Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
File: hfR7ZaUlMyab0hmBOlIDr92eXb4.mft (raw, json)
Hash identifier: JMk64wIb95RkID6SSDaWfZKhYQDb/zJAD5R4sCnhXfE=
Subject key identifier: 72:AC:1D:01:79:51:57:65:F2:BC:CD:18:4C:4E:91:09:EF:A4:DF:DF
Authority key identifier: 85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
Certificate issuer: /CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Certificate serial: 01A08A8C700A4F97916939BBC8D5E50CB400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
Manifest number: 1639
Signing time: Thu 10 Sep 2026 09:00:54 +0000
Manifest this update: Thu 10 Sep 2026 09:00:54 +0000
Manifest next update: Fri 11 Sep 2026 09:00:54 +0000
Files and hashes: 1: hfR7ZaUlMyab0hmBOlIDr92eXb4.crl (hash: u2XJTdY3DqG+PVRUnz118HRd7lCPPnWKSiYUGkbgMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:70:0a:4f:97:91:69:39:bb:c8:d5:e5:0c:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f47b65a52533269bd219813a5203afdd9e5dbe
Validity
Not Before: Sep 10 09:00:54 2026 GMT
Not After : Sep 11 09:00:54 2026 GMT
Subject: CN=72ac1d0179515765f2bccd184c4e9109efa4dfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:74:9e:bf:fa:2e:97:ab:5d:d8:37:c9:a5:
e5:b2:00:30:56:ca:8c:43:62:03:26:06:7d:6a:d9:
0b:0a:df:f7:75:ba:cd:51:07:b2:55:25:28:8e:60:
e2:83:c1:db:6f:0a:b1:fe:81:e7:6c:eb:53:96:b4:
ab:ea:4e:1c:5b:bc:1f:6a:a8:bf:b3:b2:ee:ce:ff:
36:87:fd:e2:ba:ae:cf:54:96:87:63:b9:39:44:d2:
ce:95:8e:fd:78:8d:e9:a2:4d:51:7d:27:55:3f:4c:
8a:db:2f:9f:6c:c6:34:22:c7:94:14:45:8d:ba:77:
80:35:3d:7f:5c:63:69:a3:dd:a6:ef:13:5f:f6:b7:
5d:2f:b4:d5:f4:d8:c1:b0:fe:c2:37:0f:37:eb:19:
62:60:ec:c2:c5:c3:30:87:15:18:77:1b:9b:f5:8e:
3b:e3:37:4e:07:c3:98:9f:4d:b1:30:09:a8:d0:8b:
1f:21:7c:66:e7:27:d6:da:fc:d4:a3:98:cb:76:71:
a1:87:72:82:3f:4d:e1:98:96:cc:12:f9:43:9a:58:
82:8a:be:9b:a0:9e:30:2b:0e:df:0c:08:22:4e:90:
6e:dc:27:dc:bb:94:3a:34:45:fd:6c:d6:fa:84:ae:
cd:13:f1:2a:0b:e6:d3:02:9c:3d:49:c8:b1:ec:a4:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AC:1D:01:79:51:57:65:F2:BC:CD:18:4C:4E:91:09:EF:A4:DF:DF
X509v3 Authority Key Identifier:
keyid:85:F4:7B:65:A5:25:33:26:9B:D2:19:81:3A:52:03:AF:DD:9E:5D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfR7ZaUlMyab0hmBOlIDr92eXb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/633ff4-46e8-4204-b636-2413782c7166/1/hfR7ZaUlMyab0hmBOlIDr92eXb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:14:72:d7:af:7b:d8:07:a1:8b:78:b4:02:8a:8b:5e:74:68:
13:84:e0:be:08:26:46:60:7f:67:97:81:b7:71:59:de:90:3b:
8f:74:b1:4e:a5:ec:10:bf:23:2b:cb:1f:fa:a0:ec:d4:19:8c:
83:1b:5e:4e:d3:9f:fe:a5:c3:be:94:c3:d2:9c:2d:54:1c:24:
3d:df:e6:c5:15:b3:8e:14:a1:6b:84:bc:b1:70:87:c3:d9:75:
c8:45:05:f1:bc:9f:8b:ec:b4:7a:39:f7:ed:09:d0:f6:fa:74:
97:ac:67:40:cf:b7:d9:bf:43:2c:86:be:ea:9a:b3:4e:6a:0f:
7f:c7:ed:e0:5d:3a:cf:dc:bb:8e:3a:61:91:96:cf:15:ea:9f:
42:f9:a7:f6:aa:10:b8:1f:ea:c4:9b:23:64:ca:39:96:79:44:
93:7b:ad:48:77:f9:75:d4:1e:a9:2a:28:fa:22:e7:42:63:aa:
56:f4:d4:a6:af:dd:a3:0c:0d:03:aa:3a:b5:2a:6b:91:f4:9f:
55:94:43:3a:0f:d1:d8:90:37:e8:e1:84:30:74:c0:28:49:1d:
cf:f8:8d:14:33:d1:bc:01:ca:f4:38:98:53:ea:9d:35:e5:e1:
17:8f:71:53:dc:35:e3:34:91:85:68:dd:99:b1:26:40:a7:d0:
f0:f4:8e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:25 2026 by rpki-client