Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
File: hp2fc3396q0-lfhm6NMqZsT4oLI.mft (raw, json)
Hash identifier: 7IMe9EmAEdxxZZpwIXhJw+5ijE/7HzKzOCiWXWuE/yY=
Subject key identifier: 19:A9:DD:4A:4C:DC:69:F0:3E:10:6F:AB:52:36:8F:C7:23:6D:48:70
Authority key identifier: 86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
Certificate issuer: /CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Certificate serial: 01A10FCCA0360DC3DDEF132627C28C6EA635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
Manifest number: 0106
Signing time: Tue 06 Oct 2026 06:00:30 +0000
Manifest this update: Tue 06 Oct 2026 06:00:30 +0000
Manifest next update: Wed 07 Oct 2026 06:00:30 +0000
Files and hashes: 1: 7Tyv75qflu1MI2EbiYIYOe-EMOs.roa (hash: VD2V/Wqx8qVUzX6JNvOF1zN+nPxKD5Y7QjXuUoG/ZVc=)
2: hp2fc3396q0-lfhm6NMqZsT4oLI.crl (hash: TsC8qOCaIdj3WfvUQX3ZumfNr9KOMxI6CXhX0V7Jr6Y=)
3: ylnh5jHJGqU5w3NKWDSXLJQlbV8.asa (hash: DhXmkIGv0YJ5BrhiAQaTPI3U/c809JbcweCxcOd5t5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cc:a0:36:0d:c3:dd:ef:13:26:27:c2:8c:6e:a6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Validity
Not Before: Oct 6 06:00:30 2026 GMT
Not After : Oct 7 06:00:30 2026 GMT
Subject: CN=19a9dd4a4cdc69f03e106fab52368fc7236d4870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:da:62:dc:be:57:b4:4d:0d:15:e1:3e:3f:85:
7d:c0:5b:7a:0f:95:ff:7a:20:7b:25:41:f2:4e:e9:
e0:21:03:6d:e2:a4:12:a5:5d:04:9b:65:13:80:38:
0e:5c:da:8f:f6:8e:4b:f8:c2:4d:ea:0a:59:aa:a3:
92:fd:b9:c8:6b:18:21:84:7a:8f:9a:83:70:1d:d2:
f7:76:ac:5f:c4:b8:d1:19:9c:b9:72:1a:b1:6e:ee:
4d:c5:17:1d:49:b0:dc:86:b6:05:42:2c:ca:cb:b7:
0b:bd:01:6f:a0:51:35:42:e0:c7:c2:e4:df:ad:43:
cd:48:7c:0e:2d:bd:9d:a6:cd:1e:96:bf:4d:07:9f:
ab:94:c3:5f:12:0b:03:08:14:17:0c:4d:71:1c:a0:
3f:81:4a:05:60:d6:ac:fb:32:42:76:47:33:eb:00:
0b:d0:f9:05:b3:94:da:4f:74:c2:d1:df:68:42:50:
49:9e:63:00:83:01:a5:a7:1b:5b:36:95:23:d6:35:
5a:f6:7c:a2:7e:f0:f5:b9:f0:e2:7b:7f:a0:12:d0:
0d:de:47:91:cf:71:b7:62:ee:74:a3:fd:b6:e5:b0:
f8:ec:f8:1a:f8:1c:f1:2f:8f:51:cc:06:68:e4:84:
1d:b1:68:fa:cc:5d:51:b2:87:c5:fe:f0:80:b1:00:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A9:DD:4A:4C:DC:69:F0:3E:10:6F:AB:52:36:8F:C7:23:6D:48:70
X509v3 Authority Key Identifier:
keyid:86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e8:49:ab:8d:32:3a:de:67:58:07:3b:26:52:3c:9a:cb:c1:
39:d1:3b:de:fc:c3:a2:2e:6a:c7:ef:fc:b9:8b:c1:1e:77:a2:
82:e4:e3:5b:f8:98:2c:a5:2d:fc:6d:f1:14:86:4c:f0:11:e8:
36:24:18:de:0c:4a:9f:70:ad:fc:da:67:5a:ca:5b:c9:ae:14:
ae:5b:ce:b8:46:19:8f:01:a1:a6:72:81:ca:b9:0b:aa:16:e6:
44:0d:bc:08:d1:a4:1f:9f:99:9e:af:c1:4a:e2:3d:de:d9:a6:
aa:20:ac:fa:45:22:28:41:84:36:fb:ff:59:48:66:de:5a:fb:
15:9b:a3:11:f5:95:0d:bb:34:a9:51:72:16:c6:5c:00:83:31:
37:b3:74:53:b7:97:a1:96:36:44:4a:f4:0b:3e:cf:2e:87:40:
56:d8:e9:8b:e0:0b:84:76:cf:6c:0b:9e:3d:f3:7a:11:4c:d0:
9c:7d:82:d9:57:b0:b5:d9:33:ed:a6:03:93:d5:5e:f2:88:ac:
1a:56:8c:3d:ff:05:87:95:b3:4f:8d:70:31:52:3c:78:e3:5f:
da:53:98:25:ad:86:35:85:7a:a1:a4:e4:2d:51:71:f7:31:a2:
7f:dc:86:7c:17:1f:4d:17:68:82:a9:49:6c:ce:5f:0c:e8:6d:
d7:d1:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:22:49 2026 by rpki-client