Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/Hs7lk0EFyYtTclVktPdHu6e0UcY.mft
File: Hs7lk0EFyYtTclVktPdHu6e0UcY.mft (raw, json)
Hash identifier: KpvSGc0hD/VTEPISv5YYRQsi5EraHO4qdPg6hZ1TY/E=
Subject key identifier: 9D:6F:BB:D0:8A:D0:36:AD:ED:10:D4:4F:54:D2:04:A1:8E:3D:7C:66
Authority key identifier: 1E:CE:E5:93:41:05:C9:8B:53:72:55:64:B4:F7:47:BB:A7:B4:51:C6
Certificate issuer: /CN=1ecee5934105c98b53725564b4f747bba7b451c6
Certificate serial: 01A08A8CC51CA39A97D8EF4898477F2B0E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hs7lk0EFyYtTclVktPdHu6e0UcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/Hs7lk0EFyYtTclVktPdHu6e0UcY.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:16 +0000
Manifest this update: Thu 10 Sep 2026 09:01:16 +0000
Manifest next update: Fri 11 Sep 2026 09:01:16 +0000
Files and hashes: 1: 9fiT-dO7XPwFcEwx0HZP2sS9UxA.roa (hash: qEn0+InsBxH+mpCDmqSBzcIIMnrAvNNmhijeZpT72pU=)
2: Hs7lk0EFyYtTclVktPdHu6e0UcY.crl (hash: fBsd6WUCqZbvbQplOCSRgcAygtirUMSrOJVKnjpjPNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/Hs7lk0EFyYtTclVktPdHu6e0UcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/Hs7lk0EFyYtTclVktPdHu6e0UcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hs7lk0EFyYtTclVktPdHu6e0UcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:c5:1c:a3:9a:97:d8:ef:48:98:47:7f:2b:0e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecee5934105c98b53725564b4f747bba7b451c6
Validity
Not Before: Sep 10 09:01:16 2026 GMT
Not After : Sep 11 09:01:16 2026 GMT
Subject: CN=9d6fbbd08ad036aded10d44f54d204a18e3d7c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:67:60:10:b3:6c:6e:d6:d1:89:d6:0f:48:
9e:c6:72:de:bb:30:3e:d2:bb:0d:dd:75:55:a8:fa:
b8:7f:93:b4:50:58:0d:38:8b:0b:07:41:39:b1:db:
55:75:95:10:6b:a7:03:da:6c:6d:8c:1c:28:a3:f4:
81:36:00:96:00:36:df:fd:e0:38:56:e5:40:58:03:
cf:f8:d4:64:62:18:b4:14:30:e2:94:90:5e:b0:f0:
b0:d6:ce:86:05:cb:ae:da:ed:38:bc:a3:86:63:d0:
73:65:fe:cd:3f:93:ed:9a:6c:1d:0c:53:5f:e5:ec:
e3:e4:96:9e:30:cd:a1:8a:d9:4c:27:fc:b2:d0:90:
ad:2d:06:23:dd:36:83:73:8d:9f:af:f7:c4:2e:b2:
27:d4:23:99:6b:2f:ab:a1:b2:6f:71:e5:e7:31:62:
eb:11:f0:8d:96:0b:00:73:85:40:6e:bc:14:a3:74:
be:3f:f8:c4:01:74:a6:52:de:5f:93:32:5f:a6:50:
39:d1:af:fa:7b:ae:da:a9:a3:e5:32:00:18:a0:73:
9b:55:b5:60:4e:e4:4a:56:19:d0:f8:8c:30:c0:d1:
12:66:2b:0d:d1:fc:82:d4:aa:d1:47:24:3a:d5:1b:
da:78:bb:f8:02:be:57:2e:c9:c7:8f:5a:32:5b:52:
a4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6F:BB:D0:8A:D0:36:AD:ED:10:D4:4F:54:D2:04:A1:8E:3D:7C:66
X509v3 Authority Key Identifier:
keyid:1E:CE:E5:93:41:05:C9:8B:53:72:55:64:B4:F7:47:BB:A7:B4:51:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hs7lk0EFyYtTclVktPdHu6e0UcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/Hs7lk0EFyYtTclVktPdHu6e0UcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/Hs7lk0EFyYtTclVktPdHu6e0UcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d7:8f:80:48:f7:33:dd:34:18:fa:ed:cb:ab:6d:c1:7e:f7:
c3:67:be:f1:a4:06:6a:a0:26:e2:bd:86:42:7f:b9:b3:94:7c:
f6:fd:ab:0d:d4:b7:90:ef:5a:76:23:99:5a:53:20:61:6c:42:
8b:b2:73:ab:cd:f3:22:43:2a:cc:28:fc:38:dd:c4:83:7c:81:
8a:ee:b5:56:da:56:3d:11:5d:72:36:73:22:8f:94:d3:65:00:
83:96:e7:db:9d:e3:3f:b1:75:e7:1f:f4:bb:6a:03:45:7b:fa:
85:8b:3d:66:da:8c:21:c3:85:20:00:b5:a5:97:80:b7:8f:d0:
d1:80:de:09:96:8e:02:0e:e9:8d:00:df:50:7d:9d:cc:d4:78:
f9:9f:5f:cb:95:05:82:24:44:da:6d:5a:cd:ff:17:e6:f9:cf:
04:ea:0e:8b:72:f3:23:6f:ae:2d:1e:b9:e5:34:6c:61:8b:3d:
c0:cf:bb:34:e5:be:f9:b9:4a:12:42:1f:d7:50:03:64:3e:aa:
a9:63:8e:82:0b:e5:7b:f0:22:f8:2e:87:d0:fd:03:69:90:95:
2f:0d:11:2f:a3:ec:52:22:0a:6a:e2:2b:70:83:8f:f2:0e:07:
51:90:a7:bd:43:1d:9d:aa:1e:90:2d:54:7e:f0:05:66:86:04:
a9:ae:20:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:34:35 2026 by rpki-client