Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
File: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft (raw, json)
Hash identifier: 6LlfWS+xH65onLBdFJw9YzcUXJ1YMQnJrLamA+5/BI4=
Subject key identifier: 72:CB:F4:7A:9E:2F:BC:E1:6D:F9:D0:8A:B8:7E:21:87:81:E7:1A:C5
Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334
Certificate serial: 01A08B9EE8FFE75759568A29DD162464EF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
Manifest number: 162E
Signing time: Thu 10 Sep 2026 14:00:42 +0000
Manifest this update: Thu 10 Sep 2026 14:00:42 +0000
Manifest next update: Fri 11 Sep 2026 14:00:42 +0000
Files and hashes: 1: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl (hash: KF7QolwLDgONduTA5BbdDKicLvySS0l7C4IOOyczgMA=)
2: kgXtGX7XX872ZBmOaDQBG_SxnRk.roa (hash: +MHedL/253Pk+HAeX+TuqGjfyagOjaX7b4uRsR/dtbs=)
3: l8bTPf1K3Wz0ZzSyAeVgoKWs9x4.roa (hash: ysJ6WNI/AvY+WY1s/27Bn0HCO1zRM3PLaycskEsYrV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:e8:ff:e7:57:59:56:8a:29:dd:16:24:64:ef:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334
Validity
Not Before: Sep 10 14:00:42 2026 GMT
Not After : Sep 11 14:00:42 2026 GMT
Subject: CN=72cbf47a9e2fbce16df9d08ab87e218781e71ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:f8:62:65:a8:3e:8c:31:33:cd:82:5a:f4:
4a:b5:57:67:0c:f6:2a:5a:6d:8d:18:06:e7:e0:21:
6a:9d:ca:15:2f:60:61:ec:a5:8d:9b:b3:7c:f3:28:
b5:a7:d3:8d:53:25:11:a4:33:de:58:5e:b9:0f:25:
18:e8:6b:09:0c:8e:20:d0:55:f0:cb:f1:46:31:85:
98:9b:19:d8:6f:3f:b5:b7:8e:73:a7:fe:5e:60:d9:
bb:34:c2:2d:5c:13:5a:d3:70:99:0b:0c:c0:98:38:
ab:65:01:f4:70:ea:24:cd:90:6b:3e:84:2b:0c:de:
0b:67:07:10:2d:b2:e6:45:f4:02:38:86:17:ac:a1:
1c:40:c8:e3:dc:5a:5b:c0:8a:f0:61:94:b8:5f:f2:
1d:9b:71:fc:58:ba:09:14:5d:ae:0c:25:bb:36:0e:
e1:af:9b:e5:ec:41:9e:00:2e:65:72:84:c2:75:8e:
ae:0f:26:82:90:3e:de:ef:ab:a9:2f:90:25:d2:37:
80:34:ad:70:7c:e9:d9:70:99:76:e3:4b:aa:c6:6e:
99:24:d5:c9:95:ca:b3:b7:68:fe:6e:88:25:e2:b3:
8e:25:94:79:57:49:65:9d:22:c6:f5:a9:df:65:9f:
ca:3b:b8:eb:05:d8:f8:eb:c6:bc:ed:1a:da:c6:a0:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CB:F4:7A:9E:2F:BC:E1:6D:F9:D0:8A:B8:7E:21:87:81:E7:1A:C5
X509v3 Authority Key Identifier:
keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b7:0b:4f:d9:ef:63:26:50:20:26:73:88:94:54:61:96:0c:
f1:14:09:5b:0d:c1:f0:3d:71:f4:b5:d3:52:6d:87:aa:55:48:
1d:88:e9:03:24:c3:f7:af:cd:19:6e:25:89:8e:24:99:d1:a0:
14:7d:90:dc:ae:fc:9b:7f:b1:84:40:25:03:30:94:f4:cf:3d:
50:d0:2f:e1:72:14:a3:cb:b6:6c:4d:8c:1c:b3:19:55:aa:c1:
ea:1b:f2:63:db:c5:42:e3:40:7f:95:f3:ae:88:90:87:de:b1:
bf:4b:fe:c4:e1:e5:77:d5:e9:71:4d:c3:84:9c:8b:1d:7d:58:
ec:be:98:dd:b8:ac:3e:19:0c:80:4a:86:46:8a:cb:24:13:b4:
0a:1d:e2:48:20:0d:3c:d6:d2:db:f7:63:06:5c:1c:b9:c8:81:
a7:fd:c4:39:2f:09:65:56:d7:9b:db:af:b4:79:7e:d1:4c:3b:
4c:0f:19:83:3c:a9:5a:66:6b:88:26:04:7f:be:c3:6e:4e:a8:
a5:bf:63:28:54:fd:99:8b:49:98:de:1f:8f:05:1c:08:d8:ee:
1a:52:e7:a0:4b:1a:72:1c:6b:a1:ce:71:a2:04:40:2c:54:c5:
f6:4a:5e:83:e8:b2:15:8a:aa:4c:39:57:b7:7b:a9:94:dc:e9:
92:58:d2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:34:13 2026 by rpki-client