Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: ASZ04QaGgKwh93e/VsZwjqtlQxAPJU0eKguZDx5sAhY=
Subject key identifier: D2:CA:36:38:AB:CC:95:7F:ED:74:E3:59:67:0B:AD:3B:AE:87:AE:F6
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 01A08C43B86406652334C1B51D69620960CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 17:00:43 +0000
Manifest this update: Thu 10 Sep 2026 17:00:43 +0000
Manifest next update: Fri 11 Sep 2026 17:00:43 +0000
Files and hashes: 1: MiEsRtqbk8f9Jyv8IyxMZOx2e2E.roa (hash: 0+M0KN/0qMyXVee1yKyBcwMkTGKxSKcvVUW4ZAOcFIQ=)
2: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: PlgXm2Sp0fY0SbzI6n7mti0JUU4NngiQg6jgsElQCN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:b8:64:06:65:23:34:c1:b5:1d:69:62:09:60:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Sep 10 17:00:43 2026 GMT
Not After : Sep 11 17:00:43 2026 GMT
Subject: CN=d2ca3638abcc957fed74e359670bad3bae87aef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:b6:ec:a7:87:46:5a:da:9b:61:d9:de:8f:
6c:78:7a:99:99:aa:74:83:82:64:3d:21:78:9a:c8:
26:3b:bf:22:7a:3c:1a:4d:cc:42:79:47:d5:80:9a:
94:4f:ca:0c:4e:33:10:7e:3a:42:28:37:31:c3:3e:
60:a0:b6:dc:a3:09:a8:ee:92:99:0a:3c:28:fc:b5:
5a:1f:65:af:26:e3:1f:63:d6:8c:a0:81:60:44:f1:
3e:e4:7c:ee:03:16:dd:28:d7:31:c6:33:4f:b7:d1:
9d:81:21:cc:2e:0d:9d:dd:00:91:71:c1:82:02:98:
5f:36:5b:59:8c:79:4d:06:54:32:b6:fd:f8:dd:a4:
22:49:05:5d:ce:c9:7b:b7:b8:db:4a:d5:41:ee:d5:
1f:44:88:78:c8:70:28:a8:9f:f8:d0:43:1f:61:90:
ad:15:ae:35:58:d3:67:82:54:ec:7c:38:00:fe:b5:
a4:f0:cb:b9:76:5f:c1:22:bd:dd:a5:dd:68:c4:1f:
05:62:71:db:49:b5:7c:46:61:f0:9b:6b:76:b5:c2:
c1:3c:7a:f1:4c:b0:60:f3:bf:3e:2f:86:05:85:51:
b8:bb:48:4f:93:58:27:63:8b:09:42:c1:22:e5:f6:
d5:b3:f5:77:70:3c:8f:de:02:25:1e:c2:03:93:27:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CA:36:38:AB:CC:95:7F:ED:74:E3:59:67:0B:AD:3B:AE:87:AE:F6
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5c:f8:01:08:92:a1:79:e8:9f:de:44:a8:e0:e1:f9:5c:2e:
99:f9:87:48:8a:d0:4e:f8:6c:e0:30:9e:52:c3:e2:a0:8e:a0:
bc:e8:5a:1c:c2:cf:f9:5d:16:6d:5f:88:e8:d0:64:e6:27:f4:
37:86:a2:a5:1b:be:d2:3b:10:62:25:8f:82:e7:f5:63:6a:0b:
db:1a:98:32:9b:04:3f:39:24:ea:1e:a0:d7:fb:ea:5b:1a:49:
15:52:7a:7f:d9:b5:20:c7:87:fb:fc:c8:67:6f:23:85:67:c1:
32:7b:53:eb:02:11:4c:af:bc:93:a0:23:09:b5:f8:bd:7a:11:
e8:23:97:62:4a:7c:c4:5b:ed:01:20:1d:d2:50:27:87:04:90:
80:40:2b:d2:67:97:ff:c6:19:a6:e0:15:97:0d:f4:0c:85:a8:
e0:5e:b0:51:fd:06:16:b7:73:e9:e2:07:f1:35:b6:77:d2:76:
f5:00:0f:32:63:6f:77:1c:aa:a1:48:06:8c:7a:3e:de:81:75:
39:04:dd:b9:d0:9e:6d:4c:a0:2f:5b:a5:9a:a1:5b:80:ea:7e:
2a:55:0d:3b:3d:d6:02:81:2e:f1:42:8d:be:37:1f:1a:09:9d:
94:e1:51:6a:44:99:cc:c1:56:ce:39:ca:11:e5:68:8b:3b:92:
40:88:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:34:35 2026 by rpki-client