Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
File: cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft (raw, json)
Hash identifier: xs2ZePQkcCMbJra9UYSDrFIrG703d0aFl1KoqEeU65g=
Subject key identifier: A2:B3:37:52:38:CA:CD:2D:E8:8C:27:2E:C3:E8:B2:8D:56:B9:47:BA
Authority key identifier: 70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
Certificate issuer: /CN=7072134a2255580a91f06936cf82fb0023f06c42
Certificate serial: 01A0EA090E507AB2D2E0FD1FE9EF8E11AE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
Manifest number: 0180
Signing time: Mon 28 Sep 2026 22:00:57 +0000
Manifest this update: Mon 28 Sep 2026 22:00:57 +0000
Manifest next update: Tue 29 Sep 2026 22:00:57 +0000
Files and hashes: 1: LrwsLYGATYrWrHHLDkqfghD5lvE.asa (hash: xSUEF8kVB96PvQCwAkm6dj5euHLOM2XZx7Zr4kPkTDE=)
2: cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl (hash: mvRjQo038MU8nAh+kvm3lVQ3PyjWdZLT+pMEaTBL4II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:0e:50:7a:b2:d2:e0:fd:1f:e9:ef:8e:11:ae:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7072134a2255580a91f06936cf82fb0023f06c42
Validity
Not Before: Sep 28 22:00:57 2026 GMT
Not After : Sep 29 22:00:57 2026 GMT
Subject: CN=a2b3375238cacd2de88c272ec3e8b28d56b947ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:62:93:cd:15:54:c9:ad:7c:4e:45:e1:64:
e0:92:a7:71:a8:22:0d:db:05:e2:ef:d9:ce:af:29:
69:eb:08:40:d7:1d:22:54:40:f3:49:cd:f8:99:66:
04:d9:fc:a8:ec:c2:4f:0d:43:24:23:f1:3b:06:60:
5a:63:88:bc:19:31:5d:67:b2:38:5c:45:c2:3d:77:
b5:8d:87:a8:48:10:23:ba:c6:05:14:83:24:bb:f5:
b9:3f:ca:85:20:d4:64:77:e1:71:f6:a7:cb:ee:08:
33:0a:d6:ba:68:09:13:2e:9f:26:dd:28:19:a9:9c:
19:47:fc:be:1e:8e:17:bd:a5:53:e9:d6:83:9b:5b:
f3:3d:a5:a8:08:6e:26:d8:7a:c9:1b:ff:a6:e4:b5:
96:97:c4:9e:46:83:fa:09:9b:8e:28:e1:3d:57:23:
fe:7f:c7:1f:db:6e:b8:47:83:cd:a8:2b:63:7f:7a:
cf:c9:9e:ea:29:39:28:a1:02:dd:76:05:5c:8d:7c:
77:42:3c:08:9f:11:a5:92:f9:09:31:fb:ca:56:a8:
69:59:09:99:86:f6:e5:50:cf:16:0c:37:e2:75:a4:
f9:ae:5a:5e:f1:23:93:0f:e9:e6:8d:5f:d8:c4:c3:
8d:7e:47:61:91:ea:d6:d2:22:a5:83:8f:c9:30:10:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B3:37:52:38:CA:CD:2D:E8:8C:27:2E:C3:E8:B2:8D:56:B9:47:BA
X509v3 Authority Key Identifier:
keyid:70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:81:d7:29:b3:1b:a6:42:ce:69:f8:59:9c:d8:44:d1:4e:6f:
e2:42:cf:f5:41:09:00:12:04:ab:10:74:72:e3:b6:da:a1:be:
ab:3c:b5:e0:43:9d:24:30:6a:d2:d9:85:8d:7d:a6:f9:d0:8f:
76:fc:78:2e:6e:63:01:77:cd:6c:41:9a:27:88:e2:98:cd:6e:
b3:29:6a:16:b2:64:c2:89:e0:dc:47:f1:7c:29:b4:c4:01:c0:
1e:42:38:34:2c:57:0c:e0:bd:0e:8c:35:dc:5a:59:a4:d4:23:
57:a0:e6:77:7f:28:7e:d6:42:4a:fb:6d:2d:12:75:28:ec:33:
92:4a:e0:df:ec:d5:da:1d:a8:3a:9a:18:96:64:71:55:99:0e:
cf:49:ec:db:af:bf:72:6f:23:ad:78:39:20:00:e9:62:f1:45:
2d:02:bb:c7:a6:ab:94:f9:f9:db:01:af:e8:65:3a:4b:60:1a:
22:b6:b3:bf:91:7d:50:b0:19:a2:88:75:30:41:91:13:ec:bf:
e5:45:4a:ff:d6:af:96:ba:2c:5f:1c:86:d2:e9:2f:4a:6b:2f:
2f:74:54:6f:a5:90:4a:b5:bb:58:c2:a2:35:66:7d:e2:72:c7:
58:f0:3d:27:46:01:e0:9e:fe:16:ba:b6:55:dd:1d:db:ce:d8:
9b:86:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:28:10 2026 by rpki-client