Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
File: hheg4tbmBy6I03dN18z78HochjI.mft (raw, json)
Hash identifier: kALE8Z9W1FPTsBBDGsXzAeMhBtZmIdrO5eXwx1mI9f4=
Subject key identifier: 8B:ED:C6:FE:AE:61:8F:20:F5:F4:2E:65:E0:3F:C1:E5:C5:2B:FD:FA
Authority key identifier: 86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
Certificate issuer: /CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Certificate serial: 01A08979F15DD37436BFE71DC5C02270FEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
Manifest number: 1638
Signing time: Thu 10 Sep 2026 04:01:05 +0000
Manifest this update: Thu 10 Sep 2026 04:01:05 +0000
Manifest next update: Fri 11 Sep 2026 04:01:05 +0000
Files and hashes: 1: hheg4tbmBy6I03dN18z78HochjI.crl (hash: fsOIrsgZKv9HSG5IWyQ0dOQnMIEEYNYS1RCvSuWpMsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:f1:5d:d3:74:36:bf:e7:1d:c5:c0:22:70:fe:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8617a0e2d6e6072e88d3774dd7ccfbf07a1c8632
Validity
Not Before: Sep 10 04:01:05 2026 GMT
Not After : Sep 11 04:01:05 2026 GMT
Subject: CN=8bedc6feae618f20f5f42e65e03fc1e5c52bfdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:f3:8c:ed:2c:91:b3:d6:f5:3a:78:8d:2c:
b2:f2:de:81:35:fd:43:66:9e:e1:99:5f:06:e7:4d:
ac:21:00:f1:59:ee:20:cb:52:7e:a9:31:9d:eb:6c:
8f:cc:5e:4b:49:52:89:5f:15:3c:4b:b4:c8:2a:75:
ff:99:80:89:0c:50:40:b9:94:21:54:1e:d6:75:88:
be:df:8a:21:68:25:9c:cc:dd:01:97:85:1e:82:33:
ae:b9:a0:b6:0a:02:e3:4c:96:23:41:ed:6a:46:d3:
e9:16:da:d1:68:e2:87:b9:30:ce:db:30:da:b9:0e:
38:cb:b5:44:d0:e7:04:37:85:52:8d:26:87:1a:5f:
08:e1:67:56:4e:80:38:22:a7:d5:9c:fa:8e:be:27:
f3:04:28:9b:da:33:33:31:c1:ce:03:e1:88:ec:d5:
db:4f:1f:f6:e4:d2:78:bf:80:43:c3:ee:42:e9:18:
13:0b:f0:45:62:e6:3f:7e:27:ed:fa:eb:4e:84:8f:
c7:61:3f:e0:47:47:a6:f0:84:59:a8:59:51:6c:47:
74:2d:30:5b:c4:be:56:5e:83:a3:8a:1a:00:23:28:
2d:77:6e:6b:a2:1e:ca:44:7d:72:75:ee:e4:7a:67:
9c:c3:be:83:ab:86:5c:e2:06:0e:5e:5d:f7:27:1f:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:ED:C6:FE:AE:61:8F:20:F5:F4:2E:65:E0:3F:C1:E5:C5:2B:FD:FA
X509v3 Authority Key Identifier:
keyid:86:17:A0:E2:D6:E6:07:2E:88:D3:77:4D:D7:CC:FB:F0:7A:1C:86:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hheg4tbmBy6I03dN18z78HochjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2d18af-5892-407f-b968-ebdc32a6ab27/1/hheg4tbmBy6I03dN18z78HochjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d4:08:ae:3f:77:ed:5e:3e:b4:d0:14:c5:6a:c2:94:45:2b:
6a:f6:c5:2d:24:e4:0a:c8:e1:e9:7c:5a:1b:18:72:e9:38:e3:
b3:40:ce:4c:21:fa:0f:fc:14:e2:dc:84:06:f5:fd:67:34:36:
eb:47:1e:23:d1:da:49:3d:64:61:73:e8:dd:b4:04:d1:db:e9:
0d:d2:ae:36:fb:bb:30:b8:c2:3e:18:2e:fc:86:8f:20:f6:c3:
3f:50:d9:2c:87:ab:d3:fc:be:57:c1:55:c6:66:7a:95:e8:ad:
01:bf:ae:6f:8a:ce:8f:47:cb:1c:18:89:5c:5f:f5:c3:ba:47:
cd:33:8e:be:8b:ca:40:e1:c4:76:93:30:9a:89:7f:8b:8f:58:
26:56:d3:d2:a9:69:b1:bd:de:8f:9a:65:56:91:71:d1:33:86:
43:22:6c:d4:b4:04:cc:48:52:b7:e9:83:06:44:86:8c:60:36:
fb:b7:b6:e4:7b:ba:72:33:de:2c:32:30:1a:48:b0:ff:b7:12:
df:b3:ad:92:39:05:91:a4:e1:35:b8:52:93:a2:d6:e6:24:b4:
13:ac:5b:7f:d3:a2:79:bf:02:87:bf:31:a9:3f:4c:c2:4b:12:
48:93:b4:3d:92:00:ca:df:8c:fb:00:70:c3:12:03:23:17:9f:
1b:c1:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:56:14 2026 by rpki-client