Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: WThdGCCfdqM30U9YXGyrn9SDnP4xSfsdlNspF2UsJJU=
Subject key identifier: BD:04:57:21:AF:8A:70:BC:D9:13:3E:01:EB:B9:9C:D3:26:10:1C:36
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 01A128E7EBE5D65BB20B5F3EE2649C107B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 1A98
Signing time: Sun 11 Oct 2026 03:00:50 +0000
Manifest this update: Sun 11 Oct 2026 03:00:50 +0000
Manifest next update: Mon 12 Oct 2026 03:00:50 +0000
Files and hashes: 1: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: ZzigCAxz06fgCjHGoJlBn8jEuXA2TrDLnpOr0JIgvuA=)
2: jGp8qngPwrRcfMZ46Nc0uXv4tqI.roa (hash: W/pO2gP/Hnrcu+Gr8iHWv61QQmdy+1W+lWNUobK5q7E=)
3: wtGM5BsZqPclLmQJVZ4Qugj0xo0.roa (hash: 2XlLOO+ABU/ZZshWxT2yxE7ljUn/cRbzQybAhDOI4UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e7:eb:e5:d6:5b:b2:0b:5f:3e:e2:64:9c:10:7b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Oct 11 03:00:50 2026 GMT
Not After : Oct 12 03:00:50 2026 GMT
Subject: CN=bd045721af8a70bcd9133e01ebb99cd326101c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:86:a3:28:5c:3a:65:02:a2:a7:65:1f:79:
e8:73:ce:6b:2f:71:f0:5e:34:75:5a:c6:88:27:0f:
7d:b3:6a:64:9b:5f:af:52:31:0b:2c:d3:2f:ee:3f:
0c:65:5e:52:7b:6e:67:6e:bf:ad:90:6b:fe:64:8f:
95:c7:c6:33:b3:5d:53:5e:02:f5:8c:c4:93:3d:6f:
19:80:65:7e:71:4c:ea:e7:47:c0:8c:75:12:bf:9f:
3c:f4:ea:c6:08:86:f0:cf:12:09:b4:47:47:e5:f6:
89:20:ab:5f:89:cb:f9:cf:d6:35:f1:36:79:16:b7:
32:1a:5e:a0:e0:45:c6:66:f8:7c:50:39:1e:6d:35:
33:38:58:00:b3:bc:e7:cd:9c:cf:6b:b4:71:82:29:
88:8e:37:83:a0:89:14:33:9e:b2:52:b3:67:8b:8a:
d2:08:09:17:90:97:6b:f2:66:4c:62:37:55:54:2a:
ef:b8:64:12:e0:f0:4c:82:df:28:a8:5c:0c:45:8e:
57:30:58:4d:a3:b0:f4:0d:24:b4:3f:16:7c:4b:61:
d9:a3:e6:27:33:00:d2:ff:14:78:8a:df:08:38:e0:
6b:6b:6b:ed:c9:0f:8e:1b:9f:b4:fb:6a:96:d8:2c:
56:7a:6a:59:b8:2a:93:8f:59:6e:c3:71:b4:21:28:
37:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:04:57:21:AF:8A:70:BC:D9:13:3E:01:EB:B9:9C:D3:26:10:1C:36
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5a:f1:3c:0c:ae:51:60:c8:70:85:c3:ab:57:d3:cb:66:7b:
f3:fe:09:8e:ec:e7:21:ec:13:a5:06:58:76:9b:83:80:c2:95:
07:bf:44:de:95:c4:e0:25:61:cc:23:2b:05:43:26:56:9b:5b:
aa:01:80:fb:f1:0c:4f:e3:db:49:c8:34:88:e5:a1:06:16:5a:
c7:06:39:c9:e5:6c:72:dc:28:1a:de:81:f5:a0:ae:1d:71:fe:
5f:96:85:e3:df:1a:b0:30:80:cf:e9:fc:06:4e:c3:7f:b9:7e:
ea:c0:94:e0:22:ed:ca:10:cb:93:22:58:c0:54:8e:b7:1a:5e:
38:dc:db:e0:e7:56:25:52:0f:80:ed:f4:23:5a:70:ae:db:0a:
81:71:21:41:5f:52:e1:5b:9d:c8:cd:1f:22:45:9d:5b:df:9e:
3a:fd:29:eb:7d:0d:fb:f5:50:80:b5:8f:46:c7:d6:b3:5b:14:
87:20:d7:17:b5:0d:0a:66:d6:4e:ef:1c:89:7c:1e:60:38:4b:
9a:60:4e:4f:67:ec:57:57:3a:c8:98:5a:b7:0d:41:5b:42:dc:
53:87:21:53:99:3f:ab:43:af:0e:38:7a:31:66:60:16:41:33:
64:c4:35:78:30:28:a7:fa:8d:20:d4:0f:ad:c7:c3:43:c5:50:
cd:e8:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:09:16 2026 by rpki-client