Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
File: hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft (raw, json)
Hash identifier: 1+NSmkOtjou3rEzF0XL+6+zWRNuS1WkloXK6AMIe1+w=
Subject key identifier: 10:48:F8:FD:8A:59:77:BC:04:CA:2D:C0:4A:36:FF:5B:9D:17:47:FE
Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
Certificate issuer: /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Certificate serial: 01A125AFE294EF7F7B34BEF4716B338CFC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 12:00:46 +0000
Manifest this update: Sat 10 Oct 2026 12:00:46 +0000
Manifest next update: Sun 11 Oct 2026 12:00:46 +0000
Files and hashes: 1: 8rQFycP0wCkWTOuHRSr62IO8dgE.roa (hash: MFuuptNilDQ2/pqjlNHx2pqwg9aDYbH9lFzucSAdE5E=)
2: hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl (hash: GWSDIMVvICEbsbuNt5phJJ0kOoFX+1zzOFCUydqdBmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:af:e2:94:ef:7f:7b:34:be:f4:71:6b:33:8c:fc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Validity
Not Before: Oct 10 12:00:46 2026 GMT
Not After : Oct 11 12:00:46 2026 GMT
Subject: CN=1048f8fd8a5977bc04ca2dc04a36ff5b9d1747fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:bf:a7:00:98:f6:33:9d:db:a0:a2:a5:f2:
77:a6:73:f7:39:38:20:8b:ec:1b:0b:cf:2e:fb:60:
a0:3e:7e:33:83:b1:9f:d6:d9:7a:e5:ee:e5:d8:de:
2a:cf:2b:af:31:39:97:e5:72:ec:f1:7c:1a:85:4c:
53:bc:7f:96:57:bc:69:a8:2c:60:59:d4:08:0b:29:
97:e2:ab:84:c3:5b:65:a6:34:5a:dc:ca:02:38:83:
e9:80:bd:57:28:08:9d:44:32:bb:b7:9d:fe:74:2e:
e3:33:05:4e:fc:db:66:2b:8d:81:01:3e:90:37:07:
e3:ce:7c:94:f2:df:31:40:1c:e0:46:6d:c3:08:1b:
10:c7:dd:d3:1f:bd:53:7d:b6:f4:5f:b4:b1:f6:a1:
b9:dd:cf:0f:af:64:d3:24:2e:4b:8c:34:09:e6:e9:
55:5e:41:c4:9c:5b:dc:33:21:69:c6:c9:28:ff:36:
fb:7d:02:f9:8c:9a:c2:22:27:c3:8a:e2:d0:1d:35:
cc:09:44:49:f0:e2:e7:ea:5b:9e:71:1b:b1:2d:d3:
fb:f9:3e:51:a5:09:f1:53:a9:f0:7e:ef:3c:6b:e0:
cd:fe:5a:07:10:d6:aa:f4:78:56:e5:08:d5:32:1d:
b0:66:c5:a0:2c:55:7e:f1:69:df:fe:fa:c2:53:a0:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:48:F8:FD:8A:59:77:BC:04:CA:2D:C0:4A:36:FF:5B:9D:17:47:FE
X509v3 Authority Key Identifier:
keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4e:32:9d:34:d5:80:f0:5b:2d:f6:d2:c6:1b:35:7e:7f:1f:
ac:dc:8f:cf:d6:f8:7a:2e:39:0d:06:e7:14:ea:42:1d:d7:a6:
76:75:fb:b0:00:78:7f:9f:54:84:6a:cc:be:16:37:66:02:2c:
2b:cd:ab:cb:92:3f:60:11:39:89:b5:fc:1d:8f:9f:1e:87:21:
b0:92:16:6c:4a:30:ce:2c:e2:35:cd:81:35:fa:62:c6:99:61:
f4:24:09:c3:88:1c:aa:e7:85:f4:2e:db:85:aa:b7:0e:2f:2d:
66:54:7b:25:11:d1:bd:a9:d5:5e:7b:cb:ac:38:23:c6:20:ee:
e6:ff:53:73:5b:ef:02:80:92:dd:b0:9a:24:65:7e:39:72:68:
4b:19:20:d3:6a:3c:22:99:3f:1c:d5:f8:7c:aa:4d:cf:68:16:
91:d6:2a:3a:6c:b0:f6:f9:11:f0:ba:90:19:fa:42:57:1e:70:
0a:3e:fa:ce:5a:b1:51:a4:09:85:f9:3f:85:ee:ad:f6:8f:7f:
28:59:7b:2e:2b:2d:01:2a:89:17:cb:a7:45:c6:d4:ee:32:4c:
51:2a:e7:c5:ea:12:c1:ff:09:87:10:51:bd:5d:64:3f:f1:0b:
df:f7:24:f4:5d:3b:d4:3c:57:b7:a5:e7:c4:95:10:37:d3:75:
d2:a0:86:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:06:24 2026 by rpki-client