Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier: sSDe4xB34Md9jXDkxAHHlTrdU2K1/unK1MNwqHbOQPE=
Subject key identifier: AF:4F:F0:10:52:D4:62:6D:39:39:5C:F7:EF:11:CF:FB:38:F4:77:DD
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 01A0890C5330769A487C33D2DDB0264B7ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number: 1A66
Signing time: Thu 10 Sep 2026 02:01:21 +0000
Manifest this update: Thu 10 Sep 2026 02:01:21 +0000
Manifest next update: Fri 11 Sep 2026 02:01:21 +0000
Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: C40pz5n54dkADlR9QVtV3VbVVSZO7FoRqmUMVrtrGc8=)
2: Sq9wGfvIXX44Fkr3lUW2I0R4bBk.roa (hash: IuqSt8hYCmt5WFSywk25kD+Qpj3FWEZCmOzvf0HCdPw=)
3: a7oEZXRPMRrFRbmlSe_UadUlmsM.roa (hash: HaaNwz+goojKrZUIe2KTvp7CtBcwMtupi4I3fyS+Xww=)
4: jFj46lu_4u0ubIJMiYtU4-hn078.roa (hash: G0bQ//8p+NwdW+KNpaWOQBklpF5Yu3De2ZhKpunhcY8=)
5: onuyGuJos8Q8ND84yh1u-8KZ0LI.roa (hash: IwftUiRifWGm4SmqfCzNFHRxNAZyFmT+9xw7JojcqMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0c:53:30:76:9a:48:7c:33:d2:dd:b0:26:4b:7a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Sep 10 02:01:21 2026 GMT
Not After : Sep 11 02:01:21 2026 GMT
Subject: CN=af4ff01052d4626d39395cf7ef11cffb38f477dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:de:ff:56:6c:b7:20:8a:5b:2d:f5:a2:ae:
46:5c:75:48:cd:c0:c0:70:f1:f8:b4:c6:11:51:b6:
dd:70:34:1d:38:72:8d:b2:9f:a6:6d:a3:aa:dd:bc:
a3:50:44:c7:62:47:1d:0e:2d:4f:82:c1:b5:8f:65:
cb:fe:c7:b3:70:e0:02:36:00:a0:2d:5f:22:c3:4d:
84:02:99:16:65:bb:7c:ea:7d:fb:ee:30:1a:86:29:
42:d8:88:53:05:f0:1c:41:e3:c5:a0:6f:b7:42:83:
b6:3d:14:95:18:64:86:24:c8:67:6f:ea:bd:e5:2e:
0e:76:05:11:99:8c:bb:96:17:1a:69:55:37:bf:a6:
4a:a3:fb:fe:e1:73:91:ef:27:ff:c9:4a:a8:97:e0:
06:47:09:f4:e7:e1:d8:fc:d1:d0:7b:f9:ec:48:f9:
ff:7d:b0:10:23:da:9c:ad:66:4d:76:78:a6:57:f7:
76:15:61:e9:5b:bf:8c:32:50:35:7b:5a:50:8e:d0:
27:db:31:12:70:c2:f9:5c:96:96:79:b6:55:ed:cc:
9b:33:ee:e6:69:0f:e9:4a:9a:14:7b:ec:35:59:9b:
91:c1:a1:83:bd:38:d9:21:be:dd:81:dd:07:87:2f:
2a:51:48:eb:b1:4e:68:88:7e:e6:c8:e7:70:53:65:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:F0:10:52:D4:62:6D:39:39:5C:F7:EF:11:CF:FB:38:F4:77:DD
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fd:0f:b9:68:bf:db:78:a7:54:1d:96:66:fb:5e:97:10:d6:
66:13:dd:1c:39:4e:c6:52:c5:76:67:4c:69:b1:7e:d0:9c:df:
22:c6:98:ac:26:ce:79:68:c5:ae:b2:15:3c:a5:a5:5e:23:b8:
d6:cd:d6:00:90:d5:9f:f2:35:52:49:49:77:de:a2:40:ce:5b:
77:0a:de:4c:cf:0a:65:ab:8f:79:52:7a:19:3a:cb:6a:f1:94:
17:2a:a0:1b:4e:44:14:73:ac:6b:a3:1e:aa:cc:6d:1d:ab:24:
d7:46:e5:aa:40:62:be:d4:28:47:aa:a3:aa:4f:21:9d:5a:3a:
f0:37:22:6c:06:d2:e0:97:a7:a9:75:64:19:f3:df:90:42:20:
41:b1:37:e2:14:62:2a:35:76:25:39:ec:59:19:a7:7c:1d:23:
b7:68:a8:98:96:d5:4f:08:b2:29:05:cc:0f:0e:63:f4:ea:d9:
a9:5f:b8:55:9d:8f:09:d9:84:8d:99:4a:2c:3c:46:d3:05:ac:
d0:ae:70:ea:90:ce:a6:43:4e:c0:77:d0:b7:2e:28:88:13:ea:
28:56:27:a0:b6:0a:91:82:c9:da:9f:ec:2f:85:a6:05:28:40:
03:78:a6:40:f5:f3:c3:8b:ed:40:9f:ed:95:65:42:6f:fe:e3:
b5:a7:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:45:47 2026 by rpki-client