Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: OGshFoq5SOIqM7copWCgKm7UzBIBoayXq+SO14fa0DI=
Subject key identifier: 3D:F2:31:A7:C0:3B:AA:5A:D0:D3:7C:FE:22:DE:C8:DD:F9:8F:78:61
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 01A08BD5B5CF403ACA3D490CC33555C90CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 02CB
Signing time: Thu 10 Sep 2026 15:00:33 +0000
Manifest this update: Thu 10 Sep 2026 15:00:33 +0000
Manifest next update: Fri 11 Sep 2026 15:00:33 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: DjHxZ+jcw9xhrxknbGzjJbTuvn1oEJaZDHjrbm5tr5c=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:b5:cf:40:3a:ca:3d:49:0c:c3:35:55:c9:0c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Sep 10 15:00:33 2026 GMT
Not After : Sep 11 15:00:33 2026 GMT
Subject: CN=3df231a7c03baa5ad0d37cfe22dec8ddf98f7861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:dc:17:45:0d:e0:a2:77:03:b0:6d:0f:08:
5a:eb:7e:5e:8b:67:f5:76:8f:0d:ef:8b:29:44:37:
03:8a:8c:c9:cb:50:a0:72:bf:a5:bc:b8:f4:7a:20:
67:72:0f:40:52:6d:90:2f:cf:81:cb:63:25:1b:a2:
ba:bb:0b:9a:27:74:8f:82:fe:5b:dd:5d:55:2e:75:
b3:ff:78:dc:20:d9:96:8f:bb:c2:f6:86:10:04:48:
2b:fe:58:de:90:a5:c5:27:b6:e5:24:3e:f7:68:05:
d2:59:67:fb:f6:5f:75:83:dd:ba:00:b7:67:d3:40:
a8:81:9a:48:99:4b:0b:ae:cf:89:98:57:f1:16:e5:
3d:d4:de:6e:6c:d6:e4:e9:94:da:16:94:ae:1a:e0:
68:53:cc:1c:ec:bf:12:bd:4e:b5:4b:04:05:7f:ab:
9d:ec:b7:31:bb:c7:a9:9e:57:6c:ad:b7:31:1f:99:
9d:a1:1f:39:43:66:08:71:8e:9c:d0:ae:9a:40:e3:
66:2e:42:f8:7c:32:22:b4:3d:f0:5e:2d:08:49:ea:
77:e4:6a:de:32:c0:c2:38:48:ce:99:22:b1:6e:6d:
c6:fb:a7:b4:53:1f:a7:6c:98:cf:ba:8e:3d:cf:50:
34:a8:e0:17:2b:57:4c:b2:7d:d2:b4:87:61:86:db:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:31:A7:C0:3B:AA:5A:D0:D3:7C:FE:22:DE:C8:DD:F9:8F:78:61
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:15:47:9a:08:a9:03:c7:ed:42:5f:62:70:27:dd:30:fc:63:
95:b4:d4:ff:1c:64:f8:9f:cc:11:0f:c5:7a:36:f7:03:9b:fb:
28:af:bd:50:e2:d9:4b:e4:6f:51:94:aa:fa:40:3c:32:2a:80:
85:2f:41:20:df:10:9a:0f:d2:12:ed:91:69:40:1e:1b:4d:a2:
34:72:1a:1f:5a:00:d5:02:a0:a9:ed:03:e9:a5:b8:2a:b1:42:
74:d2:53:ce:fb:0f:3f:20:63:a0:32:83:12:03:45:ae:fb:ef:
5f:64:f4:fa:7d:d7:da:73:ee:34:42:36:61:1b:ed:82:4d:60:
03:8e:58:8b:fe:87:8f:e1:3d:92:d0:d6:c3:c0:78:52:98:fb:
78:6c:dc:7f:a5:c3:a7:b0:3c:89:67:00:d1:a4:bc:8e:18:c7:
76:45:35:e0:42:13:62:bb:b9:ff:d3:13:02:63:52:b2:5e:fa:
e4:83:5a:72:97:48:79:0a:20:0a:7f:e2:9d:bf:62:57:eb:9a:
0d:92:c2:5c:37:af:a2:40:7f:f5:5a:fc:4a:2b:c8:9b:06:ba:
a7:3f:4d:4c:4d:c7:c1:e0:46:77:8e:e5:ee:1e:04:b3:5e:fd:
76:16:ca:ed:5c:95:41:da:b1:44:b1:fb:2b:e9:4a:25:9f:98:
63:ef:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:57:09 2026 by rpki-client