Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
File: hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft (raw, json)
Hash identifier: CFX0b9rtDLXExih/dZTf/wUjgcUYDr8O0jG10X4D4pM=
Subject key identifier: 7C:78:9D:2B:C5:D0:AF:F9:F1:5D:54:AE:EE:CE:C4:11:70:9B:0F:88
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 01A03B9551CAB2683310AB8E9B28B8CB4DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
Manifest number: 035E
Signing time: Wed 26 Aug 2026 01:00:36 +0000
Manifest this update: Wed 26 Aug 2026 01:00:36 +0000
Manifest next update: Thu 27 Aug 2026 01:00:36 +0000
Files and hashes: 1: hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl (hash: NZV8OpX2kBUpun6HIsyeEY6FxEDcXJFwYJbGnJjU+AA=)
2: ouVL9f4Kp01QdxrOilk4XOoPv2E.asa (hash: BkjPDfglBBFYk69JDCryPzYQnQSRslBsIgc8pXRMNs0=)
3: qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa (hash: 4IfXp7dyRNjrRdAgPWfTKulvifdvK1AOsusHD7QgNHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:95:51:ca:b2:68:33:10:ab:8e:9b:28:b8:cb:4d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: Aug 26 01:00:36 2026 GMT
Not After : Aug 27 01:00:36 2026 GMT
Subject: CN=7c789d2bc5d0aff9f15d54aeeecec411709b0f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:ac:aa:e6:35:56:a6:87:89:be:d2:c1:d6:
f2:f0:01:83:70:e6:ca:d3:df:30:ea:93:ac:7d:46:
ae:f4:a7:00:80:4a:e1:0e:41:9c:dd:12:e7:b4:e6:
a5:a8:5f:b0:2e:e2:7c:95:76:ef:d1:cf:cf:0c:d7:
71:61:a3:4d:e7:07:1d:88:96:87:4b:4c:d5:ed:93:
14:1d:39:d7:82:ff:6b:11:4f:63:92:e0:48:30:3b:
08:0b:65:d0:59:70:18:58:f8:61:de:6c:b1:35:30:
a7:bf:2b:1e:62:3e:53:0a:1a:25:ac:b2:b9:40:8d:
ee:71:9b:bd:cf:18:23:1a:93:7f:87:55:d5:51:42:
83:e1:13:79:6d:2a:a2:e0:3b:c3:dc:7e:a9:4b:46:
18:97:16:7f:bf:09:cb:1a:54:91:d9:c4:42:f8:d3:
15:bb:89:86:55:fa:6e:c2:c2:44:2f:73:56:0e:17:
4f:5a:33:b4:2d:f3:53:6c:4b:e1:ed:23:9d:dc:0e:
7c:29:c7:62:88:34:8a:90:e6:89:9d:df:cc:e9:a2:
36:7b:e6:37:75:69:af:d9:70:db:9f:6d:72:05:76:
30:58:8b:8e:a3:80:ec:6a:26:2f:29:86:55:88:94:
24:69:bf:b2:ca:00:29:04:1f:26:2a:81:29:5a:ea:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:78:9D:2B:C5:D0:AF:F9:F1:5D:54:AE:EE:CE:C4:11:70:9B:0F:88
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:42:f0:18:87:2d:0a:74:08:31:7b:a7:4a:91:1b:9d:ee:6b:
61:28:25:a0:2f:23:89:5e:ef:f2:32:82:fb:a0:66:c4:8c:64:
95:c6:cd:03:92:c7:1b:ab:c4:00:ac:24:60:f9:87:85:a8:5c:
bf:5f:c7:e6:22:54:83:b1:a3:77:81:63:9f:a0:9c:d1:ee:95:
f7:ad:d0:4e:a9:4f:89:41:10:61:d5:22:91:41:f9:38:6c:45:
12:23:36:6f:b4:55:63:d7:e6:b6:13:a6:99:12:b3:4f:01:ee:
d0:30:05:29:7b:22:95:1a:c7:6a:b6:bf:9b:67:6c:a8:21:c3:
33:0a:e2:5f:a3:0c:0f:46:48:05:ce:83:c4:8f:67:fc:ab:70:
7e:a0:67:88:80:91:1d:24:2d:8e:02:67:c2:32:ac:33:90:5c:
94:6e:dc:ca:f3:67:49:7e:06:77:9f:f1:50:0c:6a:c3:fb:26:
7c:20:d8:77:74:56:ef:8b:0e:59:34:ba:5e:5f:54:d8:45:e2:
ae:9b:61:93:73:02:21:f2:48:a5:86:1c:dc:71:03:9b:41:c9:
22:58:3d:2b:3c:5b:25:41:86:72:2e:d3:bb:1a:49:5b:d5:23:
6c:29:76:d1:65:fb:d8:ae:a7:9d:3e:64:5e:75:7d:13:10:ba:
29:0b:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:05:30 2026 by rpki-client