Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
File: hjT51JOsy2gJAPRHofLJ97KzWKw.mft (raw, json)
Hash identifier: /eYa8DHm/N4qyiDnXIlZ/ojG81aI/Ym2QUe1dwNkGzs=
Subject key identifier: DD:0F:43:8A:0B:1D:7B:85:85:2C:19:35:61:0D:04:3E:33:48:8B:17
Authority key identifier: 86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
Certificate issuer: /CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Certificate serial: 01A08C0D554741B07FA0D3709BF7BB5DC633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 16:01:19 +0000
Manifest this update: Thu 10 Sep 2026 16:01:19 +0000
Manifest next update: Fri 11 Sep 2026 16:01:19 +0000
Files and hashes: 1: hjT51JOsy2gJAPRHofLJ97KzWKw.crl (hash: LvKhp5BVaYXVKhxNPD/bwVcrTsNGVFzGXSqb2qaTdjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:55:47:41:b0:7f:a0:d3:70:9b:f7:bb:5d:c6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8634f9d493accb680900f447a1f2c9f7b2b358ac
Validity
Not Before: Sep 10 16:01:19 2026 GMT
Not After : Sep 11 16:01:19 2026 GMT
Subject: CN=dd0f438a0b1d7b85852c1935610d043e33488b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:af:8f:1f:02:6f:43:19:d3:c0:20:56:7e:
96:30:6e:d5:0f:53:9d:4c:d0:01:7c:66:74:21:d0:
d9:8e:75:e9:67:01:33:3b:0b:d6:e8:f9:5e:ac:c3:
06:f9:12:63:0d:52:aa:c4:a9:3e:da:52:72:43:b3:
39:3e:8b:ea:67:d0:1c:a3:2e:32:9c:68:19:c4:af:
53:0d:5e:1c:16:a8:1f:89:42:bc:a6:f1:33:ea:e0:
37:d6:51:c4:b7:79:8e:8f:a4:92:d0:02:f1:99:ca:
60:d7:36:43:fb:16:7c:48:07:2f:2a:a4:9a:85:ec:
93:98:0b:a6:cf:20:3d:e7:81:0b:2c:ed:43:47:f8:
6e:68:0a:f1:6c:3d:84:5b:e9:9a:86:1a:b9:03:01:
6a:1a:1f:f2:dd:9a:20:42:55:d7:f8:1c:ef:b6:ad:
f3:12:c5:b5:b2:f4:74:b8:0d:91:fc:cc:3d:a9:0e:
36:ee:c8:ec:b2:a5:cb:5d:6b:57:9d:b3:a5:78:6d:
96:0d:19:3b:8a:46:d3:5c:6e:2b:76:6b:b5:77:42:
ca:6a:28:7e:b3:ab:28:d0:43:b3:5b:b5:99:17:aa:
b3:74:b9:de:b3:1f:60:08:ae:3a:7b:d8:9e:cf:f9:
84:56:39:6d:4f:28:af:49:4f:a6:ef:5b:f9:e5:9e:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0F:43:8A:0B:1D:7B:85:85:2C:19:35:61:0D:04:3E:33:48:8B:17
X509v3 Authority Key Identifier:
keyid:86:34:F9:D4:93:AC:CB:68:09:00:F4:47:A1:F2:C9:F7:B2:B3:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjT51JOsy2gJAPRHofLJ97KzWKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/530255-b6e5-45fc-b776-b430bd21a29b/1/hjT51JOsy2gJAPRHofLJ97KzWKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0c:1f:80:39:74:8a:39:87:2a:fb:3d:e5:cd:54:0c:fa:73:
fd:07:37:1d:1d:5d:2b:13:54:5a:f9:38:ea:a0:a8:ba:d6:51:
f3:90:1f:f8:24:90:63:b2:ad:0c:d5:69:57:c7:79:63:be:10:
90:7c:4a:5e:f2:26:f8:e9:09:f4:ed:46:fc:d1:eb:91:7b:b2:
1a:8d:0a:68:f9:41:0e:fa:9e:5a:66:50:89:cd:bd:4a:e5:ba:
23:5e:18:b5:4c:b5:ae:5d:9e:ab:15:96:d4:a6:ab:ad:2b:70:
cf:1e:15:5d:85:55:2c:ad:be:15:d1:26:0b:bd:71:c7:d2:cd:
36:5f:33:d8:48:05:db:55:d9:10:7b:50:4f:23:a5:93:38:3b:
05:84:9e:7f:55:a0:b7:da:3e:56:26:0c:d4:27:e8:18:4e:35:
f6:fe:a4:46:23:74:3f:46:9b:21:ce:b9:ce:69:ed:d5:c8:42:
7b:80:b0:5c:b1:05:b7:a6:57:e4:98:76:c2:50:7f:5a:50:19:
44:b2:88:cd:7e:9b:22:0d:d3:b1:a6:b9:9c:42:d9:af:e1:d7:
10:1d:73:65:64:20:5d:e7:37:dc:65:1c:86:21:84:58:0b:d2:
44:70:e7:90:9b:b5:48:f2:09:52:f3:3b:a5:c7:86:2d:59:05:
fb:13:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:36:36 2026 by rpki-client