Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
File: hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft (raw, json)
Hash identifier: nB9AhVhMz+RSoyPyOX9658569mO5VdILknGA4AbvSGQ=
Subject key identifier: 69:D1:4B:41:4F:C5:D4:DC:93:3B:E1:59:EC:69:2E:BA:45:F5:18:B8
Authority key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Certificate issuer: /CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Certificate serial: 01A08B9F5561529CA0DBC82EB2BCBDF45930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 14:01:10 +0000
Manifest this update: Thu 10 Sep 2026 14:01:10 +0000
Manifest next update: Fri 11 Sep 2026 14:01:10 +0000
Files and hashes: 1: d2YpPYTenafvZ_RaINu156L8Uwo.roa (hash: CMTonUYiOCRZMLmytRZF7eJJ3JvO2VABjeLXssmZVNw=)
2: hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl (hash: tWsn/CYDXc7DenZ4hD2sZXcYMqTb1w3hVpD4rTbBuNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:55:61:52:9c:a0:db:c8:2e:b2:bc:bd:f4:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Validity
Not Before: Sep 10 14:01:10 2026 GMT
Not After : Sep 11 14:01:10 2026 GMT
Subject: CN=69d14b414fc5d4dc933be159ec692eba45f518b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:7b:20:cc:41:c8:cd:89:3e:36:9e:2d:fb:
cc:e1:bb:51:3f:26:4c:2c:c3:36:72:28:6e:62:64:
0c:b2:c2:8d:37:2e:ea:bb:31:b1:22:36:2a:c3:fa:
6c:c0:4b:01:9d:2e:95:7f:c4:06:6a:7e:8c:9e:c5:
96:3c:43:a9:0a:f0:8c:05:19:af:a8:e3:01:1b:4a:
18:d7:7d:07:59:cc:bb:92:09:4e:09:e3:76:c9:66:
c2:f7:c5:94:a0:00:23:1e:2b:5a:a9:da:b1:df:f5:
c3:c5:42:cb:53:e8:39:31:68:a8:c7:d4:8b:5f:ae:
62:e0:f8:89:43:d5:ac:44:37:0d:46:92:23:c4:3b:
87:e9:7d:08:47:bb:f9:11:c6:d9:64:4d:8d:59:6f:
43:46:6c:0b:98:c2:ae:25:f1:86:5d:a3:6e:d0:f4:
67:eb:15:97:25:da:55:80:06:56:24:53:72:6c:8a:
b3:51:f4:73:e8:80:1e:85:73:96:67:06:5c:de:a0:
e3:38:98:78:60:bf:91:12:53:e6:4b:44:00:1e:7b:
46:5d:f4:51:39:9c:fd:0a:db:3c:2e:bb:24:f3:11:
29:e5:5d:a9:77:5a:81:61:ce:ed:05:48:ed:e7:24:
14:18:a6:a2:d3:f8:b4:58:29:fa:21:0a:2d:cf:c4:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D1:4B:41:4F:C5:D4:DC:93:3B:E1:59:EC:69:2E:BA:45:F5:18:B8
X509v3 Authority Key Identifier:
keyid:85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:38:c6:ef:74:40:5e:80:f9:54:5f:06:87:37:e5:08:ce:86:
a6:ed:a4:c9:59:0d:72:ac:04:ff:53:4c:8a:4a:26:12:88:97:
4f:87:80:7f:49:bd:85:0f:6b:cc:6b:ae:9c:82:f1:e2:e2:b2:
fb:4b:29:22:6b:19:e8:d9:81:cc:d3:58:53:cc:f3:78:69:bf:
fd:9f:b4:a8:e4:90:c4:49:1f:c6:c7:4b:59:af:74:89:18:a7:
a2:f1:f2:56:df:2d:e2:2b:06:88:f3:91:06:5b:18:f9:bc:f7:
dd:4f:11:10:f0:65:f5:e6:dd:c1:e1:dd:3d:8b:8d:30:92:32:
bc:0c:a6:77:cb:bd:98:0c:9a:63:38:3d:43:87:55:fa:8f:88:
fc:68:50:74:82:24:f1:9c:28:1b:99:c9:67:47:7e:f8:c9:27:
43:ba:81:56:e2:46:44:0e:4b:c1:fb:43:21:0d:ae:89:69:2d:
e9:28:dd:ce:fc:45:57:0c:fc:9e:fe:0d:56:08:70:a5:98:39:
96:f4:ef:66:d0:c7:5e:fc:8a:53:80:de:f8:27:66:ab:a3:15:
80:2e:a0:18:e3:61:19:9c:2d:3e:f4:f4:af:23:39:5e:08:a7:
7c:15:1c:01:4a:16:ed:b1:ec:53:4c:ec:59:d5:30:52:d8:b9:
8a:f8:c7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:09:56 2026 by rpki-client