Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: HW/zbjZbukRODbyDjAAQ4J/rZBzTkqUvFRZMf85Ys3I=
Subject key identifier: B0:DA:76:28:06:4F:8B:5F:D5:E1:C5:2C:C9:98:6C:34:D8:F7:79:11
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 01A08B68AA327419A577E8766441DED9F59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0D60
Signing time: Thu 10 Sep 2026 13:01:27 +0000
Manifest this update: Thu 10 Sep 2026 13:01:27 +0000
Manifest next update: Fri 11 Sep 2026 13:01:27 +0000
Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: SjuRP6v4nNcYpPyYM+7wJ5y3TZOsfEvIxen583TOELg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:aa:32:74:19:a5:77:e8:76:64:41:de:d9:f5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Sep 10 13:01:27 2026 GMT
Not After : Sep 11 13:01:27 2026 GMT
Subject: CN=b0da7628064f8b5fd5e1c52cc9986c34d8f77911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:8a:ea:40:96:9c:24:0f:d4:ba:03:bd:f7:
ae:09:24:4d:2e:d1:9d:26:0e:ee:76:b6:74:f5:ed:
8d:28:c5:a6:00:ce:f8:81:70:10:19:95:f8:5a:9d:
d8:7f:c2:b2:8a:1d:0e:76:b4:35:15:13:f7:6f:64:
9a:6e:a0:89:3a:9b:14:b2:7b:0b:50:e8:e4:98:15:
df:54:aa:5f:38:b4:2d:3c:d1:d9:a7:b1:f9:49:ad:
56:8d:7b:85:88:bd:9e:20:f5:76:5e:a9:a3:d0:6f:
14:13:60:0a:68:ce:de:8a:4a:2b:ab:aa:4b:c5:02:
91:03:a9:13:01:e7:ed:cc:bf:11:b9:da:07:ec:53:
fc:3b:db:3d:9c:b6:c2:05:76:72:86:f6:d9:52:81:
59:3e:e5:14:03:c8:aa:e1:53:9f:21:5d:72:96:06:
e3:5a:4d:09:75:b1:ee:07:50:d1:08:ee:73:04:c5:
19:29:f8:bd:9f:40:00:39:d7:1a:68:b7:b3:41:66:
68:77:55:db:bb:37:7b:58:af:78:2b:2b:33:3d:b4:
e7:16:c9:9d:5d:41:df:af:a2:13:91:7d:9b:65:57:
57:ac:15:e7:a1:e8:15:ce:69:6e:c3:34:97:54:b7:
15:02:dc:db:64:6f:94:6c:f6:ee:8c:5a:0a:ad:00:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DA:76:28:06:4F:8B:5F:D5:E1:C5:2C:C9:98:6C:34:D8:F7:79:11
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:84:90:ca:a3:5a:9a:26:dc:ba:03:7b:0e:3a:86:2d:6e:aa:
85:c7:2b:24:80:33:7a:0f:5b:75:06:b1:bd:ed:21:5f:b6:a4:
40:88:61:3f:7d:b2:5a:6a:b4:0e:57:26:e0:c1:7b:bb:01:00:
c0:23:58:ca:7b:d5:6d:10:eb:4f:88:75:2a:62:31:a7:73:70:
67:2f:13:1f:0f:3d:8c:86:18:9b:e8:54:91:3f:31:e0:c0:de:
ae:e2:59:01:f3:9e:5d:54:5b:8c:8a:80:7b:38:ad:b8:e2:0f:
2b:2c:9f:f7:c9:7a:98:d4:55:fa:e8:03:82:41:10:c3:a9:4c:
14:29:91:45:c0:31:e1:aa:02:4d:2f:84:5e:bd:31:dc:6f:d0:
4c:70:1c:cb:24:53:d7:d7:03:b9:53:32:51:b6:71:f7:b7:42:
6d:a3:8b:2a:ad:b8:e4:89:0a:7b:40:64:40:39:7a:41:c0:c9:
0a:76:8b:60:56:da:7a:34:8c:cd:4d:d7:18:ce:91:4f:05:b3:
08:32:e0:ef:38:8e:a8:11:1d:53:8e:1b:e0:50:18:6a:cb:f1:
aa:42:78:98:0c:86:1d:f2:b8:2d:a4:95:b7:d7:34:c4:ba:60:
55:c0:82:84:6c:27:ba:e8:d7:c4:3f:9f:7f:90:9d:8c:b1:ac:
bf:29:c7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:38:50 2026 by rpki-client