32:69:a2:9a:08:a6:f2:1c:75:48:
80:28:7a:d8:4d:72:59:58:0a:53:db:e9:77:0b:0d:28:9d:4b:
aa:54:0a:20:4c:6e:2c:b9:a0:68:45:d1:ed:c5:53:8c:23:9f:
32:9e:b5:bd:76:de:60:e9:9f:45:f1:3a:0a:29:1f:82:a9:4d:
8e:7a:ed:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:26:45 2026 by rpki-client