Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: EaPoAdMn2DvHejHm7TwS33YU0MS1kiFNT5r12R/Ho7Y=
Subject key identifier: 8F:5B:61:78:CF:CB:6B:A2:E2:86:06:18:AF:89:2B:E8:D5:74:87:9A
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 01A08D56B7AB6D4836A099C606DBB8BF35E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0BDF
Signing time: Thu 10 Sep 2026 22:01:05 +0000
Manifest this update: Thu 10 Sep 2026 22:01:05 +0000
Manifest next update: Fri 11 Sep 2026 22:01:05 +0000
Files and hashes: 1: Caiwf_QYVrjuMQk3SKwJbOdkL1I.roa (hash: 5fx/cD2u1bFDALyIAFqy2QpBhB4xdpPsEpLHocGA9Q4=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: n5Rb+sGlDJOBa+pKzZLVZNKTWY+5t4e9VjCLLaJEhiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:b7:ab:6d:48:36:a0:99:c6:06:db:b8:bf:35:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Sep 10 22:01:05 2026 GMT
Not After : Sep 11 22:01:05 2026 GMT
Subject: CN=8f5b6178cfcb6ba2e2860618af892be8d574879a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:33:84:30:d2:a2:47:ba:ce:af:cb:91:cc:
3f:aa:7d:1d:0c:90:99:33:bb:25:f8:ea:52:53:90:
ab:61:23:98:2a:ac:e1:3e:31:a2:eb:34:d7:71:1c:
8a:54:8b:fc:54:c6:1b:0b:1b:04:ba:df:e4:b9:43:
22:2a:f0:d8:97:c0:aa:76:91:1f:c0:10:b4:95:09:
7d:0f:3e:3f:ea:6a:60:b9:64:e2:4c:f9:1b:61:9d:
d8:1c:5d:68:11:62:8e:0a:5a:ee:d1:49:06:4a:d2:
1b:1e:93:42:b7:b6:92:c7:6f:29:09:7f:d0:09:de:
cd:58:1d:67:ce:69:19:1c:14:ac:fb:69:4d:43:37:
77:20:2b:13:14:ae:47:94:8f:56:aa:30:ab:86:81:
4a:5f:7b:cb:87:9a:35:99:fa:ba:a4:bb:87:71:df:
15:31:c7:1a:dd:3f:44:50:5c:8b:d2:34:43:36:04:
d5:e9:9f:c6:28:ef:b6:71:0c:2d:b5:04:63:74:76:
ed:dd:b6:62:93:62:6b:90:e6:be:88:90:12:f1:fa:
07:bc:ed:6e:9c:23:5e:f9:81:1f:0c:9c:f7:56:3c:
57:43:c4:91:2a:ff:7c:c4:61:14:4b:a6:68:b1:5a:
18:09:7c:22:0b:6f:9e:7e:25:9e:99:06:35:bd:24:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5B:61:78:CF:CB:6B:A2:E2:86:06:18:AF:89:2B:E8:D5:74:87:9A
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ef:20:2a:3f:26:59:78:bd:27:d3:ba:d3:3a:26:c2:9b:df:
d7:9a:c1:1f:81:2b:3b:29:c8:4b:c3:bd:2a:86:d2:4e:8e:5f:
c6:d3:7b:61:c7:9f:08:4e:32:e9:59:60:14:38:2f:91:af:04:
86:83:58:b8:0b:03:dd:87:52:13:69:ea:47:7d:03:38:c5:00:
9d:4f:1a:3e:04:e3:1c:fb:d6:c6:a6:1e:5a:1a:1b:fe:c4:dd:
0e:c4:1b:95:fd:cd:45:2b:c2:27:ee:81:5d:ff:8c:42:27:b7:
b2:9e:2b:0f:45:23:ff:2f:d2:5f:42:4f:27:c7:8c:24:d9:14:
3a:ca:f3:df:2d:7f:16:f6:bc:30:f1:48:4f:b6:19:e8:6d:2e:
16:b3:16:54:67:93:7b:c9:0e:eb:1b:9f:b1:13:6f:5b:3c:60:
2d:28:0d:c1:a6:f0:c9:f2:5a:46:c7:38:d9:01:d4:7e:e2:15:
fd:3e:94:fb:50:be:69:be:d2:b6:fe:e0:ac:b2:b2:cd:6d:ab:
b6:fd:35:44:62:52:2a:3b:12:0f:40:30:bb:1d:1a:4b:b2:7e:
ee:d8:5c:a9:26:d5:c6:5d:6f:93:2f:9a:9d:26:dc:84:27:7c:
74:7c:e5:cd:b2:61:ce:49:a3:60:af:41:19:1d:d6:d0:f2:f5:
f3:6a:ee:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:36:31 2026 by rpki-client