Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File: hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier: ZJBRrz1ScWlJs7Ki3oIS+nmQZUIIZl1j8P/WYcpZpz8=
Subject key identifier: 5D:F9:81:38:FB:95:9D:E8:1A:20:33:16:B0:08:5A:AA:3E:EA:38:3F
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 01A0897A7A7B5EEB2BE985F1D9C8CED975D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number: 18CE
Signing time: Thu 10 Sep 2026 04:01:40 +0000
Manifest this update: Thu 10 Sep 2026 04:01:40 +0000
Manifest next update: Fri 11 Sep 2026 04:01:40 +0000
Files and hashes: 1: VpPJ4ZzReaEohaymqptLaOAjr1o.roa (hash: lqwSOhzaFJrXfe0L7Qw99FbYMDPv5g1eewbWIKteNLY=)
2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: 3ZcvoWw+DlTJUJYgjINGmxl0zlCMXSRgR0dYlG3+e50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:7a:7b:5e:eb:2b:e9:85:f1:d9:c8:ce:d9:75:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Sep 10 04:01:40 2026 GMT
Not After : Sep 11 04:01:40 2026 GMT
Subject: CN=5df98138fb959de81a203316b0085aaa3eea383f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:95:7d:69:f6:1a:53:7b:33:61:61:c8:b9:
90:31:8e:d8:d1:5b:3f:de:30:c6:47:b9:4d:52:1b:
a4:eb:73:0d:55:99:a2:9b:ac:ba:64:53:9a:d1:2f:
1c:69:15:c3:d8:9a:75:d0:f0:b7:f5:0f:c5:a4:7f:
8b:97:c7:9b:f3:81:ee:36:fe:63:a3:87:c8:2a:de:
b0:83:ae:fd:59:29:6a:11:c9:9b:af:3e:93:4b:b8:
84:09:e5:23:1e:1d:e8:64:44:08:60:e8:c9:ad:41:
5e:a2:72:d2:dd:9c:9d:54:19:9e:6a:96:7a:ae:29:
c3:1e:dc:5a:17:53:08:e1:e1:e0:06:ff:28:34:af:
72:61:d8:76:3c:86:75:ed:9e:82:7c:b1:de:1d:90:
fc:ad:43:f1:4d:f9:b8:9c:89:b7:82:78:29:af:b4:
4b:12:9b:79:cb:82:fb:5c:91:2c:8b:27:0c:9b:ce:
6e:16:c2:9c:f1:cd:06:23:3f:8d:b7:04:b1:93:62:
78:7a:6b:a8:ac:61:b5:cc:89:c8:c4:58:ed:00:19:
54:ae:3f:22:f6:a8:c7:c0:cb:1e:2f:3e:af:e5:6f:
87:aa:b8:b3:0e:eb:a1:82:50:57:f9:3d:4c:27:30:
8f:e4:9f:46:79:22:ad:8e:c1:ea:7f:a2:a1:12:ed:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F9:81:38:FB:95:9D:E8:1A:20:33:16:B0:08:5A:AA:3E:EA:38:3F
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fa:f2:2e:35:f3:85:92:21:c1:aa:19:38:97:f5:b8:ff:84:
17:45:df:bf:25:92:24:8f:70:62:a7:7f:de:d9:53:62:48:ce:
e4:b5:3f:45:07:ff:a8:3d:a6:e0:59:b0:13:0f:1d:fa:e3:3b:
b8:47:05:39:50:e7:53:32:86:3c:bb:1c:57:fb:c9:7a:ea:47:
2c:e6:90:27:7c:49:14:0b:c9:ef:ed:bc:98:85:a6:67:f1:c8:
3e:aa:83:d3:bd:d1:09:98:9a:d6:e5:f2:46:4a:32:3a:33:7f:
0e:e2:2c:c9:25:1e:70:87:6c:56:41:91:bc:25:4f:0e:63:84:
37:bd:2b:52:4d:96:e2:aa:cd:c4:fb:d9:59:d4:a7:92:9d:fc:
74:ec:1d:1e:31:1f:a3:b9:39:01:19:8e:62:61:fd:dc:cc:3c:
71:5e:00:1d:db:5c:d6:5d:97:f1:ef:d2:8b:8d:c2:59:b5:ee:
b5:79:dd:e8:03:57:c5:22:5f:e6:53:cb:c9:45:93:21:b3:2b:
fb:ba:1b:ff:22:3a:4a:e9:0e:ea:ba:83:de:ef:67:80:43:d1:
56:55:ea:64:81:cc:8d:fd:a0:68:6e:ba:7b:75:fd:c1:45:3b:
c0:e3:5c:de:f5:54:fe:3b:e8:55:e1:af:d1:a8:db:f7:4a:a0:
b3:d8:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:02:18 2026 by rpki-client