Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: dxAPNpyIftr4FBBh3ergS58g/LVmrvrACeUvUiIZQPU=
Subject key identifier: 10:5E:B6:A2:1F:9C:A4:98:8F:0A:E7:6A:DB:E8:C3:E6:F3:BC:5A:03
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 01A08AF9F3BF7C9801490EEAAF721CB8BA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 0866
Signing time: Thu 10 Sep 2026 11:00:31 +0000
Manifest this update: Thu 10 Sep 2026 11:00:31 +0000
Manifest next update: Fri 11 Sep 2026 11:00:31 +0000
Files and hashes: 1: OMhZqYIdlbW6MwJAX5hoXZbZs2s.roa (hash: Fz6GaOA6LETuiDcthzdYWCgbQdrzncp3eZt1aOMvmKA=)
2: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: D+KUARZWrZUrY2tqN725cjO3AaT380N/lNNyi3h01vY=)
3: wOUhGVesCisY2HnfnAjl6Jnr-xg.roa (hash: M8DXDaBoO3oUhqazgEAtDmfaFAvLdpC11jKkFsNS9mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f9:f3:bf:7c:98:01:49:0e:ea:af:72:1c:b8:ba:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Sep 10 11:00:31 2026 GMT
Not After : Sep 11 11:00:31 2026 GMT
Subject: CN=105eb6a21f9ca4988f0ae76adbe8c3e6f3bc5a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ea:03:54:d7:11:18:36:c4:9d:7c:cc:19:d7:
b9:ae:82:2d:37:26:bd:c8:40:ed:b7:38:0a:65:f5:
ed:06:79:41:3b:af:18:33:fb:e1:16:de:f5:ac:71:
fc:1f:0e:b3:c9:31:65:04:24:d4:3f:b3:e8:68:7b:
82:74:03:35:95:8d:39:07:36:15:03:55:a6:ba:80:
a4:e3:f8:39:3c:ac:b6:0d:3a:ec:cb:f1:4a:6b:16:
9c:3e:bf:3e:ae:f9:a3:55:d7:75:dc:7c:5f:ef:89:
71:e3:00:16:96:dc:25:b1:40:fc:bb:ad:ab:6e:8f:
ac:79:3a:a1:cd:6e:ae:21:bb:51:51:f1:bd:08:66:
0e:68:2f:ad:5f:69:09:b3:f8:bb:54:fb:2f:d8:9d:
f5:66:c2:9f:fd:32:5b:a6:8c:ca:6f:03:e1:5f:27:
36:b3:23:ad:c9:61:0b:71:2b:76:48:c6:ec:2f:1c:
e1:38:76:c9:d7:8e:82:9c:94:75:c1:ed:dd:53:ce:
2c:e7:4f:e3:d6:e5:18:2a:25:0c:9a:2b:8e:07:f1:
f6:f6:c8:64:93:0c:59:45:e7:80:ba:05:65:74:fe:
b0:bf:88:bc:44:3c:e6:f3:1c:94:bd:a2:54:94:16:
3a:64:53:78:02:0d:7c:b8:54:ca:28:15:bb:84:83:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5E:B6:A2:1F:9C:A4:98:8F:0A:E7:6A:DB:E8:C3:E6:F3:BC:5A:03
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fe:48:72:99:18:20:9c:14:79:06:a7:c5:d1:2a:96:f7:21:
08:6e:2b:99:6e:99:3b:43:ac:6a:76:dd:4f:06:39:51:8c:0e:
77:94:7f:d3:04:3e:23:12:3a:7c:71:a3:65:bc:39:2e:9d:42:
f6:b8:22:41:33:f9:7a:60:2c:e6:bd:29:8e:f4:2b:f9:6a:92:
b4:94:95:ad:72:71:9f:1b:47:3d:21:6f:2f:e4:9f:6d:16:eb:
33:46:39:f4:27:e8:37:a9:c4:b3:1a:06:31:38:bf:59:43:b5:
cd:51:17:e6:69:ba:4d:4c:57:31:d2:7e:ea:12:dc:1f:04:14:
f5:a9:6f:91:e4:31:7d:cc:ad:6a:74:db:93:2a:ee:1d:69:03:
fb:a9:9c:72:84:15:51:1f:76:e8:b5:3b:fd:51:f9:1e:53:18:
0c:7b:42:10:b4:56:e6:f0:94:98:b2:60:c9:9a:51:51:28:ac:
56:c0:58:dd:20:f5:82:cd:50:4e:64:67:47:72:c2:1f:d6:82:
a6:ea:c5:b7:72:8f:7c:eb:e6:de:d7:67:11:3d:f1:02:f1:c4:
cf:fc:70:92:5b:28:ce:10:49:ca:27:0c:bd:dd:cb:86:73:9c:
2c:c0:95:bb:59:5f:0e:7d:ad:e2:90:e9:b2:fc:60:06:d4:55:
9c:b1:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:19:05 2026 by rpki-client