Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
File: hcEp31AMjfmKQosomcbNYSTxaKE.mft (raw, json)
Hash identifier: 0sK8wKVPW3rfmWU2eINM7UCy2mPgrERZtAKazPh9xCw=
Subject key identifier: 94:C3:81:11:E8:D4:E9:2B:26:27:67:0C:1F:F9:B9:D0:FE:91:F5:92
Authority key identifier: 85:C1:29:DF:50:0C:8D:F9:8A:42:8B:28:99:C6:CD:61:24:F1:68:A1
Certificate issuer: /CN=85c129df500c8df98a428b2899c6cd6124f168a1
Certificate serial: 01A0BCC2308A32EBEBB3F64C44FC57D888B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
Manifest number: DB
Signing time: Sun 20 Sep 2026 03:00:38 +0000
Manifest this update: Sun 20 Sep 2026 03:00:38 +0000
Manifest next update: Mon 21 Sep 2026 03:00:38 +0000
Files and hashes: 1: JHT6ESoo6q0bOi3_neOwXu64U4c.roa (hash: 1z9FjYu9NjkAWLtxnb2DnFiLMcGnPYdwdwCvpCkxJqM=)
2: hcEp31AMjfmKQosomcbNYSTxaKE.crl (hash: FYjdzJwWcQDzwwfSyd0KxkP4srxAG++hSect0VIkL+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c2:30:8a:32:eb:eb:b3:f6:4c:44:fc:57:d8:88:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c129df500c8df98a428b2899c6cd6124f168a1
Validity
Not Before: Sep 20 03:00:38 2026 GMT
Not After : Sep 21 03:00:38 2026 GMT
Subject: CN=94c38111e8d4e92b2627670c1ff9b9d0fe91f592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:46:bf:1e:6b:7d:c0:5f:45:d3:ec:79:28:
92:70:da:0e:da:6b:74:44:9d:fe:b1:39:e7:f8:6f:
0f:86:96:2b:f5:1a:b9:56:d4:44:35:1f:a7:ed:b2:
5c:b0:17:fd:a7:c5:6c:36:d7:fb:18:79:06:40:da:
a8:f5:e9:00:1e:5a:88:94:5b:62:2f:ea:32:42:93:
ab:c8:ac:b1:ec:09:6e:12:89:15:b2:e9:12:0e:1c:
50:ee:21:76:aa:69:a2:3c:25:c6:35:4c:68:8b:de:
c4:9d:ac:1b:01:ec:08:60:b3:51:80:ee:4c:9e:34:
9c:59:1b:cb:98:09:19:6c:61:42:5d:d8:b0:3a:00:
3a:79:3f:3c:d8:c4:74:fc:4a:2c:d6:56:2c:84:e6:
66:8e:ab:81:0e:23:36:50:96:87:44:ab:27:5f:78:
3c:06:50:f0:9e:cd:ab:59:ae:39:bb:57:d4:2e:25:
da:7b:62:85:13:9d:55:2f:7b:12:bd:d0:bd:04:a9:
eb:03:7f:82:6c:64:c0:3e:c9:e8:37:32:11:90:80:
07:84:14:fe:5f:09:a6:b6:39:7b:1e:34:13:47:1b:
f4:3e:75:f2:67:71:39:bd:4c:f2:df:9d:97:ec:86:
59:d6:8d:39:cf:2d:0f:7b:6f:13:95:34:e6:21:76:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C3:81:11:E8:D4:E9:2B:26:27:67:0C:1F:F9:B9:D0:FE:91:F5:92
X509v3 Authority Key Identifier:
keyid:85:C1:29:DF:50:0C:8D:F9:8A:42:8B:28:99:C6:CD:61:24:F1:68:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcEp31AMjfmKQosomcbNYSTxaKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/hcEp31AMjfmKQosomcbNYSTxaKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ab:f4:c3:36:52:f5:20:1b:17:7e:08:f0:24:ed:99:4e:92:
2d:00:a6:58:a3:a3:c8:55:b3:25:80:80:a1:ed:74:9c:80:93:
9a:8e:b8:1a:7a:ba:1f:be:c3:85:f0:3b:f2:22:15:13:3c:10:
fb:05:71:dd:92:cb:5a:f7:83:87:a9:53:aa:bb:0c:2d:04:07:
9e:84:6b:3c:8e:71:9a:3c:fe:b7:b5:0b:82:0e:c4:ec:79:cd:
55:a8:79:da:fa:81:33:fb:10:76:6a:5d:f1:45:0d:01:30:43:
eb:45:1a:8b:0d:22:a0:ff:73:62:c4:54:8b:a2:08:71:e4:45:
d7:67:ce:9f:aa:2a:fe:ce:b1:8d:0d:cb:a8:b2:64:f1:5c:c1:
42:8d:86:1c:54:99:2c:97:72:1e:7c:f9:d3:5a:de:75:c0:10:
53:b9:01:65:f3:85:45:45:94:a4:5f:f9:db:f3:e0:84:57:f7:
89:70:fa:3f:f4:00:d6:1f:0c:59:a5:56:44:fd:6b:20:40:63:
85:63:19:a7:09:4e:ee:00:68:c1:90:12:cb:f4:05:6c:dc:52:
36:3b:ab:a9:36:c2:bc:f7:fd:32:64:b9:7f:22:48:ae:ed:d3:
2b:fd:d5:5a:8d:56:c4:6e:23:7b:8f:fd:47:26:97:82:a8:a2:
f7:09:c6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:37:16 2026 by rpki-client