Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: 6i1shYzN8SuhFqCyLWV9UbiKzEtHKecO3Q0KV5/1BqQ=
Subject key identifier: 9E:FA:DD:48:A1:C2:CC:86:17:53:88:A8:F7:37:00:91:AF:BD:B4:BC
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 01A13F020B3A40FB1B7525BF51F95CDAF3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 10:01:00 +0000
Manifest this update: Thu 15 Oct 2026 10:01:00 +0000
Manifest next update: Fri 16 Oct 2026 10:01:00 +0000
Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: W8tI66zy1R1kMyQvep8rPhDCE2PEqcV1pD7DOZ6wNJo=)
2: z_fYCrrGSV54cj1knb3xBk4SK5U.roa (hash: EFlql6uKuI4YQL66OtBnNw+c0chssYW8DVC7ieJRlbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:0b:3a:40:fb:1b:75:25:bf:51:f9:5c:da:f3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: Oct 15 10:01:00 2026 GMT
Not After : Oct 16 10:01:00 2026 GMT
Subject: CN=9efadd48a1c2cc86175388a8f7370091afbdb4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b8:6c:ef:92:a2:5f:41:dd:e7:26:cd:e8:f0:
ea:32:e0:2a:08:0e:1e:88:03:8f:14:f9:0f:c7:24:
b2:e5:65:c4:e2:e9:93:f3:e0:10:91:09:2e:61:f5:
7b:d7:cf:ea:db:5c:e8:f0:61:50:ea:a3:6a:91:f0:
08:6e:f3:5f:8d:5b:ff:8d:cf:c3:b2:98:49:a1:25:
b2:b8:6a:c8:8a:4d:65:a6:ac:36:90:c8:8b:ab:bd:
2c:8c:42:7f:62:6a:43:66:7a:a8:70:bd:cd:4f:9c:
db:80:a1:76:ce:51:d2:f1:d0:77:e3:df:16:97:c5:
a6:01:2e:d0:f2:05:03:3b:85:6c:da:17:41:0a:e0:
63:6b:f2:6d:45:e4:55:69:8e:c9:5a:76:b0:29:92:
96:7e:e9:e8:4f:26:a7:80:3d:59:49:79:b3:c4:35:
63:42:f4:3e:31:92:89:6f:f7:74:05:4e:c6:42:7b:
f7:96:78:a7:b3:57:1a:ba:e2:8d:9d:cf:4d:5c:88:
9c:f2:1a:ba:66:ec:b9:27:6a:63:18:fc:0e:d2:12:
8e:19:5b:24:44:93:58:81:95:27:7c:6c:e8:38:65:
ae:a9:97:3e:85:57:0c:aa:0f:87:9b:db:23:bb:2f:
33:61:26:dc:80:da:66:20:97:bd:5b:91:11:6f:64:
45:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FA:DD:48:A1:C2:CC:86:17:53:88:A8:F7:37:00:91:AF:BD:B4:BC
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:83:8a:b6:48:be:5e:7f:25:70:00:44:f6:d2:01:9c:17:6c:
bd:90:96:7b:c7:58:0d:77:52:0f:cd:c7:d2:36:8e:a6:82:55:
70:24:04:cf:66:86:6b:68:80:67:14:75:c7:fa:d7:88:1a:ac:
88:76:03:94:50:f9:f5:7f:5d:39:a1:03:3b:0e:81:6a:30:3e:
c6:27:52:2f:6c:2c:4f:d9:17:5e:df:36:57:37:bb:08:72:f6:
ed:a9:33:28:43:0f:8a:0d:a9:17:3d:e0:1d:81:3e:2e:37:57:
af:9c:80:55:57:1e:9e:88:d1:40:fc:90:d5:43:32:9b:90:64:
b1:94:58:70:f8:5b:e0:86:b5:cf:6d:69:6d:ad:6c:6b:d2:56:
d8:14:92:0a:26:b5:58:46:91:f9:e0:c2:37:bc:a2:32:82:fc:
44:ff:ce:b9:c5:36:76:b1:b0:f0:82:af:f8:0f:62:1c:15:77:
c9:9c:b8:b3:95:2f:29:c4:a1:a5:9b:7e:35:fb:c8:b0:c8:77:
fd:f0:45:e7:64:df:7f:d2:6f:1b:f6:ba:8c:be:bc:6a:bb:f1:
d4:2e:a6:28:11:98:94:a3:09:d7:41:6e:be:ca:90:49:4e:6b:
44:a5:0c:9f:b6:4e:39:1d:26:26:33:69:08:90:1a:06:5a:18:
80:83:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:17 2026 by rpki-client