Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
File: hD2p5CaP63YPx9FbFdrIBCEAhE0.mft (raw, json)
Hash identifier: 5zvvmPD60DQ4Kiz9a8c9O/4L5oErLZ0ObqRHVQuKVIU=
Subject key identifier: 1D:73:77:9B:1A:44:5D:57:AE:81:FB:3E:71:04:CA:CF:F9:36:85:84
Authority key identifier: 84:3D:A9:E4:26:8F:EB:76:0F:C7:D1:5B:15:DA:C8:04:21:00:84:4D
Certificate issuer: /CN=843da9e4268feb760fc7d15b15dac8042100844d
Certificate serial: 01A0B6F6E56B57BDFB13FEFC98E3BB60B954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD2p5CaP63YPx9FbFdrIBCEAhE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
Manifest number: D8
Signing time: Sat 19 Sep 2026 00:00:28 +0000
Manifest this update: Sat 19 Sep 2026 00:00:28 +0000
Manifest next update: Sun 20 Sep 2026 00:00:28 +0000
Files and hashes: 1: hD2p5CaP63YPx9FbFdrIBCEAhE0.crl (hash: XvmSenPqAo1iswOz7CvyHCqvjUZ8IufJ37EOKaTU/bk=)
2: rr4RQ-DCDBuAfMwBxiVc7Iv6mmA.roa (hash: HtTDo1JiMJWwkQ/8kVU3J37roBmSdVOD0uWibm9pNdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD2p5CaP63YPx9FbFdrIBCEAhE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f6:e5:6b:57:bd:fb:13:fe:fc:98:e3:bb:60:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843da9e4268feb760fc7d15b15dac8042100844d
Validity
Not Before: Sep 19 00:00:28 2026 GMT
Not After : Sep 20 00:00:28 2026 GMT
Subject: CN=1d73779b1a445d57ae81fb3e7104cacff9368584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:cf:7e:33:53:ab:a4:a9:43:cd:dc:41:c2:
59:59:38:13:c6:99:57:3c:56:f0:83:69:c0:f9:f2:
29:13:59:25:27:e4:1f:7c:ed:cc:24:31:60:57:af:
8a:50:7b:98:7b:1f:de:16:df:7d:1d:6f:8e:4c:a1:
c6:ec:17:24:d6:fa:6c:50:4e:38:5c:ea:d7:64:87:
de:7b:6e:51:c1:a7:00:9e:c2:d8:f0:b6:6f:a8:89:
4e:52:34:6b:6f:94:17:d1:5c:4b:ef:49:26:b3:1a:
f7:ec:dd:85:7f:1f:05:09:2e:72:19:6e:23:90:e8:
92:6e:10:55:a2:16:61:aa:e8:f5:bb:0d:99:65:23:
58:e6:35:69:a7:c2:c9:4e:a4:ab:73:3b:c5:a2:a9:
2f:e2:f4:9c:20:ba:30:43:01:64:76:b5:71:69:ff:
79:63:ff:88:fa:30:73:a6:c9:87:52:c1:5a:60:84:
7f:08:dd:61:36:d6:48:ee:ac:3c:66:9d:dc:6f:67:
4a:14:d4:e5:c7:27:68:32:76:ad:da:ff:fd:4f:d7:
07:25:00:a2:9c:84:b7:80:77:1b:5d:46:13:04:ab:
f6:62:bb:d3:64:13:8c:c6:be:fb:45:24:e1:0b:4c:
0b:40:e7:ab:16:4e:8b:8c:8b:a9:f6:91:78:11:62:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:73:77:9B:1A:44:5D:57:AE:81:FB:3E:71:04:CA:CF:F9:36:85:84
X509v3 Authority Key Identifier:
keyid:84:3D:A9:E4:26:8F:EB:76:0F:C7:D1:5B:15:DA:C8:04:21:00:84:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD2p5CaP63YPx9FbFdrIBCEAhE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/hD2p5CaP63YPx9FbFdrIBCEAhE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f9:2d:92:67:83:7a:65:6c:f1:f6:7a:8c:0c:21:31:af:52:
41:82:79:b7:49:30:ef:e9:6c:34:85:c4:fe:68:2c:3f:88:12:
5e:92:8d:3b:67:4b:ca:07:c7:a1:ed:49:a7:f8:50:24:c7:bb:
8b:b0:82:d1:13:42:e7:56:29:7d:47:5f:c3:51:93:95:e9:ac:
82:d9:96:4b:b3:8c:2d:89:a6:a3:6b:e9:f9:ec:56:bd:f8:19:
d2:35:04:a7:f3:bc:66:e9:a2:07:11:3a:68:46:f0:e2:6a:31:
23:43:90:26:7c:a4:5b:99:c8:0b:f7:a2:0e:95:8e:d7:06:f6:
82:ce:e7:26:36:b7:56:3a:be:76:00:7b:fc:0d:ca:f0:77:59:
fa:9d:56:54:b8:cb:da:01:29:cd:32:7d:ce:99:5b:25:b9:12:
3c:19:af:77:a9:20:35:41:30:17:be:91:7c:0b:98:43:b1:04:
43:70:ff:75:1c:e5:87:45:a2:b2:7e:5d:65:8a:6e:da:41:1f:
ed:26:5a:e1:e7:2d:18:68:ab:5f:26:8a:46:6c:62:15:16:f7:
6c:56:26:f5:b1:ea:1f:8e:45:60:09:5c:fa:32:c1:73:7a:cc:
b6:26:26:fa:4b:1d:1d:a3:c5:54:dc:e4:61:37:52:23:68:20:
9e:d7:56:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:07:32 2026 by rpki-client