Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
File: hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft (raw, json)
Hash identifier: ThJWR5Gv4bRTIXRYgtgtZWtXO9PtdqAUbsu8uCWv1kk=
Subject key identifier: 3A:6A:3F:3A:78:B3:03:21:FE:C8:D9:4B:D9:62:1C:94:18:70:5A:B7
Authority key identifier: 84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
Certificate issuer: /CN=84f590ca62c246440583818c31f2573a0f50ffd0
Certificate serial: 01A08AC3D7885741D61BE0820614B227BFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
Manifest number: 0E5B
Signing time: Thu 10 Sep 2026 10:01:25 +0000
Manifest this update: Thu 10 Sep 2026 10:01:25 +0000
Manifest next update: Fri 11 Sep 2026 10:01:25 +0000
Files and hashes: 1: hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl (hash: EZoA5eEk78sYi5WF5sauE2dE3pfLE3vBfbM846amH+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:d7:88:57:41:d6:1b:e0:82:06:14:b2:27:bf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f590ca62c246440583818c31f2573a0f50ffd0
Validity
Not Before: Sep 10 10:01:25 2026 GMT
Not After : Sep 11 10:01:25 2026 GMT
Subject: CN=3a6a3f3a78b30321fec8d94bd9621c9418705ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:89:25:23:28:be:fe:5a:3e:aa:e5:fd:43:1b:
e3:95:96:05:35:fb:89:63:b3:d7:1c:65:c0:88:43:
a9:6d:b7:6c:69:9d:19:8d:36:9d:bf:b9:35:4a:d9:
4a:dc:44:73:da:c5:8f:0a:5b:39:86:20:ed:76:db:
91:19:5a:56:3f:c9:8f:61:b5:69:4e:7a:8b:cb:10:
62:ff:78:6c:15:9b:6e:2c:36:8e:8d:1b:87:89:a5:
61:88:47:5e:e1:84:15:81:1b:6f:54:e0:d3:4a:5d:
95:8c:d5:9f:71:32:e5:10:88:1f:0b:2d:c7:f0:01:
56:0d:45:bf:a0:0f:e0:dd:32:19:ad:1a:31:44:bd:
de:5b:19:0a:f8:c6:4e:fa:68:29:c0:50:a8:44:b4:
01:a7:fe:60:22:1e:ec:91:a8:f2:92:bc:59:fd:8c:
ad:8d:dc:9e:51:ec:65:86:e5:9c:74:ec:83:bd:fc:
3f:7f:26:b4:06:b9:d9:c7:92:0e:da:71:a0:b6:10:
8d:1b:8b:8c:da:99:a8:b5:f6:b6:d0:16:d4:51:88:
9d:c6:c6:7f:a8:93:19:f6:c4:d3:c7:86:a2:90:78:
c5:00:26:f2:f5:06:4a:ee:45:eb:b3:14:ef:e9:a2:
da:b3:ef:3a:39:a5:9d:62:e3:d9:7f:98:6b:5c:43:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6A:3F:3A:78:B3:03:21:FE:C8:D9:4B:D9:62:1C:94:18:70:5A:B7
X509v3 Authority Key Identifier:
keyid:84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:29:e9:5d:62:88:d6:8a:11:10:b5:0e:74:49:c2:46:36:e4:
a5:01:19:93:3e:38:51:1c:9b:96:5c:27:a5:3f:c1:90:54:fa:
95:b6:64:dc:1a:8c:00:df:c5:66:12:e9:29:92:b7:86:74:9c:
57:a2:79:e8:66:f7:a3:92:fc:d7:d6:5e:ee:b8:d2:69:e9:13:
98:c8:ef:80:ab:8c:5f:d1:c0:8a:3a:60:86:b5:7a:da:81:89:
a0:75:9d:f4:b9:82:76:a4:cb:df:9f:09:77:94:86:bf:43:b0:
01:12:d1:81:b1:d8:6c:c9:48:c9:98:5c:6f:6c:c5:48:06:5b:
8a:4c:cb:ae:12:08:a8:2d:bc:6c:17:78:73:85:fc:79:bb:dc:
5e:79:ef:cd:b2:3d:d4:c8:5d:47:21:7c:71:2a:32:35:43:fc:
93:11:47:35:d9:33:c5:6a:e7:ab:54:b0:e3:4b:42:a4:33:6e:
5d:f9:99:13:a8:65:34:eb:e0:a3:3f:57:b2:69:4e:7a:bc:00:
d3:ed:31:dc:c9:3e:2a:c5:d6:a8:a8:4d:d9:63:fc:3a:49:9d:
26:aa:6a:6f:d2:1b:3b:cb:a8:f9:12:6f:7a:ae:57:0f:52:5a:
34:08:d0:91:cd:9d:a6:10:73:a5:be:9e:41:bb:3e:b2:be:33:
18:08:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:19:08 2026 by rpki-client