Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/hZQ_zPsylcsWjRO1xj8xUGawuRU.mft
File: hZQ_zPsylcsWjRO1xj8xUGawuRU.mft (raw, json)
Hash identifier: 121vftWg8LFws47tLw2GT3ELYtJRn8ZSAlYXk2c/TiM=
Subject key identifier: AE:CD:10:DE:CE:78:F0:33:C1:AC:39:00:B5:AF:54:ED:6A:E6:F9:A4
Authority key identifier: 85:94:3F:CC:FB:32:95:CB:16:8D:13:B5:C6:3F:31:50:66:B0:B9:15
Certificate issuer: /CN=85943fccfb3295cb168d13b5c63f315066b0b915
Certificate serial: 01A13FDE78E28AD6EAA27BDC0E032DCEABC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZQ_zPsylcsWjRO1xj8xUGawuRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/hZQ_zPsylcsWjRO1xj8xUGawuRU.mft
Manifest number: 0B
Signing time: Thu 15 Oct 2026 14:01:46 +0000
Manifest this update: Thu 15 Oct 2026 14:01:46 +0000
Manifest next update: Fri 16 Oct 2026 14:01:46 +0000
Files and hashes: 1: S2mByjeCvJnS5LNLCu40LNOxnxs.roa (hash: gFdglKIx2lxhYtvHeBPmS1Q3CKXww/xFdjrxNiomvJA=)
2: hZQ_zPsylcsWjRO1xj8xUGawuRU.crl (hash: Hoyj1OISpxI28JaoSxS1PoU4QZ2u9TWosEdkYX4TKyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/hZQ_zPsylcsWjRO1xj8xUGawuRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/hZQ_zPsylcsWjRO1xj8xUGawuRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZQ_zPsylcsWjRO1xj8xUGawuRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:78:e2:8a:d6:ea:a2:7b:dc:0e:03:2d:ce:ab:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85943fccfb3295cb168d13b5c63f315066b0b915
Validity
Not Before: Oct 15 14:01:46 2026 GMT
Not After : Oct 16 14:01:46 2026 GMT
Subject: CN=aecd10dece78f033c1ac3900b5af54ed6ae6f9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:75:40:2a:15:90:6c:78:3e:21:51:fa:f9:
98:59:3c:82:7e:b2:34:3e:06:f1:64:15:f5:21:32:
84:fc:e6:fa:87:c9:1f:d4:7b:47:da:cc:32:6e:7a:
ed:4d:85:57:b4:22:d2:ef:72:fe:2e:e0:c4:ff:a8:
fc:f4:99:8c:6d:45:e9:a1:36:d8:d2:4e:85:41:60:
a1:2d:f7:af:42:e3:39:ea:39:08:5c:80:49:27:77:
1c:cd:9c:3c:79:ee:cf:75:59:b6:58:8b:fb:85:b7:
02:55:38:8c:7e:38:41:5b:c4:78:37:cc:be:8a:0d:
81:b8:83:6c:1e:d3:45:bc:f2:7c:b4:55:d4:f1:0e:
08:d9:ce:63:9e:08:f6:b4:38:49:f9:4e:01:20:29:
37:69:b0:d6:7e:d1:f8:17:68:96:a3:b7:cc:62:2b:
77:92:63:be:c9:bc:01:ed:85:80:b7:6a:d4:2a:ad:
52:a6:ef:a1:03:06:63:95:2c:f2:84:bf:75:7d:a7:
00:9e:ed:65:5e:62:52:26:bf:aa:2d:df:de:8e:ee:
44:4b:32:57:4f:2c:dc:c4:aa:9e:ba:f3:93:9b:9f:
5d:02:6d:8b:e7:95:85:4f:7e:56:16:37:a9:93:59:
5f:0a:b9:cd:e0:3d:48:fc:35:52:ee:eb:18:35:e7:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CD:10:DE:CE:78:F0:33:C1:AC:39:00:B5:AF:54:ED:6A:E6:F9:A4
X509v3 Authority Key Identifier:
keyid:85:94:3F:CC:FB:32:95:CB:16:8D:13:B5:C6:3F:31:50:66:B0:B9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZQ_zPsylcsWjRO1xj8xUGawuRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/hZQ_zPsylcsWjRO1xj8xUGawuRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c300dc-0bbf-431b-9366-c48a6e633568/1/hZQ_zPsylcsWjRO1xj8xUGawuRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d2:6a:79:08:62:a8:79:c2:d1:cc:c4:62:07:49:e1:0f:8c:
5b:6d:9c:46:10:08:c8:eb:2f:1a:70:11:49:21:c0:17:a1:d7:
5b:b0:70:6f:15:73:83:36:5a:9f:1d:ad:b9:f6:09:f7:4c:67:
be:e2:9c:cd:74:47:b4:af:28:d7:19:f2:82:4f:45:a0:6e:ab:
29:e6:e7:d3:68:81:55:9e:b5:be:d4:d9:cb:4e:59:d8:4e:b8:
d1:fb:28:7e:6b:fc:b7:03:4b:cf:ea:40:a5:0e:06:00:a4:12:
b3:83:f8:b2:65:ba:60:a3:bc:2b:42:83:e4:e0:a7:bf:27:34:
5b:b3:46:d1:b3:d3:ba:eb:69:bb:13:d0:b0:10:c9:cb:22:1a:
ad:01:2e:c0:95:bc:0c:da:9f:4b:2c:4d:b0:7e:82:ad:0e:01:
c7:9e:dd:dc:6b:c4:04:a3:05:d8:b7:54:03:63:f7:7b:fa:33:
b9:3c:b9:6c:d7:63:c9:92:34:6d:ea:15:37:2d:35:0c:e1:27:
1f:d7:a8:9c:21:63:4a:cd:28:8d:a9:bd:e1:85:83:ac:2b:f3:
23:e3:dc:bc:45:e9:09:c8:1e:f9:17:95:88:26:e1:30:d8:27:
a6:d4:ea:06:12:42:2f:2d:31:f0:61:aa:dd:56:b7:75:22:1d:
e1:f2:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:18:40 2026 by rpki-client